Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a32333a3a2f34382d3438203d3e203631333137.roa
File: 326131333a393530303a32333a3a2f34382d3438203d3e203631333137.roa (raw, json)
Hash identifier: EHATvVU/VR/IvGxXlW/DY7aMX4kF2hH17nlHnWNM/WM=
Subject key identifier: 06:15:28:D9:31:BE:03:5E:73:69:B9:57:23:69:AC:40:90:AF:D2:71
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 31A631E7507CD737879563142F966B2BEACEA05F
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a32333a3a2f34382d3438203d3e203631333137.roa
Signing time: Tue 30 Apr 2024 13:21:12 +0000
ROA not before: Tue 30 Apr 2024 13:16:12 +0000
ROA not after: Tue 29 Apr 2025 13:21:12 +0000
asID: 61317
IP address blocks: 2a13:9500:23::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 15 May 2024 10:53:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:a6:31:e7:50:7c:d7:37:87:95:63:14:2f:96:6b:2b:ea:ce:a0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: Apr 30 13:16:12 2024 GMT
Not After : Apr 29 13:21:12 2025 GMT
Subject: CN=061528D931BE035E7369B9572369AC4090AFD271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:40:fc:90:ed:94:21:6c:e9:ae:7a:78:f2:f7:
43:11:5b:fb:f9:5d:a1:e7:e2:84:5f:f6:73:3a:dc:
59:a1:1d:27:88:f3:c8:80:54:6a:a1:60:a0:20:f9:
1f:f3:75:86:75:90:0d:43:30:ca:a7:e2:fa:1e:6d:
6a:9a:88:44:d0:98:71:11:31:09:5e:4e:dd:35:19:
1e:27:e2:3f:ea:33:a3:97:3b:1d:d8:a0:75:9e:d5:
9e:ac:e6:23:9c:ea:ec:51:9c:9a:ca:28:72:50:d9:
ea:7b:42:5b:44:73:8b:f7:0b:be:12:6f:9b:20:38:
76:3b:20:30:30:46:92:fb:c0:84:ef:52:c9:a1:46:
be:f5:6a:9d:8f:49:c9:64:19:c1:b5:46:de:0d:c2:
7e:f7:bc:d6:a1:3c:d3:8c:33:03:20:d4:f5:a3:0a:
9a:1b:70:d9:b9:2c:ab:65:40:97:29:59:4c:89:91:
44:95:ba:3a:be:39:8d:94:42:ee:ba:3c:b1:78:1e:
ad:09:c7:86:db:47:4b:6b:3d:c4:2a:ab:dd:c5:5b:
8a:a5:64:dc:99:22:30:c2:3a:ff:85:06:d3:b3:95:
53:f4:cd:15:12:b6:36:e6:5d:d0:d8:3f:50:4e:cc:
93:c0:ba:03:1d:1c:90:77:6e:c4:85:1a:ac:e8:b4:
8a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:15:28:D9:31:BE:03:5E:73:69:B9:57:23:69:AC:40:90:AF:D2:71
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a32333a3a2f34382d3438203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:23::/48
Signature Algorithm: sha256WithRSAEncryption
24:3e:60:d2:70:a7:6a:3d:5a:9d:19:b4:e7:64:c2:ae:9c:b5:
24:aa:4b:77:87:15:7c:b3:7c:5c:e3:ec:31:20:ba:6e:c2:28:
b6:7a:4c:b0:87:0f:40:fb:ab:9d:a0:49:fd:83:f7:29:71:61:
01:20:b0:2e:2b:c7:ef:6d:1a:10:b8:fe:8a:4d:5f:72:38:f3:
24:d6:02:3a:cd:bc:8f:c2:64:26:98:6d:6f:e9:0e:11:e9:27:
7c:26:ce:07:6e:11:86:01:58:2b:81:f1:cf:e5:67:31:f3:4f:
90:4a:08:cb:18:2d:37:a3:52:a7:e1:4e:a0:b9:2c:53:3e:b6:
12:6d:b6:db:81:65:b7:2c:e2:c1:5a:8b:f8:d8:0d:a2:ab:ae:
45:d9:a6:0a:37:e4:04:28:ed:95:02:86:13:15:5e:94:a5:d6:
b6:ad:30:9f:f1:f0:c9:2c:e9:7e:bf:e7:45:71:c4:87:17:c3:
b1:85:c9:2c:d2:a7:ed:95:b2:e7:48:25:cb:43:08:87:90:8a:
e7:25:c2:d9:c8:ba:ad:7f:43:96:88:86:a8:14:5f:4f:12:cb:
1d:e4:55:1e:13:ed:88:4d:bd:9f:63:6b:45:37:a7:d1:88:1f:
8e:b9:5d:39:82:91:ea:6b:2f:3b:53:f1:41:f7:e4:79:17:71:
92:4e:c9:4f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 15 15:01:22 2024 by rpki-client on console-ams.rpki-client.org