Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393030373a3a2f34382d3438203d3e20323134373537.roa
File: 326130613a363034343a393030373a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier: XhUAPh2dwZ2SV95+M9Cdbo9d/NuaGBPGLWVyLWjxg8E=
Subject key identifier: 5A:2A:4E:9C:DC:1F:9C:D9:9B:FE:95:78:C0:93:D0:A1:9E:33:3A:59
Certificate issuer: /CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF
Certificate serial: 4A4B9E2A724376B0532965E604B15C525FE82585
Authority key identifier: 48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393030373a3a2f34382d3438203d3e20323134373537.roa
Signing time: Sun 04 Aug 2024 19:13:07 +0000
ROA not before: Sun 04 Aug 2024 19:08:07 +0000
ROA not after: Sun 03 Aug 2025 19:13:07 +0000
asID: 214757
IP address blocks: 2a0a:6044:9007::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Aug 2024 17:15:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:4b:9e:2a:72:43:76:b0:53:29:65:e6:04:b1:5c:52:5f:e8:25:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF
Validity
Not Before: Aug 4 19:08:07 2024 GMT
Not After : Aug 3 19:13:07 2025 GMT
Subject: CN=5A2A4E9CDC1F9CD99BFE9578C093D0A19E333A59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:39:93:2d:22:f0:59:a8:f5:3c:c4:68:c3:be:
87:b5:eb:94:4a:91:1c:b6:24:91:6c:a3:10:75:f5:
90:4e:6d:a5:6f:81:24:0a:4e:aa:7d:b7:ec:da:2c:
a4:e4:04:26:87:c7:11:8d:44:26:6f:cd:a5:02:c4:
40:8e:5d:63:db:ac:e3:2e:9a:9e:71:10:6a:46:27:
dd:c0:d2:3a:b7:e2:7c:35:9c:55:b9:0a:67:b5:05:
2e:a2:9e:39:d3:60:7c:dc:5f:58:2c:61:38:2d:e3:
7c:a2:c9:1e:91:70:23:ad:3e:73:eb:05:7d:f1:d0:
07:e3:6d:df:b9:e0:9a:7a:a8:2e:6a:0c:35:c2:e7:
8b:96:a5:c8:52:a1:d2:c3:b7:e1:31:a3:cd:36:31:
e4:08:c1:53:e3:f3:36:70:18:a4:5a:90:fa:28:82:
65:5b:d1:84:bc:cf:ef:f5:9e:b1:a1:c8:14:f7:fc:
8d:0c:c2:e4:df:67:f7:3a:17:b8:b6:9d:2d:16:3b:
d5:af:ba:a6:25:16:57:c6:36:a3:18:f9:a2:33:99:
a5:cb:f4:83:fb:6d:b7:d2:ba:e1:ab:13:2f:40:43:
04:41:29:68:40:02:f8:40:61:29:1b:68:04:1f:3d:
b5:77:b6:a5:c9:3a:bb:72:8b:a1:70:c9:d5:d7:3e:
f6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2A:4E:9C:DC:1F:9C:D9:9B:FE:95:78:C0:93:D0:A1:9E:33:3A:59
X509v3 Authority Key Identifier:
keyid:48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393030373a3a2f34382d3438203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:9007::/48
Signature Algorithm: sha256WithRSAEncryption
61:4d:c1:07:1d:52:19:52:5c:1d:fc:3c:82:03:a2:60:b5:7d:
53:07:40:d7:a8:5f:7d:97:20:0f:d4:2f:eb:29:35:11:63:34:
c6:e6:23:0c:01:fe:c8:20:9a:6d:34:7e:6e:0f:26:1e:80:f7:
c6:53:1d:5f:2d:7e:b6:f4:27:4f:2f:35:0d:8c:5a:5e:43:79:
fd:f3:55:bf:7d:8e:77:63:8b:fd:39:00:35:30:1f:c8:7b:aa:
4a:e1:10:92:a7:cc:a7:a7:44:fe:a9:07:b9:02:81:69:61:50:
3b:e4:83:e1:69:23:a6:07:c1:45:f4:e5:25:e0:cc:60:07:1d:
9c:29:86:45:56:5b:e9:c9:b8:8f:f3:d7:89:21:62:54:b3:c8:
36:56:89:fc:02:bb:dd:36:74:6f:5b:25:29:8d:53:95:0b:07:
51:0a:62:d1:59:10:b9:20:90:a0:b6:d2:23:44:f9:38:ca:f0:
e4:d1:b6:7e:c5:d8:5a:f9:1d:b7:49:5a:21:a1:9c:d3:44:ec:
ea:1b:80:5e:d5:2d:5a:64:3e:66:68:4a:69:03:a9:10:1a:5c:
1f:ae:5e:f2:7b:fc:6f:a6:9d:b3:9c:cf:d7:84:8d:2e:ea:c4:
41:09:21:69:bc:c2:55:b5:fc:7e:02:e4:96:6a:c9:65:ca:20:
9a:7a:5a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 19:40:56 2024 by rpki-client on console-ams.rpki-client.org