Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a32313a3a2f34382d3438203d3e203631333137.roa
File: 326131333a393530303a32313a3a2f34382d3438203d3e203631333137.roa (raw, json)
Hash identifier: j3jAxD7wWtq5T/TYH0jjcxAN8gK8epzLfDNRyoaV/ek=
Subject key identifier: 56:62:F7:28:84:40:00:26:E1:B3:ED:93:26:92:31:57:CA:07:AA:C3
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 416DA52BEA58DC28D7F066E6E22B6913B9D0C397
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a32313a3a2f34382d3438203d3e203631333137.roa
Signing time: Tue 30 Apr 2024 13:21:06 +0000
ROA not before: Tue 30 Apr 2024 13:16:06 +0000
ROA not after: Tue 29 Apr 2025 13:21:06 +0000
asID: 61317
IP address blocks: 2a13:9500:21::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 15 May 2024 10:53:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:6d:a5:2b:ea:58:dc:28:d7:f0:66:e6:e2:2b:69:13:b9:d0:c3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: Apr 30 13:16:06 2024 GMT
Not After : Apr 29 13:21:06 2025 GMT
Subject: CN=5662F72884400026E1B3ED9326923157CA07AAC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:eb:b7:58:61:1a:c7:5d:ce:97:dd:64:e8:
0e:ff:58:f2:0c:e3:51:92:7a:b8:a3:48:3c:aa:da:
7c:f7:d7:8e:19:96:5f:23:2f:99:d1:97:bd:2b:a8:
e2:c7:b8:29:f6:3f:47:62:7a:1a:a6:82:f3:bd:7f:
54:7f:ad:71:cf:08:b8:e6:23:78:f0:df:9c:f9:f4:
82:a2:35:ee:dd:f2:85:9f:88:a1:40:0f:3d:ff:d1:
28:ef:e0:03:85:35:82:97:cb:ea:b8:34:93:07:0d:
ed:f5:f5:53:fe:60:2b:73:84:fb:8d:e7:cd:6e:42:
14:28:3e:2e:7b:5e:40:db:86:f2:9e:2b:40:9a:e4:
78:b5:24:48:7e:ab:27:42:cd:a8:15:56:f0:8c:57:
a7:79:04:74:04:eb:2b:c1:e2:b2:48:e4:e7:90:9b:
cd:49:7f:d6:6f:5d:27:3b:0b:28:cf:82:7b:2c:35:
c9:ee:83:47:be:e9:0c:3f:88:1e:1a:0e:92:40:01:
ad:13:d9:f9:ba:c0:54:cb:51:97:e5:99:25:8c:63:
57:10:06:d6:f4:c4:67:c9:eb:5b:11:7b:bd:03:0b:
e2:35:12:b3:be:cc:55:b6:43:70:ae:44:61:42:24:
39:50:c8:ba:84:56:e9:30:65:61:dc:2d:41:6c:fd:
16:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:62:F7:28:84:40:00:26:E1:B3:ED:93:26:92:31:57:CA:07:AA:C3
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a32313a3a2f34382d3438203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:21::/48
Signature Algorithm: sha256WithRSAEncryption
1a:ed:aa:d4:2e:41:98:e0:4c:2b:4b:52:ad:86:4f:34:77:27:
4d:3f:b0:fc:ac:0d:3b:4e:06:4c:a8:0e:ff:1c:9b:dc:63:ae:
79:89:93:d5:fc:af:ec:a2:4b:e5:4b:19:d0:81:4b:67:33:c8:
56:bb:ff:85:6d:92:3d:8e:21:f7:09:d0:a0:82:58:b5:65:14:
01:b3:0c:f9:6f:ec:c1:06:44:f0:b7:5e:32:6a:00:ea:f2:df:
e3:7c:41:1b:a8:eb:de:a8:05:1b:0c:c5:c2:28:c0:9a:a7:2d:
9c:ec:ff:a8:ac:3a:2c:5c:3c:23:5c:64:f9:a7:cc:18:4b:40:
7b:09:86:d1:e5:f0:aa:35:0b:11:33:58:a7:a6:96:6e:de:fe:
a2:24:67:85:78:8b:08:ee:71:50:8c:07:54:d6:c5:04:70:7c:
a0:66:83:19:43:db:4c:eb:48:a7:a1:c8:cb:82:d2:22:c8:4f:
a9:b2:85:84:65:03:82:bc:9d:1c:bc:72:18:25:f1:0d:4d:62:
3d:cc:fe:9a:37:c1:bf:58:1d:f3:83:b0:e5:b3:61:69:6a:85:
d4:50:2f:bb:f8:23:b2:60:67:a0:20:29:db:44:aa:eb:3e:e3:
f9:6f:22:54:51:dd:6a:dc:93:20:6e:f4:31:d9:c9:c8:ff:8f:
95:cc:ae:ad
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:19 2024 by rpki-client on console-fra.rpki-client.org