Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626137653a3a2f34382d3438203d3e20313939353138.roa
File: 326130613a363034303a626137653a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier: /gXpKlCOscIz65T15SsQIGbkcV2NO3NTvbkX6U1xOSM=
Subject key identifier: 21:72:51:A9:2E:B3:0C:02:C3:B8:C4:1C:7D:91:F4:DC:1C:A1:7F:01
Certificate issuer: /CN=756560C5B960222CE81AF47A8B758E1741461E7F
Certificate serial: 4D11AFE592A722B06AF262EEA9C6CFC09FF2736D
Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626137653a3a2f34382d3438203d3e20313939353138.roa
Signing time: Sat 11 Nov 2023 02:14:59 +0000
ROA not before: Sat 11 Nov 2023 02:09:59 +0000
ROA not after: Sat 09 Nov 2024 02:14:59 +0000
asID: 199518
IP address blocks: 2a0a:6040:ba7e::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Dec 2023 23:42:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:11:af:e5:92:a7:22:b0:6a:f2:62:ee:a9:c6:cf:c0:9f:f2:73:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F
Validity
Not Before: Nov 11 02:09:59 2023 GMT
Not After : Nov 9 02:14:59 2024 GMT
Subject: CN=217251A92EB30C02C3B8C41C7D91F4DC1CA17F01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:29:cc:e7:53:57:08:d9:3c:96:35:36:6c:
86:fd:5e:36:1b:1a:b0:5a:08:d2:da:8f:65:bf:65:
d5:63:6d:76:0d:7b:35:a2:ec:a6:73:6b:c3:51:78:
59:96:e8:07:63:6d:23:37:32:5a:43:b1:6a:53:f0:
93:8a:8a:43:9c:f0:86:40:8d:68:b4:b8:72:9b:df:
76:a1:1b:3b:2e:a2:43:e2:ca:66:88:ec:7a:96:4f:
2a:7f:5c:37:d9:fa:72:e9:32:a4:fe:36:aa:d6:24:
a9:d4:4c:2a:05:c7:c3:84:bd:63:48:ab:31:39:ce:
89:0e:48:8a:3a:0e:44:41:5a:00:7c:e5:d5:07:1e:
21:b2:43:1c:d6:ec:2d:e8:03:ca:35:35:da:41:a8:
99:3c:e3:c0:93:4e:bf:f8:71:f0:87:ec:c1:40:e9:
e9:51:cc:01:d0:92:e6:b1:7b:7c:90:bd:5c:18:a7:
73:3a:ac:d3:84:46:f4:cc:6f:93:a2:6e:10:c7:e9:
0c:5f:4f:8c:8c:30:9e:2e:3b:51:01:94:de:8b:a1:
a4:cc:91:c2:e2:6f:c8:1f:53:43:3a:21:7a:3d:c0:
65:ff:3f:3c:70:ca:e6:11:4b:86:3f:b6:c5:1e:a5:
0b:67:26:4e:1d:2f:e0:53:37:35:e8:d6:1c:62:35:
bb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:72:51:A9:2E:B3:0C:02:C3:B8:C4:1C:7D:91:F4:DC:1C:A1:7F:01
X509v3 Authority Key Identifier:
keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626137653a3a2f34382d3438203d3e20313939353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:ba7e::/48
Signature Algorithm: sha256WithRSAEncryption
8d:8d:c1:e8:c6:10:4a:88:3b:cb:18:8c:db:eb:17:32:23:5c:
05:aa:9d:96:02:7b:c5:bc:0c:70:be:af:f4:ec:fc:26:50:dc:
80:14:8d:09:14:61:a6:65:e8:5b:57:86:a8:ad:dd:8f:e3:0e:
8a:f9:35:81:e6:0a:c3:17:36:b4:65:cf:99:a7:c4:7b:e6:58:
14:ae:bf:53:66:66:c7:07:d9:cd:17:03:6e:e5:af:75:53:49:
7b:f8:ff:6c:cd:e6:08:f6:20:86:30:0f:30:75:16:89:de:73:
bf:62:2d:5b:87:3f:3e:a8:30:98:2c:d7:24:0c:e0:c1:89:93:
bc:52:11:b6:3e:19:a8:31:32:e1:17:a1:fc:3c:9d:13:eb:3e:
ec:d4:d3:fe:0d:3a:ee:8b:d1:d5:28:50:24:0b:59:f9:70:d7:
70:e6:22:8b:cc:af:a4:c5:9f:76:43:89:da:62:2f:00:ff:db:
ef:6c:0d:74:53:70:23:db:00:85:45:b1:94:05:d0:5e:d8:59:
1d:09:90:e9:d3:3e:44:32:73:34:8a:c3:39:fd:59:79:8f:ae:
7d:6d:08:2b:ea:f9:1e:e8:dd:5f:86:fc:97:f2:01:97:00:2f:
c2:d0:94:42:2a:3e:42:0b:91:48:fd:9d:1d:b5:4b:7a:c4:76:
ea:e6:05:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org