Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a31363a3a2f34382d3438203d3e203239383032.roa
File: 326131333a393530303a31363a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier: i4a+xYorkGe+kpl/MfwbXaQDTQSgVl/rQxISTYOgYVU=
Subject key identifier: 7A:11:51:BE:F8:5A:33:92:D6:F6:1F:0B:78:D8:CF:AD:50:1A:B9:EE
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 5FE0CDBF355D7BD4D003FEE58375C07EFE50EBAA
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a31363a3a2f34382d3438203d3e203239383032.roa
Signing time: Mon 12 Feb 2024 16:01:09 +0000
ROA not before: Mon 12 Feb 2024 15:56:09 +0000
ROA not after: Mon 10 Feb 2025 16:01:09 +0000
asID: 29802
IP address blocks: 2a13:9500:16::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 29 May 2024 09:13:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:e0:cd:bf:35:5d:7b:d4:d0:03:fe:e5:83:75:c0:7e:fe:50:eb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: Feb 12 15:56:09 2024 GMT
Not After : Feb 10 16:01:09 2025 GMT
Subject: CN=7A1151BEF85A3392D6F61F0B78D8CFAD501AB9EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:ae:ac:e8:fa:82:3c:00:c2:0d:ee:50:1b:
89:3f:3e:d8:7e:6d:c7:e2:99:48:bd:21:52:bf:5b:
b9:d9:36:eb:6a:60:01:f9:73:1a:ea:01:fe:a6:d2:
4f:65:0f:dc:dc:a3:dc:e0:9a:dd:25:dd:06:0b:9f:
be:c9:f4:60:30:9d:49:7e:d1:4e:63:f8:cb:c1:26:
b7:52:ed:42:04:ff:d5:26:b1:09:f9:cd:02:90:42:
f6:14:82:db:b7:d4:4b:b3:72:44:25:f7:31:af:3e:
c5:74:01:71:fd:fe:1e:20:b0:63:76:80:2b:ab:59:
f0:0b:ca:5c:37:3a:26:ea:ee:cc:72:81:b7:dd:b6:
d5:b7:a5:5f:19:1b:ef:eb:6f:dc:7f:43:36:d6:90:
cf:fd:d1:c9:b0:0f:09:48:92:d0:99:83:0c:e3:f0:
96:e6:c2:05:26:60:e1:ff:eb:45:2b:39:ad:42:59:
f0:1b:b1:d6:57:72:f2:82:de:f4:55:ec:77:b4:c8:
fc:10:07:36:65:04:c2:c7:80:28:8a:54:0a:c7:45:
bc:c3:61:91:6c:b3:4c:ef:d8:ec:d4:41:4b:c1:50:
09:4d:f4:dc:21:3f:5a:84:83:e4:2b:d2:a6:04:6d:
a1:3e:fb:66:87:c8:5f:84:a2:1a:e5:b4:9b:af:fa:
fa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:11:51:BE:F8:5A:33:92:D6:F6:1F:0B:78:D8:CF:AD:50:1A:B9:EE
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a31363a3a2f34382d3438203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:16::/48
Signature Algorithm: sha256WithRSAEncryption
1e:e0:6f:9f:e2:56:97:bc:06:05:03:e3:88:9f:a0:1a:cb:9e:
b8:17:c4:2d:41:3e:bf:af:eb:00:7b:d2:12:ab:d0:1b:dd:fe:
a2:6a:b8:21:f2:e3:a7:83:6b:12:c1:d1:ee:6f:47:3d:9e:40:
70:f4:12:62:a8:96:e3:12:e1:37:e0:26:f8:9a:5d:93:49:4d:
d8:81:e0:f7:b4:b8:d5:6d:1b:4c:12:c8:a5:02:ff:c2:5e:a4:
f9:2a:78:ac:98:7b:78:ba:4b:8a:04:d1:f1:04:21:34:09:20:
5d:5e:5a:3f:66:35:b4:6f:ba:bf:45:0a:55:94:f9:bc:a5:67:
d9:77:94:8b:9d:35:1e:15:05:17:11:9f:ad:6c:d8:1a:db:cc:
15:1c:8e:18:11:ba:41:3f:a1:99:dd:64:07:59:76:72:1b:55:
3f:70:e1:d5:ed:91:d7:e1:55:0f:8e:03:bf:c6:47:e5:7d:61:
0a:d3:80:cb:8a:15:6c:54:71:6d:3a:45:86:32:e9:b0:2c:91:
a3:a1:94:1e:d6:f5:9d:94:ea:48:00:30:10:51:13:2c:8b:a8:
56:94:62:b9:5c:20:cd:c8:48:ea:f9:4c:d8:bd:cd:c0:f4:f1:
9d:c8:e8:ff:d9:03:5a:f6:7f:f1:49:8e:d9:0f:09:21:fc:28:
e0:61:ca:fc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:19 2024 by rpki-client on console-fra.rpki-client.org