Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a32313a3a2f34382d3438203d3e203239383032.roa
File: 326131333a393530303a32313a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier: Wfc2Me3E64tSJXCj4FSRiCozisIafhTHTPpiOGGSgNY=
Subject key identifier: D7:E1:42:8A:EA:9D:E1:DF:51:5A:F9:62:29:9D:C9:F3:8E:2C:2D:B5
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 5D1FD666F40E397DD10947BDC4DEBC35CC0DF57A
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a32313a3a2f34382d3438203d3e203239383032.roa
Signing time: Fri 26 Apr 2024 12:20:27 +0000
ROA not before: Fri 26 Apr 2024 12:15:27 +0000
ROA not after: Fri 25 Apr 2025 12:20:27 +0000
asID: 29802
IP address blocks: 2a13:9500:21::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 30 Apr 2024 13:18:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:1f:d6:66:f4:0e:39:7d:d1:09:47:bd:c4:de:bc:35:cc:0d:f5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: Apr 26 12:15:27 2024 GMT
Not After : Apr 25 12:20:27 2025 GMT
Subject: CN=D7E1428AEA9DE1DF515AF962299DC9F38E2C2DB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3d:0b:a3:bd:be:3b:ad:d2:4f:61:81:f8:47:
5b:d8:c3:fa:c5:e6:6f:bc:2d:81:bf:95:87:49:06:
a5:0d:f9:76:42:e1:a5:43:4f:53:9d:5e:d1:48:ee:
a0:d9:ea:11:3b:10:ec:a7:31:12:e1:e9:f6:ff:63:
3e:6c:8e:09:ec:97:37:05:94:e5:dd:34:ab:8a:b4:
ab:68:50:13:ff:4d:26:b0:ab:c9:4c:6a:99:1d:62:
76:32:18:e2:6c:e9:2c:bb:74:bc:31:94:56:ba:c9:
31:bd:a6:7d:c0:32:da:27:ff:46:5b:5e:ec:56:e2:
44:18:1c:3d:da:27:45:90:81:c0:4c:9c:23:63:65:
c0:01:57:48:e7:49:03:03:18:b4:fc:43:b9:34:93:
2f:17:04:df:d7:e4:53:18:10:c1:9c:16:09:2b:62:
6b:0f:7d:9b:1f:a9:14:78:b8:43:0f:60:57:8f:ed:
a0:5e:d4:f0:d4:b6:c7:b4:08:59:e2:99:f9:2e:2b:
5c:ad:d0:68:68:fd:ed:5f:20:55:37:02:bd:76:0c:
f3:7f:f2:2e:5c:74:9f:43:3c:f0:a1:a3:7c:b0:53:
ec:05:c5:64:0b:6c:64:72:63:22:a0:53:8c:08:2b:
67:c2:b2:99:87:0a:cd:5e:e4:b7:ce:8e:da:63:89:
e8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E1:42:8A:EA:9D:E1:DF:51:5A:F9:62:29:9D:C9:F3:8E:2C:2D:B5
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a32313a3a2f34382d3438203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:21::/48
Signature Algorithm: sha256WithRSAEncryption
89:08:30:5f:e6:b4:f3:39:30:59:7a:a6:b6:a6:dc:6b:e1:b4:
18:ff:ab:7d:a6:99:88:44:d5:23:14:0d:51:fb:eb:76:38:ce:
9b:d6:25:ab:93:03:a7:ce:c5:c8:82:49:f8:6e:a5:aa:89:3e:
93:d9:e2:03:75:b7:d0:5b:46:40:a5:49:5a:a3:6c:92:23:c5:
7c:0f:5c:d5:f5:c7:07:2e:cb:36:90:31:df:7d:c4:aa:8d:21:
38:f9:41:5d:ce:dc:0f:1b:b8:6b:15:a7:8c:90:cd:ae:10:e6:
d7:c8:1e:67:7b:48:8c:e0:24:0e:56:e3:c0:3b:f2:4b:22:19:
e4:5d:e6:b7:3a:89:2e:a6:89:d1:2b:2b:79:81:14:77:d1:a7:
24:a2:ab:56:37:20:f8:f7:fe:ec:ae:2d:70:c7:bb:ab:bc:48:
fc:58:f7:05:96:22:21:1b:ba:cf:d8:5e:46:e2:ec:3e:74:cc:
e5:2f:16:71:da:0a:ec:89:f9:2c:2d:30:18:0e:9c:cf:83:98:
b6:82:d4:70:9e:e6:9f:de:5d:8e:b3:73:bc:f6:47:1f:b2:d5:
26:f9:79:b6:5b:08:8b:eb:f3:63:0c:f3:6d:28:6c:eb:95:ce:
91:8f:17:ad:8e:17:58:3b:c7:d9:f6:b4:9a:e3:84:9d:be:40:
a9:a9:65:c6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:19 2024 by rpki-client on console-fra.rpki-client.org