Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a31303a3a2f34342d3434203d3e20323038373531.roa
File: 326130663a383563313a31303a3a2f34342d3434203d3e20323038373531.roa (raw, json)
Hash identifier: mgI8pfUqjdFsAFByFnCJP98qsdSJwpUCHXAS++3Dqkc=
Subject key identifier: ED:D1:8E:FD:11:16:33:39:E0:39:2F:C1:08:06:04:FD:F8:61:7C:D1
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 4272B0C84C9018BB59B49C915B157B49B4756313
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a31303a3a2f34342d3434203d3e20323038373531.roa
Signing time: Tue 10 Oct 2023 15:18:04 +0000
ROA not before: Tue 10 Oct 2023 15:13:04 +0000
ROA not after: Tue 08 Oct 2024 15:18:04 +0000
asID: 208751
IP address blocks: 2a0f:85c1:10::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:72:b0:c8:4c:90:18:bb:59:b4:9c:91:5b:15:7b:49:b4:75:63:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Oct 10 15:13:04 2023 GMT
Not After : Oct 8 15:18:04 2024 GMT
Subject: CN=EDD18EFD11163339E0392FC1080604FDF8617CD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:da:dc:97:50:12:10:c1:44:d5:fa:54:93:
ea:39:62:4a:27:a3:56:e4:df:8b:a5:eb:b9:cb:69:
8e:40:46:f6:04:cd:de:87:cd:a1:3b:4e:ea:81:a2:
10:fb:16:5d:3d:ee:e9:88:3c:c7:ec:46:65:da:ac:
45:4f:04:91:eb:6e:be:e2:51:f6:de:3b:58:33:6e:
34:86:95:5e:94:73:9c:39:d1:60:4f:bd:83:13:46:
d2:80:6b:9c:b1:5c:e9:36:8f:46:e3:bf:e4:53:36:
d4:7c:6f:e2:32:4d:a1:9f:23:c7:da:db:c2:85:de:
09:ab:c8:99:0e:29:6c:95:9c:72:79:9b:56:2c:aa:
ee:cc:7c:d7:c3:1f:5d:45:58:99:d6:f3:fb:71:83:
2a:0f:2e:2e:e3:c4:f4:7c:ae:c7:0b:f1:3f:d3:64:
47:77:35:d0:28:e5:46:f0:6b:25:df:80:ae:88:38:
b3:8f:75:78:01:b3:b1:b5:db:1a:4c:0a:7e:e5:cb:
3c:83:85:06:cb:14:6a:d3:76:f1:13:82:ad:f7:40:
83:a9:b7:45:62:90:17:3a:bb:a3:c8:46:e1:b1:31:
42:5f:0d:80:99:06:0b:80:c5:4e:97:cf:4f:de:fe:
a9:19:89:a5:45:5e:9f:62:5a:89:e7:59:4d:55:a5:
62:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D1:8E:FD:11:16:33:39:E0:39:2F:C1:08:06:04:FD:F8:61:7C:D1
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a31303a3a2f34342d3434203d3e20323038373531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:10::/44
Signature Algorithm: sha256WithRSAEncryption
15:a8:b5:44:d9:ef:c2:6d:d4:0a:f1:27:0f:fb:86:53:37:3c:
6e:fe:0c:a9:8f:6f:03:97:e9:39:43:33:f2:6a:61:9f:bf:8b:
46:fd:91:72:2a:35:27:97:46:7c:20:89:f5:8d:d4:6d:76:f2:
d1:b0:2b:6a:33:75:c0:d8:5c:87:5f:c1:59:8b:12:82:e9:fd:
57:e3:0c:f8:54:4a:16:f5:62:1d:a4:f7:67:f7:00:11:b2:bd:
92:da:f4:17:00:b0:ba:79:37:b6:4a:25:9a:8d:2c:4c:96:18:
7b:a3:b4:af:e8:87:6a:ff:56:b3:8c:d3:eb:a3:08:0c:9c:3f:
0c:5b:b0:07:21:6c:0d:19:97:e7:46:88:13:69:6f:5d:c1:7f:
e5:97:3f:1a:9d:c0:ed:ff:c5:9e:fc:94:88:4c:9d:87:18:16:
5e:67:c9:be:de:1d:ff:d8:3f:7a:d2:25:1f:d4:5d:4a:f8:60:
77:d7:d3:87:af:35:8d:dd:75:4d:33:ff:a1:42:78:a0:f2:a6:
64:d6:7c:e5:d6:12:30:9a:e1:2c:70:00:be:30:c3:72:1f:bd:
3b:23:99:57:85:d7:45:a8:db:38:76:2a:b9:74:f5:dc:97:cb:
c8:52:92:54:e7:d1:b6:0f:e5:e6:74:c5:2e:7a:8e:7a:30:f1:
19:e8:7f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org