Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a32323a3a2f34382d3438203d3e203239383032.roa
File: 326131333a393530303a32323a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier: dF0I7Yy/d2LEFt/ItVpCE/3QKDlHP87iMXYiNsFDzD8=
Subject key identifier: 60:3A:CB:43:DE:11:A4:1B:8C:55:6C:3B:CE:3E:AC:22:B0:A2:BA:CF
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 779307E73C770E21D3A21D1B2FAF8D35C360B094
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a32323a3a2f34382d3438203d3e203239383032.roa
Signing time: Fri 26 Apr 2024 12:20:30 +0000
ROA not before: Fri 26 Apr 2024 12:15:30 +0000
ROA not after: Fri 25 Apr 2025 12:20:30 +0000
asID: 29802
IP address blocks: 2a13:9500:22::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 30 Apr 2024 13:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:93:07:e7:3c:77:0e:21:d3:a2:1d:1b:2f:af:8d:35:c3:60:b0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: Apr 26 12:15:30 2024 GMT
Not After : Apr 25 12:20:30 2025 GMT
Subject: CN=603ACB43DE11A41B8C556C3BCE3EAC22B0A2BACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:14:d0:04:2e:f6:e1:d1:eb:fa:cf:36:d8:
ed:46:ab:66:95:34:4b:31:2f:cf:b7:eb:1d:5e:5e:
4d:f6:67:09:91:ae:3f:ee:a7:73:a3:72:19:39:fe:
5c:85:1c:c7:38:12:1f:f4:0d:8d:b6:0e:e1:3f:41:
91:11:bf:55:8f:60:2c:5c:e8:29:88:1e:5d:e9:c9:
6c:c8:5f:00:c3:aa:01:31:56:fd:0e:07:b6:8c:9f:
13:ce:9a:24:87:bd:d5:18:f6:00:21:46:b5:f8:21:
18:88:64:e2:f6:06:0c:4d:20:c4:2b:78:14:2c:3c:
85:95:da:c4:33:84:05:27:79:d5:52:30:0b:dd:cc:
a8:cd:ea:2f:e9:d3:28:6e:84:70:6e:b5:b0:f2:e6:
ad:82:01:c8:5a:6d:39:9d:21:c8:08:32:30:8b:90:
7c:65:d9:fb:9b:92:60:c0:f0:92:40:5a:a9:e1:97:
d1:38:f7:17:6b:b4:b7:57:57:c9:6e:f8:6f:54:50:
74:fb:65:13:40:56:03:fe:a4:aa:3c:fb:28:04:3a:
f0:55:26:47:c8:9a:53:f2:58:3d:ef:df:d8:fa:40:
bd:bc:ee:55:b7:08:4e:f1:32:4e:99:97:98:c0:9e:
85:9d:f6:e9:5f:2f:6f:62:0f:56:1a:df:78:c8:50:
26:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3A:CB:43:DE:11:A4:1B:8C:55:6C:3B:CE:3E:AC:22:B0:A2:BA:CF
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a32323a3a2f34382d3438203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:22::/48
Signature Algorithm: sha256WithRSAEncryption
23:89:b7:79:9b:d8:79:f9:7d:f4:9b:7f:3f:de:33:fb:5e:46:
8b:d8:d6:6c:92:38:90:77:eb:77:bd:bb:b3:a2:73:f8:c2:46:
29:73:a1:c4:10:eb:69:0f:19:70:18:0f:92:6c:b8:28:c4:12:
28:0c:70:d5:5f:92:b7:7c:86:86:08:41:9b:4b:cb:47:16:ca:
9e:6a:46:80:18:b3:96:35:2d:ae:84:c2:f5:10:54:2f:50:16:
1c:a1:5c:7e:a2:78:44:11:29:31:1e:da:b4:0a:e9:f6:fe:74:
ce:a2:9a:6b:cf:fd:8c:a4:7e:cb:04:3a:0e:9b:a9:f7:61:9b:
2a:63:58:13:1c:eb:20:07:a1:90:85:44:c3:53:c0:d6:77:cf:
99:dc:e2:8d:63:ab:e3:f2:33:3e:dc:1e:3e:0a:48:cd:ac:2f:
28:e9:58:34:5d:85:1e:04:88:3b:33:21:1f:07:cd:af:2e:fc:
56:6f:cc:1d:e8:11:47:62:5b:9b:7e:57:6a:16:3c:c5:10:7e:
3e:00:1c:f9:77:63:b6:c9:79:95:51:a8:21:2f:a1:24:e7:58:
d7:e8:e0:29:42:d7:82:03:36:4b:4f:84:5c:4f:57:b9:26:eb:
2a:7d:22:fa:a5:08:22:ac:cd:78:32:16:63:71:e8:a7:b7:1b:
c1:09:c2:61
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 30 18:14:25 2024 by rpki-client on console-fra.rpki-client.org