Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a32323a3a2f34382d3438203d3e203631333137.roa
File: 326131333a393530303a32323a3a2f34382d3438203d3e203631333137.roa (raw, json)
Hash identifier: 26gnc5HLUnsf4XbzlY5N0uYhpOrzH4/bJB9AofryQjo=
Subject key identifier: 94:A7:31:2D:80:9B:41:AD:E6:DB:C0:0E:76:40:2C:BC:3E:91:A1:34
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 17EA2C8B8ED19A4ED16E31F0FC9AD60C453F4762
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a32323a3a2f34382d3438203d3e203631333137.roa
Signing time: Tue 30 Apr 2024 13:21:09 +0000
ROA not before: Tue 30 Apr 2024 13:16:09 +0000
ROA not after: Tue 29 Apr 2025 13:21:09 +0000
asID: 61317
IP address blocks: 2a13:9500:22::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 15 May 2024 10:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:ea:2c:8b:8e:d1:9a:4e:d1:6e:31:f0:fc:9a:d6:0c:45:3f:47:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: Apr 30 13:16:09 2024 GMT
Not After : Apr 29 13:21:09 2025 GMT
Subject: CN=94A7312D809B41ADE6DBC00E76402CBC3E91A134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:31:1b:d0:58:3e:fb:c0:87:5e:47:d5:3c:03:
9b:eb:e4:6b:13:cb:5f:43:4e:30:5c:cd:4c:81:85:
2f:d2:ee:0d:07:71:1b:5b:e3:62:1c:1a:a8:54:b4:
e1:13:db:d6:e7:f6:fd:b2:9f:d5:9d:f5:bd:fb:49:
2a:c3:77:0b:3a:d1:6a:c5:8b:30:c7:95:62:5d:18:
a8:ef:d3:57:f0:00:9b:bd:18:51:f6:ba:27:b8:64:
95:2b:0d:bd:62:96:87:e2:4c:84:cd:57:7d:72:9c:
ac:04:5e:e1:39:8e:2c:7b:60:2f:f0:0e:98:f8:23:
ce:c6:28:3b:f7:f6:19:2b:86:88:43:2d:db:69:7d:
47:16:a5:74:85:31:b0:46:f0:78:fe:10:f9:fe:c5:
cb:32:a2:03:91:b2:9c:d6:88:d8:f4:cf:2b:92:9b:
af:0e:7b:0a:71:b1:95:91:f6:2a:62:67:ce:06:ca:
6c:da:f9:a6:73:e7:46:10:33:56:1d:02:25:46:b5:
10:79:26:13:5f:ad:85:5b:b3:fa:0a:e1:e9:d1:50:
29:e7:0d:25:20:e7:cc:45:a2:c1:3a:04:42:66:e6:
4a:6f:85:75:30:89:23:66:5d:78:d8:9e:15:ec:0e:
a7:65:e6:67:5e:70:ab:05:32:87:59:2a:52:47:15:
26:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A7:31:2D:80:9B:41:AD:E6:DB:C0:0E:76:40:2C:BC:3E:91:A1:34
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a32323a3a2f34382d3438203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:22::/48
Signature Algorithm: sha256WithRSAEncryption
9e:0f:1e:85:a4:16:f1:a8:66:6a:4b:3c:c8:25:9e:3c:77:87:
4e:ac:ca:ed:a6:39:45:51:e5:d9:f4:59:3d:d4:92:9d:f5:68:
8f:fa:4d:ec:1d:df:fb:64:be:81:75:2c:e5:38:f1:ff:4b:73:
05:26:7f:e7:62:2b:fe:75:ce:fa:a1:70:c6:36:65:04:7d:16:
a9:a4:9b:e9:81:ff:f5:8f:84:fd:43:4b:4b:d5:2f:93:db:ac:
f8:bf:db:b9:bb:52:cb:13:52:6b:89:f8:a9:3c:39:a4:23:f9:
15:7e:c1:48:32:f6:15:6a:89:09:bf:6a:72:fc:a5:51:90:59:
6a:75:48:17:e3:c4:66:a9:e0:09:e4:dc:e3:f1:9c:a7:d2:9c:
d8:ec:79:b5:71:f5:78:be:38:c7:2f:69:24:43:56:5b:75:7f:
ce:0c:9d:e5:27:ed:90:b2:ef:43:a7:33:ec:1a:0c:a5:56:03:
3e:94:93:44:51:b6:c0:79:8a:1e:6a:c2:29:d4:02:fa:0c:8e:
a8:c6:d3:65:4f:92:e0:56:20:ed:a3:87:6d:a0:c5:c1:db:77:
99:af:12:f9:83:53:23:df:4c:22:f4:6b:d8:61:81:34:fc:4e:
be:ab:34:1c:46:b8:ca:fc:06:3e:f7:72:a5:15:59:5e:80:dc:
45:d3:dc:91
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 15 15:01:22 2024 by rpki-client on console-ams.rpki-client.org