Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634343a32303a3a2f34382d3438203d3e203133313233.roa
File: 326131333a393634343a32303a3a2f34382d3438203d3e203133313233.roa (raw, json)
Hash identifier: AOY7zPfn6s75/HYCT2+9N7ktbEbNWSNmmdadaJ3WAEI=
Subject key identifier: 60:9C:B7:17:0E:41:DA:B9:F6:20:49:B5:11:95:6B:BE:3F:1B:D3:F4
Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace
Certificate serial: 7E57615E0CFBB8668F19E44DCF5F90ED4C1B83CB
Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634343a32303a3a2f34382d3438203d3e203133313233.roa
Signing time: Fri 09 Aug 2024 20:26:54 +0000
ROA not before: Fri 09 Aug 2024 20:21:54 +0000
ROA not after: Fri 08 Aug 2025 20:26:54 +0000
asID: 13123
IP address blocks: 2a13:9644:20::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 09 Aug 2024 21:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:57:61:5e:0c:fb:b8:66:8f:19:e4:4d:cf:5f:90:ed:4c:1b:83:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace
Validity
Not Before: Aug 9 20:21:54 2024 GMT
Not After : Aug 8 20:26:54 2025 GMT
Subject: CN=609CB7170E41DAB9F62049B511956BBE3F1BD3F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:23:43:28:20:5c:b7:28:33:1c:27:bd:4f:61:
d0:b8:03:0e:b6:76:1a:ec:c3:ec:9c:c4:83:41:f0:
e3:13:40:55:33:49:67:55:36:b9:3f:41:07:79:82:
0d:c2:99:52:ca:ca:d6:5c:9c:47:77:5e:66:b1:e5:
59:eb:2b:29:b1:88:cf:50:fd:da:77:22:76:03:f2:
a0:a3:ce:17:b0:cf:6d:25:2d:a7:fd:cb:92:98:4a:
78:2c:a8:67:a2:0a:6d:da:64:10:d5:1e:58:b1:26:
3c:f1:71:af:ec:b5:d6:a3:68:36:48:62:5c:af:4d:
2f:46:76:39:9b:5a:68:09:d5:c1:94:98:bd:ba:dc:
cb:7c:93:ee:be:67:b0:83:4b:44:e0:a0:9f:17:ff:
df:16:6a:1c:28:d5:75:e5:e0:c9:fe:94:66:53:3d:
37:b6:01:d4:9b:97:a6:d2:5d:2d:dd:d7:10:37:79:
7d:44:43:7b:b2:c6:80:71:05:a7:84:81:f2:6c:78:
71:46:1e:6a:9d:c8:90:f0:76:86:35:45:d7:d2:fa:
a0:d6:5b:f8:8f:df:f1:b9:8f:81:24:6c:ad:54:33:
b9:69:09:81:37:7c:8c:e0:e1:30:e9:5c:6f:d8:03:
3b:df:88:87:ba:be:c0:6e:27:56:d1:d7:c8:9a:fb:
44:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9C:B7:17:0E:41:DA:B9:F6:20:49:B5:11:95:6B:BE:3F:1B:D3:F4
X509v3 Authority Key Identifier:
keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634343a32303a3a2f34382d3438203d3e203133313233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9644:20::/48
Signature Algorithm: sha256WithRSAEncryption
02:f9:ab:dc:24:2c:d6:38:88:a3:61:a0:6c:4b:61:b2:2f:f7:
16:94:d0:e1:a4:c9:e5:04:7d:e8:c4:24:80:ad:af:56:71:74:
