Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634343a32303a3a2f34382d3438203d3e203537333338.roa
File: 326131333a393634343a32303a3a2f34382d3438203d3e203537333338.roa (raw, json)
Hash identifier: PsWI9lieJ0dC609TCe6fd/ZRYICl/13Bzj9otelCgDg=
Subject key identifier: 9D:BB:54:2D:B7:DB:E9:1C:60:AF:26:21:8B:40:9D:D9:BC:74:5B:4F
Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace
Certificate serial: 612604E1811FB02F3CB8E6A999E79B98361BB1FF
Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634343a32303a3a2f34382d3438203d3e203537333338.roa
Signing time: Thu 08 Aug 2024 15:14:35 +0000
ROA not before: Thu 08 Aug 2024 15:09:35 +0000
ROA not after: Thu 07 Aug 2025 15:14:35 +0000
asID: 57338
IP address blocks: 2a13:9644:20::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 09 Aug 2024 20:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:26:04:e1:81:1f:b0:2f:3c:b8:e6:a9:99:e7:9b:98:36:1b:b1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace
Validity
Not Before: Aug 8 15:09:35 2024 GMT
Not After : Aug 7 15:14:35 2025 GMT
Subject: CN=9DBB542DB7DBE91C60AF26218B409DD9BC745B4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:0f:c4:fd:c8:3a:75:a5:fc:8c:fa:96:88:
41:95:b4:dd:54:3c:da:da:e4:7f:ba:6f:21:57:0d:
64:be:f5:b9:28:8c:90:cb:10:8f:03:8e:ec:63:c1:
d5:a2:04:a6:f6:14:9e:c9:b8:2d:d4:aa:91:1e:24:
c3:be:a6:43:11:c4:d0:c8:88:cf:96:8f:f7:c2:e5:
3e:6a:ea:8b:0e:de:87:69:06:36:e2:02:a1:1c:6e:
41:b8:be:4a:a6:73:cb:93:c7:52:bc:06:2d:fd:1c:
64:c1:c1:98:0a:bd:de:56:67:9a:68:58:d9:51:7c:
13:d4:42:f5:5e:d0:50:fb:4c:2e:3f:3c:f8:46:8d:
cc:42:15:f8:b0:16:44:8e:d8:41:0f:34:fc:5b:64:
df:39:a1:6b:64:99:35:e8:0f:7b:6c:c2:d5:36:06:
e3:ed:35:dd:1e:91:ce:10:94:a9:1d:52:32:3b:cd:
80:64:6c:1a:f7:61:de:67:b7:e9:4d:89:62:46:dd:
9a:c4:da:57:62:84:72:2b:0d:4f:6f:fc:f9:d4:6f:
62:6c:20:42:f9:0b:45:8b:42:8f:f7:b5:eb:3f:be:
13:36:bc:d3:94:46:a5:99:a0:0d:6d:49:22:c8:37:
ff:f6:53:dd:5e:a8:10:03:21:b2:c1:4c:02:80:a6:
4e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BB:54:2D:B7:DB:E9:1C:60:AF:26:21:8B:40:9D:D9:BC:74:5B:4F
X509v3 Authority Key Identifier:
keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634343a32303a3a2f34382d3438203d3e203537333338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9644:20::/48
Signature Algorithm: sha256WithRSAEncryption
56:76:5e:36:13:9e:ce:87:7d:ae:d8:bd:4f:ec:df:f7:f7:86:
00:1d:94:49:0a:b7:f7:12:08:ce:4d:3f:c4:46:85:6c:3e:15:
88:38:f4:f9:e1:8e:cc:7a:63:aa:3b:e2:74:88:72:4a:88:97:
85:94:38:bf:f3:4b:f1:72:87:cd:c6:20:9e:c3:5d:30:38:04:
46:69:6b:c3:3f:a9:11:15:e3:8d:6e:f2:6e:0b:25:f1:33:bb:
04:d9:ea:5a:b5:fd:b6:b4:e7:f3:0a:6b:fe:90:26:ed:f9:98:
6c:56:ee:b6:14:fc:83:96:45:c6:31:94:37:3d:5b:5c:1c:15:
5c:3c:98:a1:6d:bc:92:fb:06:b3:73:bd:50:85:1d:67:55:87:
c3:af:97:2f:32:c6:4d:95:24:4d:45:bc:24:e7:d8:f5:62:47:
07:40:81:06:c6:c0:41:49:40:2e:87:2d:aa:5b:1e:21:c6:15:
8f:86:21:34:be:a2:f5:6d:63:d1:18:7e:48:21:68:ad:74:fe:
e1:38:fd:8e:12:df:09:c1:5c:46:9d:15:60:ce:88:5b:9b:e0:
a7:cf:2d:bb:f9:7d:eb:8f:83:f0:35:87:83:24:83:53:cd:a2:
66:70:ad:53:e3:77:5c:00:5d:14:2d:f0:ec:0f:c3:95:4f:ad:
f1:b9:2b:6f
-----BEGIN CERTIFICATE-----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==
Generated at Fri Aug 9 22:06:09 2024 by rpki-client on console-ams.rpki-client.org