Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a32303a3a2f34382d3438203d3e20323037373634.roa
File: 326130663a383563313a32303a3a2f34382d3438203d3e20323037373634.roa (raw, json)
Hash identifier: PCWsIQoTSrPdfCkhUxDlI1Nhbc4G2jKvHGYtIPvukvc=
Subject key identifier: 37:4B:3E:61:DF:A2:CE:11:C9:AA:25:1B:12:18:A6:70:41:DC:86:52
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 0B1D0125F586325626832BB58E95A838FA924C7F
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a32303a3a2f34382d3438203d3e20323037373634.roa
Signing time: Tue 10 Oct 2023 15:16:06 +0000
ROA not before: Tue 10 Oct 2023 15:11:06 +0000
ROA not after: Tue 08 Oct 2024 15:16:06 +0000
asID: 207764
IP address blocks: 2a0f:85c1:20::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:1d:01:25:f5:86:32:56:26:83:2b:b5:8e:95:a8:38:fa:92:4c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Oct 10 15:11:06 2023 GMT
Not After : Oct 8 15:16:06 2024 GMT
Subject: CN=374B3E61DFA2CE11C9AA251B1218A67041DC8652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0c:b2:dd:cb:7b:7e:b3:5a:46:c7:16:d8:e3:
15:be:8a:08:85:67:f6:3b:5f:6d:2b:c4:f8:fb:9a:
78:b4:a7:df:1f:fe:ba:0e:4a:99:a8:f5:97:ea:93:
e9:7f:cd:b5:fd:59:bf:79:cf:0d:c8:30:7f:a6:3b:
41:11:38:a4:d5:d6:da:49:0e:82:8f:f6:a4:b4:8d:
f1:9b:ef:5b:c5:1c:0a:6c:65:ed:e3:3a:12:76:d3:
5d:11:f7:48:87:9e:19:c4:96:48:72:a3:9e:b3:66:
a3:5b:00:70:a4:18:c8:c5:42:f8:e7:cf:27:3f:67:
de:22:a1:16:f0:dc:7e:1e:90:62:34:72:9c:a3:01:
7c:0b:8e:83:19:b6:57:9e:ee:40:d0:8c:31:97:74:
4e:3d:89:f5:91:92:db:11:65:f7:5e:9a:48:e2:87:
ff:75:fa:24:24:51:8a:93:cc:a2:d6:f2:d5:6e:f1:
24:0e:5b:78:8e:38:34:55:37:d6:86:46:49:e3:4c:
15:1e:9f:24:dc:cf:df:b1:20:25:0d:f5:fc:68:4d:
2a:09:f9:b5:64:56:25:44:f9:c7:96:79:42:08:36:
06:a5:b7:a4:0f:75:7d:a9:57:0f:71:a1:2d:aa:9a:
b9:56:70:0c:74:c1:08:da:7d:05:15:47:ed:26:de:
2e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4B:3E:61:DF:A2:CE:11:C9:AA:25:1B:12:18:A6:70:41:DC:86:52
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a32303a3a2f34382d3438203d3e20323037373634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:20::/48
Signature Algorithm: sha256WithRSAEncryption
68:e2:0b:0b:61:f1:5e:68:93:b1:00:c2:a3:b7:68:9c:bf:73:
10:ce:80:9c:9b:0a:22:9b:c1:d5:3e:7e:ea:d7:18:a1:ef:34:
98:52:f8:8d:84:01:67:c2:60:79:9a:84:e6:43:c1:05:b7:7b:
15:54:40:21:dd:80:7c:d9:cc:67:2b:6e:77:dd:f7:f3:71:0f:
3d:94:5e:81:21:c3:c7:b5:a5:da:c2:16:61:33:64:1d:66:5e:
78:47:4d:79:1a:63:4d:87:99:54:7d:6e:eb:64:8e:5d:37:7a:
ee:6f:c8:b9:f3:1d:26:e0:78:e3:6f:a5:59:b1:c3:6a:a6:a6:
e0:53:aa:73:e6:c4:69:97:9c:4c:b9:7a:43:23:06:af:49:8a:
ac:0b:68:42:d4:95:db:eb:54:8b:42:a6:1f:4b:b5:40:b4:7a:
ed:54:9c:95:43:c3:7f:2d:a9:e6:03:16:c3:38:d5:19:07:b0:
70:19:e8:8b:32:1c:92:c5:02:8d:bb:b4:f7:0a:ad:23:b3:e5:
46:b5:9a:59:57:c5:7d:e0:40:87:be:74:b5:30:e9:95:bb:cb:
7d:86:3c:83:17:1d:ef:27:e7:7b:f0:40:1b:24:e7:1b:cf:0d:
e8:60:71:18:a5:d8:c1:08:ca:ef:ba:32:fd:79:a8:18:40:ba:
0d:19:f2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org