Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383130303a3a2f34302d3434203d3e20323131343331.roa
File: 326130353a646663313a383130303a3a2f34302d3434203d3e20323131343331.roa (raw, json)
Hash identifier: eAqTxuJQCQB9+d4RAmZuQgL4z6QM+aGb+l+E9H8b2L4=
Subject key identifier: FF:14:55:11:DE:AA:BD:CF:A5:A6:36:62:04:8B:B8:31:8F:2F:7B:E8
Certificate issuer: /CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2
Certificate serial: 4E99447D97039F06AED738A85FCC8D44A769769D
Authority key identifier: CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383130303a3a2f34302d3434203d3e20323131343331.roa
Signing time: Sat 10 Jun 2023 13:27:42 +0000
ROA not before: Sat 10 Jun 2023 13:22:42 +0000
ROA not after: Sat 08 Jun 2024 13:27:42 +0000
asID: 211431
IP address blocks: 2a05:dfc1:8100::/40 maxlen: 44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:99:44:7d:97:03:9f:06:ae:d7:38:a8:5f:cc:8d:44:a7:69:76:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2
Validity
Not Before: Jun 10 13:22:42 2023 GMT
Not After : Jun 8 13:27:42 2024 GMT
Subject: CN=FF145511DEAABDCFA5A63662048BB8318F2F7BE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3f:47:ec:d7:d5:b2:27:18:c2:ef:25:da:7f:
a8:b7:cc:f8:62:e3:b6:cc:b6:91:76:b8:44:c1:77:
d0:95:d2:a5:6e:ff:ac:94:86:dc:e9:0d:98:05:d1:
7d:40:13:2a:0a:51:02:22:25:39:35:08:ea:52:f2:
6e:f0:5d:2a:54:37:30:11:60:67:43:bb:42:6c:4f:
71:f0:59:44:0f:f3:95:02:22:52:45:5c:b4:17:59:
ef:df:da:6b:18:e3:b1:95:98:a8:9a:c2:bc:5f:d7:
1f:56:a1:94:93:05:38:2b:4a:96:08:0a:2b:ea:58:
23:36:f8:f3:d0:a0:8a:0d:62:f4:11:d2:c2:88:fc:
71:7c:ff:4e:e5:4b:e1:93:e5:c9:0a:2f:e0:0f:b1:
80:f6:31:5d:8c:58:6d:9e:cf:4a:d8:7f:76:ff:49:
df:d8:b6:e8:e9:35:a5:be:a9:65:53:8c:0d:d7:19:
41:e8:04:89:45:05:9e:f2:36:b8:fc:bd:cd:25:94:
f3:83:fd:83:2b:12:b9:21:8e:62:a2:1d:59:4d:95:
02:be:54:d4:88:72:04:6e:43:99:80:78:4c:5a:f4:
ad:9d:63:bc:fe:61:ad:91:51:e7:a2:e4:54:1b:53:
21:ad:9c:09:17:e1:4f:42:14:64:12:08:0e:71:2a:
3c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:14:55:11:DE:AA:BD:CF:A5:A6:36:62:04:8B:B8:31:8F:2F:7B:E8
X509v3 Authority Key Identifier:
keyid:CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383130303a3a2f34302d3434203d3e20323131343331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8100::/40
Signature Algorithm: sha256WithRSAEncryption
bd:7a:68:2d:bd:ad:ab:ba:bf:a0:33:2b:05:8c:66:4f:21:66:
f0:ff:7d:0b:59:59:fc:b5:c9:ff:0a:cb:82:d0:d1:44:b2:e9:
