Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563303a3931303a3a2f34342d3434203d3e20323038373531.roa
File: 326130663a383563303a3931303a3a2f34342d3434203d3e20323038373531.roa (raw, json)
Hash identifier: i/OVdE/2dBlYbBCVDNqAlnScvATLHppKxTkHBBjWyrU=
Subject key identifier: 27:60:EC:1E:F0:43:74:02:F9:D1:0E:45:E6:44:C0:92:1D:3A:32:0E
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 5D97E450A9E65DFCABCD78DE3F7EBE812B62281B
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563303a3931303a3a2f34342d3434203d3e20323038373531.roa
Signing time: Tue 10 Oct 2023 15:17:52 +0000
ROA not before: Tue 10 Oct 2023 15:12:52 +0000
ROA not after: Tue 08 Oct 2024 15:17:52 +0000
asID: 208751
IP address blocks: 2a0f:85c0:910::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:97:e4:50:a9:e6:5d:fc:ab:cd:78:de:3f:7e:be:81:2b:62:28:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Oct 10 15:12:52 2023 GMT
Not After : Oct 8 15:17:52 2024 GMT
Subject: CN=2760EC1EF0437402F9D10E45E644C0921D3A320E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cd:85:1e:5a:f4:36:66:32:52:91:a9:55:d1:
d6:43:eb:4c:71:f1:79:5c:f0:bb:44:04:85:49:53:
29:ef:45:b5:e8:6b:5c:02:eb:43:55:95:93:35:75:
44:3e:4f:a2:dc:cf:bc:7b:bc:e2:e3:3c:1e:90:ad:
fc:b8:0d:cd:46:05:cc:f5:af:c1:09:a9:2f:e3:ad:
3a:50:3d:21:a1:3d:20:13:b5:26:a3:12:27:58:16:
0e:e2:05:52:7d:72:b6:cb:e7:78:78:2d:cc:bf:78:
31:00:2d:2e:0e:c8:82:57:d7:a5:72:d6:91:20:87:
64:ef:3f:e0:a5:10:0f:2a:00:84:3f:86:51:29:67:
af:76:a3:94:45:97:c9:86:21:c3:e6:6e:c8:ea:3e:
90:3c:4f:1d:64:f4:ed:50:41:32:05:2c:ff:72:51:
d7:96:4b:a9:9a:1e:6a:f7:23:06:4e:ed:21:2e:9b:
8b:90:fc:1c:67:67:25:36:5b:9b:41:a1:d0:51:d9:
79:23:24:91:56:e1:e8:39:01:c7:c8:31:4a:67:56:
3c:a6:87:aa:64:57:fa:b5:6c:34:b3:ef:46:09:2a:
8c:06:11:b7:7c:55:3e:12:13:15:bc:cd:3b:96:20:
2f:bd:bc:ab:68:c8:d3:2a:c0:00:fe:2f:10:0b:e3:
4b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:60:EC:1E:F0:43:74:02:F9:D1:0E:45:E6:44:C0:92:1D:3A:32:0E
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563303a3931303a3a2f34342d3434203d3e20323038373531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c0:910::/44
Signature Algorithm: sha256WithRSAEncryption
4c:29:90:29:b7:3a:66:a3:5e:fa:2e:1d:60:38:4e:6d:2c:e2:
8f:f3:ca:51:b9:97:61:6a:15:ce:a4:ef:6d:ad:f3:9d:c4:9c:
54:bd:3c:b7:2c:64:b5:10:c0:b1:c6:30:b8:63:56:2d:22:91:
82:6f:9b:b6:0b:a6:a5:b6:fd:ba:58:d4:79:69:d1:7f:dc:e9:
e4:f3:c0:db:a1:8a:73:91:f5:62:e5:88:f7:28:1d:08:73:fe:
68:61:01:d0:bd:03:c7:7a:c4:c3:2b:dc:e3:16:96:97:ae:9e:
ee:64:73:8f:06:fd:07:0e:c8:a0:8c:d9:c6:31:66:f3:c8:2f:
b6:48:0b:9a:e4:7a:7d:07:83:07:bf:cd:3d:aa:43:96:42:3c:
88:b7:8b:8c:ce:e7:fb:fd:96:02:32:21:6d:e8:4d:c8:4a:f5:
02:dd:b7:82:30:3b:3a:f6:fe:8e:55:d4:b2:ca:ca:5c:70:e5:
d0:a6:2f:b7:8e:90:2c:4a:bf:1a:37:7d:7a:e1:f9:84:35:29:
4b:a1:84:c1:24:e0:77:30:4c:c3:f8:f7:a9:d8:12:eb:ad:d1:
38:04:d8:54:f9:59:39:39:f0:7a:51:3b:1f:3f:b9:4a:dc:4a:
fc:27:34:94:a1:c6:3b:5c:a2:a2:6e:24:04:d9:0e:c0:cc:7f:
2b:c4:d5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org