Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626162613a3a2f34382d3438203d3e20313939353138.roa
File: 326130613a363034303a626162613a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier: wGry9NHh7rFjHaQUYwa/7I7Gq7Be1ZGRYVxpq4G5Je0=
Subject key identifier: FE:6C:FB:82:C6:3B:6D:35:80:68:77:81:D4:2F:36:24:D7:1A:29:25
Certificate issuer: /CN=756560C5B960222CE81AF47A8B758E1741461E7F
Certificate serial: 3E3FADAB62CEE81743D655BE81384663D65CD528
Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626162613a3a2f34382d3438203d3e20313939353138.roa
Signing time: Wed 09 Aug 2023 00:52:37 +0000
ROA not before: Wed 09 Aug 2023 00:47:37 +0000
ROA not after: Wed 07 Aug 2024 00:52:37 +0000
asID: 199518
IP address blocks: 2a0a:6040:baba::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 06 Dec 2023 21:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:3f:ad:ab:62:ce:e8:17:43:d6:55:be:81:38:46:63:d6:5c:d5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F
Validity
Not Before: Aug 9 00:47:37 2023 GMT
Not After : Aug 7 00:52:37 2024 GMT
Subject: CN=FE6CFB82C63B6D3580687781D42F3624D71A2925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c1:33:6a:b3:d8:8c:2a:57:e1:90:53:12:20:
82:78:fd:db:c3:1d:fe:9f:de:5c:fa:80:41:91:8c:
07:74:9c:98:86:6d:7a:a0:0a:e3:ef:24:94:ce:8c:
b3:ab:2b:2d:62:b9:dc:d6:ae:4c:df:de:5c:8e:72:
1e:11:ba:73:a9:63:43:63:22:c4:7c:52:f1:43:89:
fc:1b:f9:d0:e1:5e:77:ff:d0:05:c0:26:c5:a7:61:
1c:07:4a:ad:2e:64:59:bf:65:94:31:ed:ff:05:3b:
23:27:db:7e:36:be:8e:19:34:d9:f4:2d:dc:89:39:
7d:52:2f:b5:96:1f:33:da:d4:1c:5a:b6:8f:51:3e:
22:30:31:32:2a:d3:1e:22:b7:5e:00:c2:bd:22:7f:
c5:31:d6:ee:6b:be:8b:3d:c5:9e:3c:9b:49:e3:c9:
ed:de:9f:fa:c4:cc:8d:d8:de:f5:8e:82:e3:43:2c:
ea:24:36:45:6a:24:23:d2:d8:5e:cc:40:07:5b:e0:
45:37:14:f7:ca:98:19:0d:47:f6:be:56:3d:e5:1a:
a7:d2:54:1b:ad:d8:1d:3b:2c:8d:cd:b7:94:5a:0a:
45:d6:a7:74:79:b3:85:18:10:3f:8e:f4:86:c3:03:
a7:aa:c2:13:82:17:ee:ec:d1:b2:6e:d3:bc:2a:3e:
a6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6C:FB:82:C6:3B:6D:35:80:68:77:81:D4:2F:36:24:D7:1A:29:25
X509v3 Authority Key Identifier:
keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626162613a3a2f34382d3438203d3e20313939353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:baba::/48
Signature Algorithm: sha256WithRSAEncryption
86:1f:f4:d6:21:61:35:b6:36:00:2b:6d:79:75:2d:19:c2:57:
c6:03:84:44:25:18:e2:77:e1:d6:d7:bd:16:e9:ab:a4:c9:dd:
16:cc:53:dd:f9:53:22:61:b5:2d:2e:08:fc:b2:2e:a7:be:a0:
5a:2b:5e:17:d7:07:77:7b:e9:bc:17:1f:c2:21:8c:6e:5e:a5:
af:8b:20:1e:7c:de:76:94:90:94:2c:f9:cc:8b:18:7a:85:57:
af:15:02:08:a0:50:90:c1:c2:ff:49:b5:7e:8e:9e:cd:c5:09:
2d:f6:62:f5:86:f8:1a:5f:c7:25:99:42:11:e3:70:26:c0:20:
53:17:6b:d7:00:a5:f8:29:09:d1:ee:80:ad:0e:8e:6d:04:7c:
ce:0a:b2:13:77:30:70:c8:29:75:eb:32:59:06:60:88:57:68:
1e:2a:38:57:8a:2f:c4:07:53:10:f2:be:45:cb:22:e9:57:69:
d0:97:74:d5:58:a5:b1:c5:db:06:97:97:05:c7:fe:d0:3f:5e:
f1:28:8f:48:0f:4c:f7:39:86:fa:0f:a2:f9:65:2b:21:65:4f:
6a:b2:02:cd:c4:26:48:6c:39:44:17:71:0e:be:32:14:23:97:
28:97:60:39:c2:62:d1:85:36:0d:19:c6:66:5f:b4:83:92:9f:
ee:2d:c7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org