Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634343a32303a3a2f34382d3438203d3e2031.roa
File: 326131333a393634343a32303a3a2f34382d3438203d3e2031.roa (raw, json)
Hash identifier: oUNxUkqBbDQckseTcsY7zmQ+nAqkYuF+17QURktTZnM=
Subject key identifier: F8:38:08:F7:21:98:B0:90:24:6C:46:0D:EB:CF:E1:EF:F1:BF:2D:32
Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace
Certificate serial: 3F03A0518ADFFF3AEF01E71B6CF2D965833418C6
Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634343a32303a3a2f34382d3438203d3e2031.roa
Signing time: Fri 09 Aug 2024 20:42:22 +0000
ROA not before: Fri 09 Aug 2024 20:37:22 +0000
ROA not after: Fri 08 Aug 2025 20:42:22 +0000
asID: 1
IP address blocks: 2a13:9644:20::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 09 Aug 2024 21:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:03:a0:51:8a:df:ff:3a:ef:01:e7:1b:6c:f2:d9:65:83:34:18:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace
Validity
Not Before: Aug 9 20:37:22 2024 GMT
Not After : Aug 8 20:42:22 2025 GMT
Subject: CN=F83808F72198B090246C460DEBCFE1EFF1BF2D32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:59:b8:d7:e1:97:7e:48:97:26:e5:b3:e7:67:
ab:82:17:13:32:14:35:d0:7d:32:25:38:11:31:0a:
4c:fc:b5:c0:0a:73:12:9c:d9:8c:4e:0f:eb:f4:cb:
16:1d:8f:9d:7a:b2:97:7d:95:05:0d:e4:9d:ce:6e:
00:be:c0:30:4a:4c:57:b3:f7:66:e9:9a:99:07:ac:
55:12:39:49:55:d3:8f:1f:e7:01:aa:a4:2d:0d:9b:
a8:8e:38:2b:a9:a5:b6:de:e6:ea:64:3c:01:02:13:
0c:e0:b0:22:7d:0e:5b:a0:7c:3a:39:23:71:d3:f0:
5a:d9:51:71:ed:d9:f8:de:8a:f8:ca:75:38:f7:7a:
d6:d3:60:1c:fa:9a:25:4a:30:44:0b:7f:7e:02:07:
29:dd:cb:0f:d0:66:b6:02:c2:10:6d:d1:f8:47:e2:
00:f9:68:91:20:65:86:c0:9b:1d:a7:ac:52:e0:66:
b6:96:fc:eb:91:5b:cf:05:f9:17:84:f9:d9:9b:a8:
af:87:3e:0f:79:2a:40:21:86:d0:4b:56:98:cc:2c:
02:c9:a8:12:95:3e:1d:d4:0c:e0:77:44:a8:79:d7:
00:e9:ce:c9:f5:d8:53:d7:d8:1b:43:0e:44:bf:19:
38:4e:58:70:77:e9:be:99:c5:20:6e:90:1f:a4:96:
8b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:38:08:F7:21:98:B0:90:24:6C:46:0D:EB:CF:E1:EF:F1:BF:2D:32
X509v3 Authority Key Identifier:
keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634343a32303a3a2f34382d3438203d3e2031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9644:20::/48
Signature Algorithm: sha256WithRSAEncryption
23:ad:15:82:fa:bd:55:cc:2f:dd:38:3c:d6:c1:35:6c:22:1d:
6d:ca:25:46:14:1c:93:79:f0:45:e0:da:3c:4e:7f:2e:dd:be:
6d:94:3b:f2:28:62:b3:c8:0a:eb:b0:e3:ed:71:f4:e8:28:73:
8c:be:e9:53:67:08:5f:68:f5:77:8b:94:c6:b9:e3:ff:5f:f8:
8b:83:65:b3:35:78:2d:b0:4b:fe:c1:5e:bd:6c:fa:0d:fe:ca:
c8:c2:fd:75:84:3e:b7:35:04:15:33:d4:65:70:19:ab:2b:1e:
94:d1:8d:e1:0e:38:a4:65:79:97:5d:3c:1e:b1:ba:a0:3f:2f:
8a:59:97:1e:da:bb:3c:e8:ea:66:2a:3e:75:1a:ed:7b:98:af:
75:45:43:5f:c6:ef:86:47:0f:c3:71:14:54:1f:1f:57:81:82:
44:b3:19:31:f5:54:cb:3f:05:4d:42:a0:5b:51:f1:0a:70:eb:
4e:27:cf:41:62:7d:25:4c:e5:78:d8:32:67:58:6f:02:e5:c9:
2c:f6:03:8a:5e:38:12:81:6f:be:bd:cf:b1:f1:c8:0d:5c:77:
05:ec:c3:0d:9c:f4:01:d7:bf:fc:5f:8b:46:0c:fa:8a:03:0e:
3c:86:af:67:66:9c:5c:6f:59:39:ba:31:ee:f2:6c:d2:21:62:
c7:30:84:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:37 2025 by rpki-client