Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a653030353a3a2f34382d3438203d3e20323135393738.roa
File: 326131333a656634343a653030353a3a2f34382d3438203d3e20323135393738.roa (raw, json)
Hash identifier: A7EQw530otmDFJy6rS4OMa1CD85g+gOE3KTPkdChtRM=
Subject key identifier: 54:E6:D9:0A:C2:34:CC:67:1E:B0:9C:59:A2:8C:D4:99:3C:DA:C0:07
Certificate issuer: /CN=c3044238bb4721d91399f8b02719dfd22edf0087
Certificate serial: 2628502D4EFF8B1832D31D462854FFB8BD7606B6
Authority key identifier: C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a653030353a3a2f34382d3438203d3e20323135393738.roa
Signing time: Sun 17 Dec 2023 15:48:55 +0000
ROA not before: Sun 17 Dec 2023 15:43:55 +0000
ROA not after: Sun 15 Dec 2024 15:48:55 +0000
asID: 215978
IP address blocks: 2a13:ef44:e005::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:28:50:2d:4e:ff:8b:18:32:d3:1d:46:28:54:ff:b8:bd:76:06:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3044238bb4721d91399f8b02719dfd22edf0087
Validity
Not Before: Dec 17 15:43:55 2023 GMT
Not After : Dec 15 15:48:55 2024 GMT
Subject: CN=54E6D90AC234CC671EB09C59A28CD4993CDAC007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c8:b6:6f:f0:1d:2f:62:fd:34:a8:72:69:f1:
a2:c1:c3:07:a5:75:d5:01:b4:24:41:3e:94:3b:75:
20:59:8e:8c:2b:5c:cc:f5:63:be:80:b4:d8:8d:e0:
2f:c4:ef:f0:71:96:bc:16:6a:4f:04:e9:19:80:50:
4e:bb:a5:f5:75:4d:85:1b:d6:eb:ed:2f:ee:f4:35:
e4:ef:07:41:ed:72:42:5e:21:0a:4f:a4:d3:28:38:
50:5d:30:c2:0c:ab:d8:6d:9b:83:b5:b9:ad:46:f3:
4b:ca:e9:8a:7c:d6:60:1c:24:ff:71:7d:04:12:ff:
70:43:f5:66:ce:53:d5:fd:14:15:b9:9a:06:12:c5:
97:71:0f:8a:04:10:98:b5:4d:01:3c:bb:68:5c:63:
24:cb:d3:7c:48:57:92:f2:e3:1f:09:86:01:4c:2c:
1b:83:b9:9e:73:d9:c6:9e:ad:25:53:c5:c1:b8:02:
67:f4:eb:3c:d7:71:5c:cf:01:97:1d:e7:a1:f3:74:
22:85:f2:48:f6:e8:c0:36:3a:2e:28:42:e1:65:d8:
01:c1:7f:4c:50:d1:85:88:6a:5b:c7:09:7b:2e:93:
23:de:59:de:cf:b8:b5:df:b0:6e:7a:60:6a:68:e0:
65:8e:f4:6f:53:47:e1:06:d6:12:12:44:f9:c4:c7:
62:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E6:D9:0A:C2:34:CC:67:1E:B0:9C:59:A2:8C:D4:99:3C:DA:C0:07
X509v3 Authority Key Identifier:
keyid:C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a653030353a3a2f34382d3438203d3e20323135393738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ef44:e005::/48
Signature Algorithm: sha256WithRSAEncryption
6a:38:28:90:22:3d:eb:ca:12:07:84:8e:8e:b2:c6:1e:9f:d3:
b8:1d:5e:bc:1f:f7:eb:df:21:07:14:c6:7c:b9:7a:4b:e2:ad:
2b:ee:81:c1:c9:b0:66:5b:19:4d:26:3d:46:c1:f7:11:b8:65:
50:89:d1:00:28:e9:df:e3:51:2a:31:a3:58:f8:e6:54:16:4d:
81:d6:23:ec:87:e7:11:12:fd:ca:86:81:be:bc:35:91:97:a6:
6b:23:d0:5f:30:89:6c:ac:b2:d9:2e:f8:a6:13:60:fc:a0:1b:
0a:fd:48:b2:db:90:97:d3:8f:31:f2:73:b2:cb:d2:77:e5:6a:
44:47:96:99:9c:0f:92:e6:ce:17:04:88:4b:0e:ff:8e:d9:95:
37:6c:a5:68:45:96:cc:3d:ac:55:00:0c:c2:6a:b2:c1:70:a2:
59:56:e6:09:ef:bb:65:7c:e8:9d:78:e7:e6:90:fd:16:2e:4b:
75:fd:4f:dc:ee:90:28:3d:ff:e0:2c:6e:4a:73:3f:11:7b:ee:
f4:52:f1:35:87:4a:9c:35:da:75:49:18:29:38:e8:a4:bd:9c:
bb:54:6f:bb:46:1d:eb:00:81:a2:1e:a6:0a:c6:6d:6b:b8:04:
bd:43:51:ce:ef:00:22:3d:cb:54:09:1a:fe:12:9e:cc:45:fa:
03:ba:3b:e8
-----BEGIN CERTIFICATE-----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Generated at Sun Dec 17 18:27:07 2023 by rpki-client on console-fra.rpki-client.org