10:71:03:ec:2a:bf:da:9d:c6:e7:b6:79:92:5d:fe:f7:11:4c:
f6:2e:79:ea:e8:ef:85:5f:46:50:0d:c2:02:3a:28:8b:bc:1e:
2f:27:3b:eb:3b:bd:b3:f4:ce:96:ed:20:eb:cf:c0:26:62:65:
70:1d:e3:8c:66:c7:18:24:04:13:36:cc:7c:91:2d:de:ce:a6:
0c:05:87:8c:26:23:e3:14:72:64:bb:24:28:ae:0a:50:34:6b:
2d:19:ce:43:a6:ec:27:98:ed:06:0e:a3:e8:a6:b7:3a:89:c2:
57:91:6b:eb:6a:d3:86:b6:e7:8d:c3:35:c2:7c:f7:de:a5:50:
59:ec:a7:83:4c:38:46:64:66:21:91:49:2c:c2:f3:57:25:31:
93:c4:9a:e8:68:7f:3a:7f:80:a8:f3:06:bf:76:33:a2:dc:3f:
e4:da:77:09:e1:5f:2b:fa:39:73:7d:0e:3f:6e:22:42:2a:cc:
ca:42:12:ed:35:a3:4b:97:fd:5b:9a:a3:83:c0:04:ed:5a:01:
e6:cc:cf:b8:ab:91:15:75:60:83:bf:8f:4e:97:d7:c1:7d:73:
98:4c:c2:0d
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIUTplEfZcDnwau1zioX8yNRKdpdp0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FEQzY2QTZFNTVCRUJBRkRERkE4QkQ3MkIzMTI3QzhB
RUI1MEVDMjAeFw0yMzA2MTAxMzIyNDJaFw0yNDA2MDgxMzI3NDJaMDMxMTAvBgNV
BAMTKEZGMTQ1NTExREVBQUJEQ0ZBNUE2MzY2MjA0OEJCODMxOEYyRjdCRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnP0fs19WyJxjC7yXaf6i3zPhi
47bMtpF2uETBd9CV0qVu/6yUhtzpDZgF0X1AEyoKUQIiJTk1COpS8m7wXSpUNzAR
YGdDu0JsT3HwWUQP85UCIlJFXLQXWe/f2msY47GVmKiawrxf1x9WoZSTBTgrSpYI
CivqWCM2+PPQoIoNYvQR0sKI/HF8/07lS+GT5ckKL+APsYD2MV2MWG2ez0rYf3b/
Sd/YtujpNaW+qWVTjA3XGUHoBIlFBZ7yNrj8vc0llPOD/YMrErkhjmKiHVlNlQK+
VNSIcgRuQ5mAeExa9K2dY7z+Ya2RUeei5FQbUyGtnAkX4U9CFGQSCA5xKjw9AgMB
AAGjggJfMIICWzAdBgNVHQ4EFgQU/xRVEd6qvc+lpjZiBIu4MY8ve+gwHwYDVR0j
BBgwFoAUytxmpuVb66/d+ovXKzEnyK61DsIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl
YjdkLzEvQ0FEQzY2QTZFNTVCRUJBRkRERkE4QkQ3MkIzMTI3QzhBRUI1MEVDMi5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0NBREM2NkE2RTU1QkVC
QUZEREZBOEJENzJCMzEyN0M4QUVCNTBFQzIuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2M5OTI2NWVmLTIyYTktNDEwMC1hMjNkLTUxYTlkOWZlZWI3
ZC8xLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzgzMTMwMzAzYTNhMmYzNDMwMmQzNDM0
MjAzZDNlMjAzMjMxMzEzNDMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BgTANBgkqhkiG9w0B
AQsFAAOCAQEAvXpoLb2tq7q/oDMrBYxmTyFm8P99C1lZ/LXJ/wrLgtDRRLLpEHED
7Cq/2p3G57Z5kl3+9xFM9i556ujvhV9GUA3CAjooi7weLyc76zu9s/TOlu0g68/A
JmJlcB3jjGbHGCQEEzbMfJEt3s6mDAWHjCYj4xRyZLskKK4KUDRrLRnOQ6bsJ5jt
Bg6j6Ka3OonCV5Fr62rThrbnjcM1wnz33qVQWeyng0w4RmRmIZFJLMLzVyUxk8Sa
6Gh/On+AqPMGv3Yzotw/5Np3CeFfK/o5c30OP24iQirMykIS7TWjS5f9W5qjg8AE
7VoB5szPuKuRFXVgg7+PTpfXwX1zmEzCDQ==
Generated at Fri Jan 5 14:17:39 2024 by rpki-client on console-ams.rpki-client.org