a8:1b:e2:13:cb:5b:75:b5:35:91:98:5b:52:22:2a:e5:67:18:
72:ad:ee:f6:24:c2:6d:53:3e:f4:24:bc:d5:f6:c5:df:06:b1:
f4:80:f7:16:48:c8:7f:3b:55:f7:39:6c:3c:39:97:4b:f5:5e:
d2:53:40:93:cf:0f:09:34:9c:cd:e2:20:0b:c6:54:63:d5:01:
4f:0d:6b:88:92:08:ab:d0:c1:bf:ac:66:82:63:34:4c:53:b0:
f0:a9:02:73:aa:ad:47:29:6b:2b:d1:8f:1f:10:80:af:4f:bd:
8f:43:63:a3:84:bc:00:c9:a9:15:07:4c:09:70:c8:f0:d4:cf:
eb:86:55:e9:8a:90:e5:14:df:7a:c8:a1:82:12:64:f2:f4:21:
e1:43:fb:7e:ee:91:9a:db:1c:f3:a5:e9:58:dc:65:3b:9e:77:
68:d4:f4:2b:3e:ec:b9:6a:38:4d:71:8a:05:1b:ec:2a:71:76:
e4:e8:42:b5:66:70:7f:20:a3:b2:ff:2f:0d:eb:12:0c:d1:bd:
a5:4f:c2:a3:b4:eb:cc:9e:e9:c6:9f:24:d5:a8:cd:90:27:a6:
33:71:b5:37
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUfldhXgz7uGaPGeRNz1+Q7Uwbg8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjFkMDU3MmZlNzI5OTFiZDMyODU0YmFjNzE2Njc2ZWJk
YWQyMmFjZTAeFw0yNDA4MDkyMDIxNTRaFw0yNTA4MDgyMDI2NTRaMDMxMTAvBgNV
BAMTKDYwOUNCNzE3MEU0MURBQjlGNjIwNDlCNTExOTU2QkJFM0YxQkQzRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCI0MoIFy3KDMcJ71PYdC4Aw62
dhrsw+ycxINB8OMTQFUzSWdVNrk/QQd5gg3CmVLKytZcnEd3Xmax5VnrKymxiM9Q
/dp3InYD8qCjzhewz20lLaf9y5KYSngsqGeiCm3aZBDVHlixJjzxca/stdajaDZI
YlyvTS9GdjmbWmgJ1cGUmL263Mt8k+6+Z7CDS0TgoJ8X/98Wahwo1XXl4Mn+lGZT
PTe2AdSbl6bSXS3d1xA3eX1EQ3uyxoBxBaeEgfJseHFGHmqdyJDwdoY1RdfS+qDW
W/iP3/G5j4EkbK1UM7lpCYE3fIzg4TDpXG/YAzvfiIe6vsBuJ1bR18ia+0RJAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUYJy3Fw5B2rn2IEm1EZVrvj8b0/QwHwYDVR0j
BBgwFoAU8dBXL+cpkb0yhUuscWZ269rSKs4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1
YjQ5LzAvRjFEMDU3MkZFNzI5OTFCRDMyODU0QkFDNzE2Njc2RUJEQUQyMkFDRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkQlhMLWNwa2IweWhVdXNjV1oyNjly
U0tzNC5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTMwZGU4NGIt
NDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1YjQ5LzAvMzI2MTMxMzMzYTM5MzYzNDM0
M2EzMjMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzMxMzIzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACoTlkQAIDANBgkqhkiG9w0BAQsFAAOCAQEAAvmr3CQs1jiIo2GgbEthsi/3
FpTQ4aTJ5QR96MQkgK2vVnF0qBviE8tbdbU1kZhbUiIq5WcYcq3u9iTCbVM+9CS8
1fbF3wax9ID3FkjIfztV9zlsPDmXS/Ve0lNAk88PCTSczeIgC8ZUY9UBTw1riJII
q9DBv6xmgmM0TFOw8KkCc6qtRylrK9GPHxCAr0+9j0Njo4S8AMmpFQdMCXDI8NTP
64ZV6YqQ5RTfesihghJk8vQh4UP7fu6Rmtsc86XpWNxlO553aNT0Kz7suWo4TXGK
BRvsKnF25OhCtWZwfyCjsv8vDesSDNG9pU/Co7TrzJ7pxp8k1ajNkCemM3G1Nw==
Generated at Sat Aug 10 00:28:24 2024 by rpki-client on console-ams.rpki-client.org