Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393030373a3a2f34382d3438203d3e20333933353737.roa
File: 326130613a363034343a393030373a3a2f34382d3438203d3e20333933353737.roa (raw, json)
Hash identifier: Iae7RevW4EIHxVjzw3GVyTE9SaQntBivnbO2zYUkZIA=
Subject key identifier: 93:F6:6E:44:79:72:CC:C2:C0:1B:E9:0A:0F:3F:6E:7A:03:A0:A0:B7
Certificate issuer: /CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF
Certificate serial: 2ED415728D9AF630F73CF49B79D727664709319F
Authority key identifier: 48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393030373a3a2f34382d3438203d3e20333933353737.roa
Signing time: Wed 07 Aug 2024 17:15:16 +0000
ROA not before: Wed 07 Aug 2024 17:10:16 +0000
ROA not after: Wed 06 Aug 2025 17:15:16 +0000
asID: 393577
IP address blocks: 2a0a:6044:9007::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 04 Sep 2024 07:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d4:15:72:8d:9a:f6:30:f7:3c:f4:9b:79:d7:27:66:47:09:31:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF
Validity
Not Before: Aug 7 17:10:16 2024 GMT
Not After : Aug 6 17:15:16 2025 GMT
Subject: CN=93F66E447972CCC2C01BE90A0F3F6E7A03A0A0B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b7:b8:0d:f2:d8:70:81:8d:f3:87:e3:2f:7b:
c0:88:8f:62:98:7e:72:e5:ee:5f:6b:4b:8f:98:f2:
54:82:2f:f1:67:84:f0:73:90:85:59:b4:1b:50:e9:
79:86:4d:86:c1:d6:9c:17:4f:af:1e:93:d4:6a:c9:
5f:ba:14:59:8f:57:f5:fa:74:00:0e:58:57:76:95:
7b:dc:04:1e:61:05:bc:d1:ed:b9:b5:7e:1d:2d:bb:
aa:15:c7:3a:e4:0a:0f:75:76:8b:fb:af:f9:75:df:
c0:c4:d9:68:73:cc:33:35:b0:e9:74:e6:64:af:cc:
91:25:2c:ec:6e:1f:0e:e5:bb:a0:26:5b:be:58:fb:
a6:50:25:7e:0e:f1:93:49:06:b5:56:92:26:4c:a8:
5e:c2:9f:12:ff:cf:2a:89:cf:bc:ac:9c:ab:30:05:
d5:83:1c:b4:1c:8d:2e:82:b9:b1:dd:83:3b:6f:b4:
f5:ea:5d:13:32:70:d9:8e:e6:f5:9f:46:6c:bc:ce:
96:e1:53:a1:be:33:49:58:65:07:74:d6:6e:8a:ca:
87:df:aa:3f:6e:7a:db:53:10:1a:a6:f3:8a:bb:2f:
5b:af:06:c0:2a:3d:8d:2c:08:fc:72:d9:ba:cb:f6:
bc:f7:54:bb:fa:2d:3d:f6:91:f9:ef:6b:b7:4b:4f:
ac:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F6:6E:44:79:72:CC:C2:C0:1B:E9:0A:0F:3F:6E:7A:03:A0:A0:B7
X509v3 Authority Key Identifier:
keyid:48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393030373a3a2f34382d3438203d3e20333933353737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:9007::/48
Signature Algorithm: sha256WithRSAEncryption
a2:7d:69:61:4c:7a:4e:0b:5d:6a:6a:2d:7f:02:28:bb:37:92:
87:b2:82:69:00:0c:18:89:32:ed:7d:bf:a1:0a:9c:e6:0c:39:
7f:5f:bf:4a:cb:7c:83:d9:68:fb:70:a1:bd:90:aa:cc:a9:54:
39:29:f2:9b:dd:ef:cc:87:e3:d1:4c:ae:21:a8:ea:74:f8:c1:
68:84:32:75:de:6d:20:23:46:77:e6:0b:8f:9e:06:4d:bf:07:
8a:8a:96:a6:2d:83:89:e0:23:dc:c7:75:37:19:05:e8:5b:93:
b9:32:15:2a:a1:97:62:b8:da:d2:04:ed:66:30:25:a0:f8:79:
e6:31:70:82:68:a7:b2:94:fa:3e:76:2e:24:f2:2e:a6:94:2e:
20:2d:48:65:6a:77:17:51:ed:db:8a:a8:31:34:d1:8a:fd:9a:
a5:1a:56:e9:77:e0:f0:58:2d:1d:a9:6e:09:80:4c:b5:48:86:
80:ac:41:fd:82:82:6a:df:8b:55:09:ff:d8:68:f2:41:34:10:
2c:88:ab:40:a9:88:bc:b3:61:8d:03:06:7d:99:37:e8:14:ee:
25:d0:f1:50:6c:9f:89:7a:00:7d:ed:cd:ed:ce:ad:42:36:49:
44:93:e9:54:76:8e:83:2e:6b:e0:10:df:3d:97:e7:10:e2:17:
cc:bf:8d:ad
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 4 09:06:01 2024 by rpki-client on console-ams.rpki-client.org