Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653138303a3a2f34322d3432203d3e20323134363433.roa
File: 326131343a373538313a653138303a3a2f34322d3432203d3e20323134363433.roa (raw, json)
Hash identifier: CHaFQ9524YBC3WACN18S5ZEByk+dN0kH51+ZGAMLNHs=
Subject key identifier: AD:3B:1E:CC:42:8B:C0:52:03:57:99:08:47:1D:5A:2E:0B:61:B8:0C
Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial: 4AC8CAE80E162C3E4CE57C27BF5A92159565723E
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653138303a3a2f34322d3432203d3e20323134363433.roa
Signing time: Tue 09 Jul 2024 22:50:24 +0000
ROA not before: Tue 09 Jul 2024 22:45:24 +0000
ROA not after: Tue 08 Jul 2025 22:50:24 +0000
asID: 214643
IP address blocks: 2a14:7581:e180::/42 maxlen: 42
Validation: Failed, certificate revoked on Wed 17 Jul 2024 15:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:c8:ca:e8:0e:16:2c:3e:4c:e5:7c:27:bf:5a:92:15:95:65:72:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Validity
Not Before: Jul 9 22:45:24 2024 GMT
Not After : Jul 8 22:50:24 2025 GMT
Subject: CN=AD3B1ECC428BC05203579908471D5A2E0B61B80C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:50:76:fa:e8:40:9e:52:a9:43:c5:93:65:0d:
b6:03:03:ca:b9:20:3e:61:b7:e5:3b:a4:50:47:8c:
44:b5:44:b5:78:50:dc:a5:db:4e:d1:fe:37:c0:40:
5a:9d:d5:76:76:37:78:99:88:aa:16:bd:8d:79:30:
78:c4:b7:eb:b8:fb:e4:e5:4a:11:2f:22:98:ba:c4:
16:d0:46:3b:72:8d:1d:cf:20:be:e9:c4:c9:7f:b2:
64:70:7a:34:fe:8a:2e:52:88:44:cf:da:ed:0e:4e:
a5:2c:98:ea:53:a1:8c:80:c0:fd:1d:d5:a6:81:bc:
04:b6:54:6c:2c:76:0a:4d:51:08:b4:08:62:85:6f:
6a:79:6f:65:23:cb:a3:5c:d9:50:97:ba:b5:fa:0c:
2f:32:bc:f2:00:45:6c:f7:52:07:d6:f5:c6:58:64:
90:f7:ad:13:ce:02:99:43:64:c7:15:35:2b:2a:fc:
48:2d:fd:92:0d:15:3b:25:b1:a3:fc:f1:61:59:7f:
e4:77:28:aa:1a:0b:05:91:e2:17:f9:ae:56:b2:6d:
b1:a9:17:0c:0c:54:b4:f0:0b:4b:3a:89:dc:fd:40:
61:07:1d:3f:a0:62:80:01:34:cd:76:ea:c9:db:06:
ca:5d:c1:af:06:fc:b7:c8:5f:fc:5b:ad:88:64:82:
2d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3B:1E:CC:42:8B:C0:52:03:57:99:08:47:1D:5A:2E:0B:61:B8:0C
X509v3 Authority Key Identifier:
keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653138303a3a2f34322d3432203d3e20323134363433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:e180::/42
Signature Algorithm: sha256WithRSAEncryption
04:8f:05:03:9d:ab:fe:a4:52:9b:dc:32:4f:b9:5c:f2:be:32:
de:ed:74:26:01:45:49:ce:39:7c:76:9e:fc:2f:82:70:fe:28:
88:a2:76:dd:e8:07:fb:fa:ec:76:36:f8:4b:fe:3a:25:16:f2:
fc:c2:72:9c:5a:c2:74:6d:51:e7:cc:73:65:c8:d3:2c:d2:16:
1b:3d:58:ed:53:fb:17:38:b7:d6:f4:d8:81:fc:41:93:e6:32:
e3:49:e2:a5:5e:fd:0f:d0:ab:d3:73:d2:85:3f:13:8d:2d:0b:
b0:13:b3:c1:1d:04:6d:37:f1:9d:1b:89:7c:57:d5:6b:8f:3d:
4f:7b:e8:f9:3d:91:49:42:30:25:06:04:57:b0:9f:d8:1b:07:
23:ce:a0:15:e3:a6:82:1f:2e:c2:3b:38:9a:b9:7a:14:d4:ee:
50:7f:b0:a3:14:d4:87:24:c7:09:bf:98:e3:1c:b3:a6:c9:7f:
f1:39:00:e0:91:e9:26:ee:04:18:69:6d:d5:22:85:6e:59:d7:
7f:df:15:d3:f2:28:e1:8d:8e:0f:61:87:87:ee:70:24:f4:9d:
8f:85:c9:62:08:da:90:f4:cc:cb:22:69:25:69:59:e0:c2:4b:
3c:e9:cd:f5:fa:26:57:b2:cd:96:55:7b:60:5c:5d:ba:36:5c:
9f:4f:e1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 20:18:46 2024 by rpki-client on console-ams.rpki-client.org