Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a32303a3a2f34382d3438203d3e203631333137.roa
File: 326131333a393530303a32303a3a2f34382d3438203d3e203631333137.roa (raw, json)
Hash identifier: VfTsR4pYDZkUekClzBJsrnL9QpjQ8ulmCRnVJ6n+tkk=
Subject key identifier: A7:56:0A:41:FB:A1:48:EB:8C:B4:A1:64:B6:C7:86:E6:3C:66:45:E2
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 2C837BB4A3E8ABF374A1BD9879DE23CC4C10AADF
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a32303a3a2f34382d3438203d3e203631333137.roa
Signing time: Tue 30 Apr 2024 13:21:02 +0000
ROA not before: Tue 30 Apr 2024 13:16:02 +0000
ROA not after: Tue 29 Apr 2025 13:21:02 +0000
asID: 61317
IP address blocks: 2a13:9500:20::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 15 May 2024 10:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:83:7b:b4:a3:e8:ab:f3:74:a1:bd:98:79:de:23:cc:4c:10:aa:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: Apr 30 13:16:02 2024 GMT
Not After : Apr 29 13:21:02 2025 GMT
Subject: CN=A7560A41FBA148EB8CB4A164B6C786E63C6645E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:43:81:ca:e5:4b:f3:e6:6c:cd:bd:b3:ab:
5e:71:33:37:cf:66:89:23:90:8e:db:01:68:d8:1a:
78:13:df:45:6c:fa:5e:76:e9:a4:ee:ee:07:f1:84:
4f:38:d3:6b:6f:ec:d4:6a:85:1e:7c:f2:08:3d:5d:
c6:32:7b:05:dd:1d:1d:22:01:12:0d:29:ac:ec:0f:
ac:99:b9:67:6d:1c:eb:c3:7f:39:ad:de:40:59:cf:
01:fc:72:2b:5c:5b:26:42:4e:20:08:9d:3e:55:80:
e6:09:1e:c1:3d:88:e2:36:87:2d:b9:e5:f4:b8:a0:
be:a7:22:ef:26:96:82:28:bf:b7:e9:d2:ad:48:53:
50:f0:ae:b2:b7:aa:85:80:01:0d:12:2b:23:da:84:
e5:3c:7f:5b:90:df:3a:94:11:55:da:71:17:a3:ea:
a4:91:ef:7a:52:58:22:87:27:1b:1c:8a:ef:da:eb:
c8:bc:b9:7f:ee:c1:d8:d0:70:aa:bf:85:ec:4c:c1:
03:d0:a6:01:d8:12:cc:21:56:f0:0c:b9:8c:a3:ce:
3f:c5:04:cb:b5:00:cd:b1:63:17:60:76:71:ab:1c:
64:ab:54:b2:17:2f:83:90:54:89:9e:3d:bd:d5:1e:
ae:72:54:3e:1e:2b:99:a0:c8:1a:4c:76:e6:8a:42:
80:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:56:0A:41:FB:A1:48:EB:8C:B4:A1:64:B6:C7:86:E6:3C:66:45:E2
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a32303a3a2f34382d3438203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:20::/48
Signature Algorithm: sha256WithRSAEncryption
0f:41:02:e4:fb:0a:44:3c:3c:32:87:cd:39:12:b5:80:01:70:
a3:2f:ca:ff:0d:15:41:80:0d:a2:8e:f5:ee:5e:30:f8:fe:e6:
d1:80:19:28:36:8b:cd:4b:01:1a:15:3f:dd:fe:84:62:2b:64:
90:e1:82:cd:5a:e7:cb:28:c4:69:9e:c8:7f:99:13:8e:76:ef:
e6:b0:00:83:65:c3:ac:cf:e2:28:ba:8d:4d:c8:8a:41:d7:62:
16:d2:01:54:d7:61:3b:27:25:e4:93:fd:7c:53:c7:7b:44:75:
83:5b:0f:d7:53:f7:f6:05:a0:68:e6:58:68:a7:c6:c3:d9:24:
12:65:e3:de:05:e0:07:33:b1:18:5d:c3:32:69:bd:65:97:35:
de:4a:c7:fa:cc:59:c0:e5:d8:9a:0b:76:5a:0d:1c:02:62:ba:
82:cc:ea:cb:a5:dd:46:d5:2e:b3:2c:3a:cd:e0:db:32:ee:07:
3a:fc:4a:12:f0:90:4b:72:ff:8e:17:d6:52:6a:8a:58:74:d9:
d5:17:fb:12:bb:89:e6:20:91:ed:f0:7f:44:c7:33:2b:03:2d:
01:05:90:c9:da:f2:59:0f:95:ed:40:63:bd:6f:ec:64:be:24:
bf:e2:5e:99:e9:5f:98:52:65:73:16:2a:f3:92:f5:7a:72:db:
67:8b:3d:6e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:19 2024 by rpki-client on console-fra.rpki-client.org