Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/326131333a656534303a3430303a3a2f34302d3430203d3e20313939313038.roa
File: 326131333a656534303a3430303a3a2f34302d3430203d3e20313939313038.roa (raw, json)
Hash identifier: qnVGtF65wN6v5KimG0qY2l4gcB+7fpJNoI8Cd7PVCjM=
Subject key identifier: 24:6E:3B:40:F4:CB:DF:EF:DC:94:8D:21:80:D1:2C:E0:FE:08:4E:FC
Certificate issuer: /CN=9da23cc2cf88ae4585cf8aaf9a714a9ad2e6f198
Certificate serial: 1667D6AAD5804B742FCF37F105F73CC17E08A7CA
Authority key identifier: 9D:A2:3C:C2:CF:88:AE:45:85:CF:8A:AF:9A:71:4A:9A:D2:E6:F1:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naI8ws-IrkWFz4qvmnFKmtLm8Zg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/326131333a656534303a3430303a3a2f34302d3430203d3e20313939313038.roa
Signing time: Sat 02 Dec 2023 04:47:26 +0000
ROA not before: Sat 02 Dec 2023 04:42:26 +0000
ROA not after: Sat 30 Nov 2024 04:47:26 +0000
asID: 199108
IP address blocks: 2a13:ee40:400::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 23 Jan 2024 05:21:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:67:d6:aa:d5:80:4b:74:2f:cf:37:f1:05:f7:3c:c1:7e:08:a7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da23cc2cf88ae4585cf8aaf9a714a9ad2e6f198
Validity
Not Before: Dec 2 04:42:26 2023 GMT
Not After : Nov 30 04:47:26 2024 GMT
Subject: CN=246E3B40F4CBDFEFDC948D2180D12CE0FE084EFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:11:b5:98:d0:ba:9c:f0:74:4f:ff:ad:37:
08:f5:41:90:68:32:94:7b:7f:55:60:8d:47:1f:ff:
03:f8:1c:e9:ec:52:ec:3a:03:9e:09:5f:ac:b4:20:
9e:43:17:a0:63:b3:19:5b:d9:c2:67:62:e4:d6:15:
4d:b6:5a:bb:8c:1f:17:5e:2c:68:aa:a9:ff:29:10:
d1:2c:d0:df:56:41:0c:fd:2b:93:c9:91:03:2b:b4:
e3:b5:6a:4e:39:9a:8a:ce:44:bf:9f:62:fb:7f:bb:
ad:78:f2:20:71:5b:4f:ed:1c:3f:bf:6c:3b:9e:c8:
77:a4:1b:a4:62:be:46:12:52:d7:78:c2:3a:b8:5c:
3b:50:33:50:9d:32:db:bd:79:91:83:4f:e0:f9:ba:
5d:19:22:62:6c:51:86:f2:fc:b0:eb:d8:18:f8:5a:
6b:16:b0:e2:8c:a1:3c:49:e8:d5:4d:83:8b:e5:78:
69:d5:2f:17:ec:74:3e:cb:ed:8e:bf:9f:44:1e:22:
f0:5c:cc:3d:40:4a:fb:2f:9a:5e:09:57:df:c5:fc:
d7:db:88:0c:e0:f7:db:30:31:70:54:b6:93:cf:13:
03:d6:dc:7f:e7:71:a0:40:9a:7a:f6:da:ca:9a:d1:
35:62:b1:b9:7f:27:20:2a:bb:55:9a:d6:ed:c2:12:
fa:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6E:3B:40:F4:CB:DF:EF:DC:94:8D:21:80:D1:2C:E0:FE:08:4E:FC
X509v3 Authority Key Identifier:
keyid:9D:A2:3C:C2:CF:88:AE:45:85:CF:8A:AF:9A:71:4A:9A:D2:E6:F1:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/9DA23CC2CF88AE4585CF8AAF9A714A9AD2E6F198.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naI8ws-IrkWFz4qvmnFKmtLm8Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/326131333a656534303a3430303a3a2f34302d3430203d3e20313939313038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ee40:400::/40
Signature Algorithm: sha256WithRSAEncryption
71:c5:a1:e0:e5:de:1a:a0:6e:6d:c0:3f:16:4f:a0:9f:ea:69:
89:6b:2c:2c:d5:82:30:f3:18:0f:4b:6a:b1:56:7d:d7:16:ca:
4a:26:8e:a7:80:e6:30:3c:33:54:3a:ae:37:90:0f:03:ad:b5:
a2:87:16:71:97:57:1e:fa:78:68:86:a5:82:ac:d0:68:23:af:
a9:51:24:48:4c:31:54:8c:d5:a4:3e:d6:b5:85:7f:9c:a1:e7:
92:8b:f1:ee:de:03:df:d6:c9:23:bc:fc:77:24:62:21:a8:d6:
23:32:17:8b:fb:46:49:31:f8:c8:0c:db:72:b3:af:e2:a0:57:
1c:0e:c8:bd:e8:00:77:67:7d:c8:e0:de:e4:e8:ba:c6:fe:db:
4d:32:82:02:39:69:4f:03:a9:de:b8:2b:68:6b:8e:d1:5b:71:
f9:43:10:f2:12:6e:6d:7b:57:bb:98:c4:71:8f:1c:d1:5d:d8:
d2:4a:12:7b:f1:0f:54:b4:15:b4:76:0f:3f:93:63:3e:35:7a:
ef:26:43:24:ec:27:01:0e:db:4b:d1:89:cf:14:93:95:0c:37:
56:49:0b:06:ff:d0:d3:82:31:2a:bb:66:5f:c5:d9:dc:ad:76:
aa:09:0b:ba:5d:1d:3d:ca:1d:81:f2:88:3e:27:29:3b:d7:c0:
25:8b:74:1a
-----BEGIN CERTIFICATE-----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Generated at Tue Jan 23 06:52:48 2024 by rpki-client on console-ams.rpki-client.org