Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a656334323a3a2f34382d3438203d3e20323135363634.roa
File: 326130643a623238373a656334323a3a2f34382d3438203d3e20323135363634.roa (raw, json)
Hash identifier: tSDNn1POxxlqTQg6EVUBgzsruqaV6e97sZtYIccOnYU=
Subject key identifier: F9:99:1E:9D:8F:A5:30:D2:68:AF:57:70:75:9C:AC:A9:2A:DD:71:7C
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 227D1A906AD5498F4E6FF8C716FE143A5BCE826B
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a656334323a3a2f34382d3438203d3e20323135363634.roa
Signing time: Wed 28 Aug 2024 13:49:33 +0000
ROA not before: Wed 28 Aug 2024 13:44:33 +0000
ROA not after: Wed 27 Aug 2025 13:49:33 +0000
asID: 215664
IP address blocks: 2a0d:b287:ec42::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 Aug 2024 08:56:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:7d:1a:90:6a:d5:49:8f:4e:6f:f8:c7:16:fe:14:3a:5b:ce:82:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Aug 28 13:44:33 2024 GMT
Not After : Aug 27 13:49:33 2025 GMT
Subject: CN=F9991E9D8FA530D268AF5770759CACA92ADD717C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ae:44:e2:75:ad:9d:e3:17:f4:2f:53:5d:7f:
33:aa:16:50:b3:7c:89:7d:14:f9:48:46:e3:b1:2b:
3b:99:69:0d:52:8f:eb:70:fb:96:e8:19:13:ae:99:
1d:fc:ed:6c:5f:cd:22:cd:ed:af:ab:06:7d:c7:52:
1c:8c:ee:d3:a4:4e:0e:d7:71:9a:61:13:5e:5e:93:
6a:e0:24:fa:bf:ab:c8:10:a5:07:80:99:ee:5f:9f:
13:e1:86:a4:c1:b6:4f:fb:30:87:0e:3a:51:2e:5e:
b1:9b:cc:35:a8:b8:e8:ba:8b:e7:0a:8d:90:72:b1:
a6:96:03:48:1b:8e:e5:76:68:5e:1d:f7:d3:ad:e2:
c7:d1:13:9e:6c:ab:1f:65:3d:0a:c7:7a:cf:cf:4d:
b8:76:83:5e:f3:0d:7a:f8:08:7b:58:3d:da:33:25:
eb:a3:99:2d:09:27:76:b1:40:4a:b8:a8:17:b1:55:
60:7a:51:15:d1:71:2b:43:3a:80:49:2b:8d:39:bf:
0a:e2:d0:ba:e4:92:8f:50:5c:43:54:5c:2c:df:71:
84:d4:00:36:59:f0:d4:09:bf:96:01:e2:3b:b0:38:
44:91:02:a4:d4:40:a7:a1:89:00:b9:6e:1d:3a:ee:
29:b9:cc:d9:56:33:5d:82:8a:56:6d:2b:af:43:06:
d7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:99:1E:9D:8F:A5:30:D2:68:AF:57:70:75:9C:AC:A9:2A:DD:71:7C
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a656334323a3a2f34382d3438203d3e20323135363634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b287:ec42::/48
Signature Algorithm: sha256WithRSAEncryption
8e:68:bb:31:25:ce:30:94:9d:34:e9:6a:9f:aa:b6:3a:b4:c8:
6c:5b:83:d0:5d:b5:2c:d6:e3:5b:5c:48:b2:61:81:71:8a:b9:
85:bb:48:76:2a:0e:e6:c9:11:b5:bf:27:bd:aa:15:eb:6e:79:
86:f8:7b:7e:8b:c6:2c:0a:91:5b:21:2b:81:7c:01:ed:90:f9:
ba:5b:05:ec:83:be:db:c4:38:41:e1:3d:22:25:ab:86:0a:cf:
38:ec:b2:33:ca:df:85:b6:39:ce:52:0a:11:b0:b4:f8:dc:eb:
26:fd:4a:80:bf:fa:39:c9:0d:f4:fb:db:25:bc:c9:dc:86:2c:
81:e8:2c:7a:64:08:fa:de:2f:cf:16:1f:a3:8a:dc:c0:d7:79:
49:f6:10:d5:14:9e:7c:11:cf:e5:6b:11:ce:be:5b:82:4a:ed:
96:3b:ed:3f:f6:26:a4:d3:f4:c7:20:74:97:b8:79:14:df:68:
d1:e8:b0:ac:5d:bd:64:0b:0e:a5:fe:19:cb:5e:e8:35:14:7c:
fd:43:04:b9:04:17:2e:66:36:eb:7b:81:d5:78:ec:60:1a:01:
1a:c6:72:23:86:7d:88:c2:59:1b:09:a5:13:af:9b:68:44:42:
82:b5:aa:ca:d2:ad:fc:49:2a:32:7e:02:c1:a2:1a:c9:55:9f:
65:0c:0e:56
-----BEGIN CERTIFICATE-----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Generated at Sat Aug 31 10:42:10 2024 by rpki-client on console-fra.rpki-client.org