Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/3/326130353a646663313a393266303a3a2f34382d3438203d3e20323136323932.roa
File: 326130353a646663313a393266303a3a2f34382d3438203d3e20323136323932.roa (raw, json)
Hash identifier: 6We3g3LExvQx4eaipsNzrdWHZ3ZSRGIZfOStsfCZe7s=
Subject key identifier: 70:BF:0E:7D:20:67:1F:09:F2:DF:7B:0E:FA:CD:96:9F:45:9E:F2:E9
Certificate issuer: /CN=C075D17CAABFFA0D204320EAAACD35E6C2DEC9B1
Certificate serial: 6FA6CDFB05BFC4337BBD003189B572F3C6646633
Authority key identifier: C0:75:D1:7C:AA:BF:FA:0D:20:43:20:EA:AA:CD:35:E6:C2:DE:C9:B1
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/C075D17CAABFFA0D204320EAAACD35E6C2DEC9B1.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/3/326130353a646663313a393266303a3a2f34382d3438203d3e20323136323932.roa
Signing time: Tue 10 Oct 2023 18:11:54 +0000
ROA not before: Tue 10 Oct 2023 18:06:54 +0000
ROA not after: Tue 08 Oct 2024 18:11:54 +0000
asID: 216292
IP address blocks: 2a05:dfc1:92f0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:a6:cd:fb:05:bf:c4:33:7b:bd:00:31:89:b5:72:f3:c6:64:66:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C075D17CAABFFA0D204320EAAACD35E6C2DEC9B1
Validity
Not Before: Oct 10 18:06:54 2023 GMT
Not After : Oct 8 18:11:54 2024 GMT
Subject: CN=70BF0E7D20671F09F2DF7B0EFACD969F459EF2E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4f:7b:6f:cf:2b:0d:91:ce:ee:2b:d2:61:eb:
b0:0d:14:d4:d7:6d:3e:8e:57:bb:f8:03:66:b9:58:
43:29:42:f4:ae:99:b6:69:be:dd:07:28:7a:75:57:
a7:9f:6f:03:35:b2:ea:46:c8:25:28:53:09:7e:c3:
ae:24:6a:83:dc:cf:6e:f6:05:8f:9b:86:48:4c:ab:
70:0f:1a:f2:a2:dd:3b:4d:f7:da:43:a5:11:4b:e1:
46:d2:17:d6:00:0b:eb:7d:64:4d:1c:bf:ea:ef:ce:
36:e7:28:af:82:81:ba:a3:a3:2b:16:90:02:9d:32:
23:62:6e:9c:38:e3:39:f4:e5:3a:4f:27:0f:7e:c4:
03:67:6c:02:7a:8e:7c:53:da:a7:db:69:21:e9:d0:
54:03:1e:4a:9a:33:08:e4:fd:43:00:cd:f9:18:9b:
72:f1:c9:ce:25:7c:b3:dc:0e:51:80:2b:16:6c:da:
d3:e3:35:43:cc:82:d6:b3:d5:b2:c7:ef:54:ed:08:
e2:b2:af:96:f4:84:be:f9:52:c1:ce:75:6c:51:3c:
c4:5d:de:7d:d2:89:54:80:24:46:aa:22:ee:1e:36:
4d:31:2d:cd:90:e5:88:9f:db:43:e5:7e:df:56:50:
85:87:f9:e8:4f:28:07:90:78:a5:90:80:e5:0b:a3:
ff:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BF:0E:7D:20:67:1F:09:F2:DF:7B:0E:FA:CD:96:9F:45:9E:F2:E9
X509v3 Authority Key Identifier:
keyid:C0:75:D1:7C:AA:BF:FA:0D:20:43:20:EA:AA:CD:35:E6:C2:DE:C9:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/3/C075D17CAABFFA0D204320EAAACD35E6C2DEC9B1.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/C075D17CAABFFA0D204320EAAACD35E6C2DEC9B1.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/3/326130353a646663313a393266303a3a2f34382d3438203d3e20323136323932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:92f0::/48
