Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653134303a3a2f34322d3432203d3e20323134363433.roa
File: 326131343a373538313a653134303a3a2f34322d3432203d3e20323134363433.roa (raw, json)
Hash identifier: u4XvdGBstyWCt+OWiVYcuBNNvZSehMLYotFIAKMrjMk=
Subject key identifier: 7E:BD:CF:79:63:78:E2:BC:B3:CC:18:AF:38:E5:70:FA:A5:DB:09:2E
Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial: 187753AA064276207A57977AFEED6A54464CC110
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653134303a3a2f34322d3432203d3e20323134363433.roa
Signing time: Tue 09 Jul 2024 22:50:05 +0000
ROA not before: Tue 09 Jul 2024 22:45:05 +0000
ROA not after: Tue 08 Jul 2025 22:50:05 +0000
asID: 214643
IP address blocks: 2a14:7581:e140::/42 maxlen: 42
Validation: Failed, certificate revoked on Wed 17 Jul 2024 15:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:77:53:aa:06:42:76:20:7a:57:97:7a:fe:ed:6a:54:46:4c:c1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Validity
Not Before: Jul 9 22:45:05 2024 GMT
Not After : Jul 8 22:50:05 2025 GMT
Subject: CN=7EBDCF796378E2BCB3CC18AF38E570FAA5DB092E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:29:35:ad:0c:78:25:c3:fa:17:fe:b8:b3:
ef:c7:7f:62:cb:1e:aa:1b:af:ea:11:54:02:b2:79:
e7:f1:1f:14:be:05:39:68:3c:1d:cd:45:1e:c8:ea:
50:e1:74:58:8f:39:1b:1c:a5:b1:55:5b:1e:37:32:
1e:54:a5:a0:f9:90:39:ea:6e:32:1b:14:06:24:25:
1c:8a:b6:74:5b:f6:96:d4:c7:30:d7:02:52:4b:36:
22:08:cc:89:c1:4e:9d:52:7a:d0:ff:83:82:6e:f2:
af:67:8c:3e:c9:47:72:e1:0b:6a:66:01:ce:0c:ec:
a1:21:c3:29:21:bd:05:27:c3:62:8d:53:63:d1:fa:
1c:86:1c:c9:66:f5:17:54:67:18:47:02:72:9f:09:
97:b1:49:e1:e5:20:2c:64:1e:06:65:b9:67:f8:8f:
06:ce:dc:d0:e8:7b:78:fe:bf:47:5b:bb:cf:f8:05:
b6:83:06:35:74:f7:c0:ca:ab:df:10:7c:24:a3:64:
ad:66:01:a8:93:f0:78:34:bd:1d:90:4e:e2:fb:08:
9f:68:46:44:d5:08:19:dd:90:86:99:31:db:3b:d8:
c1:91:4a:82:06:6e:b4:ba:42:43:db:74:a4:51:5d:
f6:d5:fa:b2:3f:60:de:9e:27:78:bf:0b:71:f9:db:
f2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BD:CF:79:63:78:E2:BC:B3:CC:18:AF:38:E5:70:FA:A5:DB:09:2E
X509v3 Authority Key Identifier:
keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653134303a3a2f34322d3432203d3e20323134363433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:e140::/42
Signature Algorithm: sha256WithRSAEncryption
90:db:14:b0:60:a4:f5:8a:de:19:c9:c4:c2:91:b3:31:c3:02:
bd:56:ee:60:90:f9:d1:2c:0c:dc:7b:27:51:60:40:40:1e:4e:
2c:d0:bc:b6:38:3b:c2:ff:06:ba:8d:90:bc:51:b0:fe:8f:99:
93:91:5e:43:c8:40:3d:76:7e:ef:b0:26:f4:22:9a:9c:d1:6a:
bb:f4:28:6a:88:33:76:32:3e:15:e5:8c:03:3e:64:62:26:71:
ac:60:d2:4a:bb:f4:e5:db:7d:db:de:b7:ec:33:e2:bc:0a:1f:
7d:80:08:ad:f2:31:03:00:8f:83:b5:33:29:3b:bb:65:31:85:
87:a9:5d:fa:bc:21:69:93:6d:3f:20:15:30:64:09:84:2d:d3:
f5:e4:a9:a2:04:5e:12:05:ec:f1:83:9f:ed:be:60:02:d2:4c:
1f:87:c3:fb:11:3d:11:7a:45:6f:51:14:77:b2:54:9e:23:47:
09:7a:12:f4:50:56:88:0a:53:b2:75:cf:0e:76:f0:0d:75:6a:
c2:5a:22:40:c3:26:5c:ba:d4:43:94:6b:29:67:e7:7e:fd:34:
25:0d:e9:7d:c4:20:66:b4:b0:62:59:c6:82:38:6d:3f:71:42:
d8:4d:23:52:d5:9e:87:1b:30:f4:c4:98:62:60:f8:5c:c0:ee:
2e:05:be:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 20:18:46 2024 by rpki-client on console-ams.rpki-client.org