Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3730313a3a2f34382d3438203d3e20323035343633.roa
File: 326130663a383563313a3730313a3a2f34382d3438203d3e20323035343633.roa (raw, json)
Hash identifier: HDD48NfsZ8QHpbWtZOxZgRHn7vwwjZFFAttHQ3nr+/o=
Subject key identifier: 55:64:EF:16:2F:D2:0A:69:7F:39:E9:D3:32:A9:A3:1C:0E:E3:ED:E6
Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial: 24AB8DE84067CAACF6F09FE4CC82BF70DE04BB56
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3730313a3a2f34382d3438203d3e20323035343633.roa
Signing time: Mon 25 Mar 2024 04:57:28 +0000
ROA not before: Mon 25 Mar 2024 04:52:28 +0000
ROA not after: Mon 24 Mar 2025 04:57:28 +0000
asID: 205463
IP address blocks: 2a0f:85c1:701::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 25 Mar 2024 07:06:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ab:8d:e8:40:67:ca:ac:f6:f0:9f:e4:cc:82:bf:70:de:04:bb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Validity
Not Before: Mar 25 04:52:28 2024 GMT
Not After : Mar 24 04:57:28 2025 GMT
Subject: CN=5564EF162FD20A697F39E9D332A9A31C0EE3EDE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fc:5b:e8:33:ea:13:e1:ff:75:db:08:e9:ed:
f2:aa:4e:5a:e6:7c:4c:0f:f2:3f:a8:59:6c:2c:d0:
5f:01:c3:45:1e:96:92:0f:b0:f3:55:9a:ad:2c:9c:
cb:47:4c:50:29:b1:a8:e8:10:8f:d3:ec:e5:8d:8b:
98:d5:49:ba:8a:8f:ce:12:06:be:1e:d5:cc:ae:b5:
d7:af:f3:16:22:d4:1a:b0:7b:bb:3d:f9:66:c1:62:
c8:94:19:a1:05:02:cc:78:84:b6:95:fc:3f:22:ee:
c7:a7:1c:fc:fe:08:19:ea:e4:3e:51:21:3e:76:3d:
a4:49:ad:10:7c:93:57:8b:81:6b:90:fb:6e:4e:3c:
94:42:bd:1c:9f:f3:d0:6b:f5:3d:1c:85:fa:eb:53:
d4:41:3c:ee:03:b3:5e:9b:e5:77:af:4b:d5:f7:3b:
52:66:a8:6a:e9:07:72:35:91:e2:d4:1a:5e:25:38:
45:75:a8:73:59:56:ea:cd:15:69:9a:d4:39:27:9b:
3f:c1:60:87:9a:6c:fe:9f:25:aa:2c:92:28:0b:58:
22:fc:74:d2:02:0b:23:50:7e:c3:e9:7e:f3:58:27:
0e:54:72:0d:7e:ce:80:73:45:39:13:7a:88:d4:a9:
19:91:46:00:b5:75:ae:74:8e:28:24:ee:df:c0:76:
47:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:64:EF:16:2F:D2:0A:69:7F:39:E9:D3:32:A9:A3:1C:0E:E3:ED:E6
X509v3 Authority Key Identifier:
keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3730313a3a2f34382d3438203d3e20323035343633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:701::/48
Signature Algorithm: sha256WithRSAEncryption
77:56:da:5e:7d:72:6a:62:07:4a:ea:5a:81:00:df:cd:dd:8d:
ff:89:5d:4f:2c:9d:8e:cc:b4:f9:05:d9:d6:86:b4:60:56:a3:
af:fc:dc:7a:1b:3d:48:81:70:a8:2f:16:c0:05:6f:0d:8b:41:
d4:1a:44:b2:ee:9d:25:a0:ca:0b:8b:3a:13:b0:6d:32:df:9e:
a1:01:a7:0d:7b:fa:1b:49:61:6e:e6:ff:44:09:9e:c1:c0:a9:
24:d8:b3:1c:57:ee:c7:f1:d6:07:de:74:45:b9:35:8c:9c:76:
29:f7:e0:6b:c3:ad:81:68:7d:3c:38:1c:14:1c:a9:ac:92:4a:
8d:95:cf:ef:6c:41:81:a4:a9:11:94:d1:1a:5e:23:10:a1:b9:
24:5c:db:a7:cf:66:6f:42:32:60:b1:f2:a1:f1:d3:85:d1:65:
3c:31:03:dd:67:93:63:a7:41:52:eb:4f:4d:fe:47:1d:75:e3:
1d:3f:47:cd:95:75:59:f1:bd:16:b3:0b:4f:f9:5a:2e:7e:8f:
87:d3:11:3e:d4:4e:8d:1d:5c:a4:61:d9:28:3b:d6:e4:1c:33:
92:e5:0c:8f:21:a5:8f:9f:0a:b0:78:f7:d0:a0:17:29:6a:c8:
6b:9f:49:09:32:4d:46:14:fe:ee:88:50:5d:5f:ab:6e:02:6a:
d8:49:bb:15
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIUJKuN6EBnyqz28J/kzIK/cN4Eu1YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0
OUMxODM3NzAeFw0yNDAzMjUwNDUyMjhaFw0yNTAzMjQwNDU3MjhaMDMxMTAvBgNV
BAMTKDU1NjRFRjE2MkZEMjBBNjk3RjM5RTlEMzMyQTlBMzFDMEVFM0VERTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA/FvoM+oT4f912wjp7fKqTlrm
fEwP8j+oWWws0F8Bw0UelpIPsPNVmq0snMtHTFApsajoEI/T7OWNi5jVSbqKj84S
Br4e1cyutdev8xYi1Bqwe7s9+WbBYsiUGaEFAsx4hLaV/D8i7senHPz+CBnq5D5R
IT52PaRJrRB8k1eLgWuQ+25OPJRCvRyf89Br9T0chfrrU9RBPO4Ds16b5XevS9X3
O1JmqGrpB3I1keLUGl4lOEV1qHNZVurNFWma1Dknmz/BYIeabP6fJaoskigLWCL8
dNICCyNQfsPpfvNYJw5Ucg1+zoBzRTkTeojUqRmRRgC1da50jigk7t/AdkdBAgMB
AAGjggKDMIICfzAdBgNVHQ4EFgQUVWTvFi/SCml/OenTMqmjHA7j7eYwHwYDVR0j
BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0
MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzIwYWRkMy1hODhlLTRi
YjItYTg0ZC01NWRhMjEyOGYxOTYvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF
QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9kMDYzMzNjNi05NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMS8zMjYxMzA2
NjNhMzgzNTYzMzEzYTM3MzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAz
NTM0MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEHATANBgkqhkiG9w0BAQsFAAOCAQEAd1ba
Xn1yamIHSupagQDfzd2N/4ldTyydjsy0+QXZ1oa0YFajr/zcehs9SIFwqC8WwAVv
DYtB1BpEsu6dJaDKC4s6E7BtMt+eoQGnDXv6G0lhbub/RAmewcCpJNizHFfux/HW
B950Rbk1jJx2Kffga8OtgWh9PDgcFByprJJKjZXP72xBgaSpEZTRGl4jEKG5JFzb
p89mb0IyYLHyofHThdFlPDED3WeTY6dBUutPTf5HHXXjHT9HzZV1WfG9FrMLT/la
Ln6Ph9MRPtROjR1cpGHZKDvW5BwzkuUMjyGlj58KsHj30KAXKWrIa59JCTJNRhT+
7ohQXV+rbgJq2Em7FQ==
Generated at Mon Mar 25 07:44:25 2024 by rpki-client on console-ams.rpki-client.org