Signature Algorithm: sha256WithRSAEncryption
65:83:35:02:54:61:11:7b:cb:5e:71:c8:12:4b:2d:db:e5:f6:
35:9f:1e:30:2e:94:83:d5:99:de:77:e3:df:4b:91:6b:32:69:
55:bc:95:a2:58:92:d0:2c:23:3d:80:9d:e5:a0:c3:16:7a:cf:
a7:c0:a7:54:20:67:3c:67:98:eb:cd:98:3a:83:52:7d:6e:d5:
f6:48:3b:04:5e:af:65:69:bb:e0:f3:62:14:de:8b:7e:f2:ab:
22:0f:c3:89:ab:0a:cc:30:c5:90:ed:80:79:f1:ef:da:d3:70:
46:bc:88:83:25:d5:3c:38:30:27:60:87:9b:9b:d1:30:0a:8b:
fa:0e:35:87:47:f5:e0:b3:ae:13:ac:3a:03:51:3d:24:4f:6f:
65:9a:91:6a:c9:d7:f0:cc:19:72:89:b5:8f:92:3e:b9:52:45:
78:3a:47:f8:58:4e:05:3f:f3:f2:ba:d5:14:1c:b9:19:9b:27:
1c:2b:51:6e:ed:3f:89:e7:97:fb:e9:9c:fc:61:f3:84:47:be:
2f:c1:65:35:94:0e:41:8f:79:4f:ea:d1:65:ac:47:fb:47:10:
e1:3c:44:c1:91:97:45:76:9d:77:a3:c3:78:1d:f9:e2:c7:ff:
f9:11:61:5f:2d:cf:92:4c:6d:3a:8b:6e:f8:21:a9:7b:ed:57:
a6:e2:9a:f3
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUb6bN+wW/xDN7vQAxibVy88ZkZjMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzA3NUQxN0NBQUJGRkEwRDIwNDMyMEVBQUFDRDM1RTZD
MkRFQzlCMTAeFw0yMzEwMTAxODA2NTRaFw0yNDEwMDgxODExNTRaMDMxMTAvBgNV
BAMTKDcwQkYwRTdEMjA2NzFGMDlGMkRGN0IwRUZBQ0Q5NjlGNDU5RUYyRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPT3tvzysNkc7uK9Jh67ANFNTX
bT6OV7v4A2a5WEMpQvSumbZpvt0HKHp1V6efbwM1supGyCUoUwl+w64kaoPcz272
BY+bhkhMq3APGvKi3TtN99pDpRFL4UbSF9YAC+t9ZE0cv+rvzjbnKK+CgbqjoysW
kAKdMiNibpw44zn05TpPJw9+xANnbAJ6jnxT2qfbaSHp0FQDHkqaMwjk/UMAzfkY
m3Lxyc4lfLPcDlGAKxZs2tPjNUPMgtaz1bLH71TtCOKyr5b0hL75UsHOdWxRPMRd
3n3SiVSAJEaqIu4eNk0xLc2Q5Yif20Plft9WUIWH+ehPKAeQeKWQgOULo/8hAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUcL8OfSBnHwny33sO+s2Wn0We8ukwHwYDVR0j
BBgwFoAUwHXRfKq/+g0gQyDqqs015sLeybEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmM5MGY0ZjYtZjJjNC00ODgyLTkxY2YtOWI4ZjBiMzhk
N2RhLzMvQzA3NUQxN0NBQUJGRkEwRDIwNDMyMEVBQUFDRDM1RTZDMkRFQzlCMS5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0MwNzVEMTdDQUFCRkZB
MEQyMDQzMjBFQUFBQ0QzNUU2QzJERUM5QjEuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2JjOTBmNGY2LWYyYzQtNDg4Mi05MWNmLTliOGYwYjM4ZDdk
YS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzkzMjY2MzAzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMjMxMzYzMjM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBd/BkvAwDQYJKoZIhvcN
AQELBQADggEBAGWDNQJUYRF7y15xyBJLLdvl9jWfHjAulIPVmd53499LkWsyaVW8
laJYktAsIz2AneWgwxZ6z6fAp1QgZzxnmOvNmDqDUn1u1fZIOwRer2Vpu+DzYhTe
i37yqyIPw4mrCswwxZDtgHnx79rTcEa8iIMl1Tw4MCdgh5ub0TAKi/oONYdH9eCz
rhOsOgNRPSRPb2WakWrJ1/DMGXKJtY+SPrlSRXg6R/hYTgU/8/K61RQcuRmbJxwr
UW7tP4nnl/vpnPxh84RHvi/BZTWUDkGPeU/q0WWsR/tHEOE8RMGRl0V2nXejw3gd
+eLH//kRYV8tz5JMbTqLbvghqXvtV6bimvM=
Generated at Tue Oct 24 19:18:09 2023 by rpki-client on console-ams.rpki-client.org