Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634313a3a2f34382d3438203d3e203532313132.roa
File: 326131333a393634313a3a2f34382d3438203d3e203532313132.roa (raw, json)
Hash identifier: ImQ3Xn2A/ruBS/4n/RrnR1dx37CFAwN6HWCueK+4Qww=
Subject key identifier: 1D:4B:BC:CE:90:D3:4C:3A:9C:85:3C:69:2C:3B:7B:7C:F2:8B:37:FC
Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace
Certificate serial: 04AC63B3669AF75F36144145850B5736CCD5AC6A
Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634313a3a2f34382d3438203d3e203532313132.roa
Signing time: Thu 08 Aug 2024 15:19:17 +0000
ROA not before: Thu 08 Aug 2024 15:14:17 +0000
ROA not after: Thu 07 Aug 2025 15:19:17 +0000
asID: 52112
IP address blocks: 2a13:9641::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 08 Aug 2024 17:31:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:ac:63:b3:66:9a:f7:5f:36:14:41:45:85:0b:57:36:cc:d5:ac:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace
Validity
Not Before: Aug 8 15:14:17 2024 GMT
Not After : Aug 7 15:19:17 2025 GMT
Subject: CN=1D4BBCCE90D34C3A9C853C692C3B7B7CF28B37FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a3:77:5f:a9:7e:ca:76:ef:41:56:b6:fd:d5:
03:7c:cd:51:34:be:90:58:11:a3:0b:c3:05:25:91:
cb:4e:89:56:f0:38:91:4a:b5:09:65:b4:6b:6f:97:
9d:a6:bb:6d:c6:a9:1b:f2:6a:67:60:db:72:a5:36:
b6:98:d0:60:6c:15:c1:dc:ac:d0:db:7a:ce:b4:ee:
ae:79:e8:f3:4a:ae:46:19:f3:7c:32:ec:30:ee:7f:
b9:a0:0a:0f:21:dc:ee:93:05:61:40:a0:7a:2e:28:
78:4c:ef:6e:c0:69:69:02:e9:e5:8a:d3:69:3f:06:
8e:86:7b:70:29:88:2c:93:f3:8d:29:2e:74:c3:63:
fa:22:9e:5b:12:b2:e8:58:2c:fb:c5:34:25:5b:5b:
3b:8b:53:64:11:54:f6:5a:7b:0a:68:3e:76:86:df:
1f:ea:a9:63:be:bf:ed:e0:a6:ab:ff:e8:4d:3f:be:
8c:e1:27:9f:c4:86:46:3c:eb:c8:39:64:95:ac:ce:
79:2a:00:8e:5c:c9:80:9b:c1:c2:0e:e2:4d:b9:e4:
e7:07:9a:59:7c:8e:39:47:cb:d0:15:ae:d3:a3:2a:
a6:b7:9d:85:4e:0a:11:ee:67:1b:a4:2b:4d:4a:19:
1c:07:01:27:6b:b6:96:36:41:67:49:92:3d:0b:a3:
98:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4B:BC:CE:90:D3:4C:3A:9C:85:3C:69:2C:3B:7B:7C:F2:8B:37:FC
X509v3 Authority Key Identifier:
keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634313a3a2f34382d3438203d3e203532313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9641::/48
Signature Algorithm: sha256WithRSAEncryption
4e:8e:03:08:d8:ab:da:e1:96:9b:9b:46:b9:07:dc:fc:74:4f:
b6:59:79:a3:9b:26:3c:63:6d:06:ad:f5:d2:31:d8:c0:06:2c:
7c:f3:4e:97:0f:98:f9:42:3a:c4:a3:84:42:4e:7d:a9:45:ba:
9f:57:5d:aa:4d:f3:e1:d7:24:30:f0:b1:07:31:c8:f6:73:a8:
dd:91:15:ed:a4:a2:e1:31:c9:fd:48:b7:21:60:1c:fb:9c:2f:
19:d3:54:6c:28:46:4d:fa:60:86:2d:fb:5a:f6:b5:b3:82:44:
2d:7f:7f:3b:0c:f7:14:62:6a:98:49:30:3a:f1:75:b8:ef:25:
7e:cb:bd:8a:7d:a5:83:35:07:e3:5c:8a:45:14:58:64:c8:99:
91:0d:4b:dc:f6:c7:94:f4:98:f3:e8:e2:5a:4e:5c:93:b2:b3:
7c:1d:c5:17:8f:52:50:25:75:8f:a3:d2:31:46:be:0b:99:59:
53:c5:8b:e6:61:27:37:e7:d7:3c:48:6b:8d:11:b4:7d:1e:b6:
ae:da:15:a2:9d:42:60:74:e7:f4:af:d9:c2:17:52:88:09:17:
03:7a:b5:59:15:2a:d7:f9:73:ba:12:05:59:54:d4:3c:c4:27:
14:81:a6:f7:58:75:3a:f7:2c:9c:e2:c4:06:82:0a:01:7c:da:
df:57:1c:56
-----BEGIN CERTIFICATE-----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Generated at Thu Aug 8 18:46:31 2024 by rpki-client on console-fra.rpki-client.org