Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3231333a3a2f34382d3438203d3e20323037343531.roa
File: 326130663a383563313a3231333a3a2f34382d3438203d3e20323037343531.roa (raw, json)
Hash identifier: YA03TbuP3rg9o8PUnq87IXGR35KwSvKV4NzxEMC9IKs=
Subject key identifier: 51:73:21:C4:48:69:99:79:50:EF:42:60:94:8E:64:5F:35:26:56:00
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 187DC893A39E7BB904F1917081CF272D5570A570
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3231333a3a2f34382d3438203d3e20323037343531.roa
Signing time: Tue 10 Oct 2023 15:15:38 +0000
ROA not before: Tue 10 Oct 2023 15:10:38 +0000
ROA not after: Tue 08 Oct 2024 15:15:38 +0000
asID: 207451
IP address blocks: 2a0f:85c1:213::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:7d:c8:93:a3:9e:7b:b9:04:f1:91:70:81:cf:27:2d:55:70:a5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Oct 10 15:10:38 2023 GMT
Not After : Oct 8 15:15:38 2024 GMT
Subject: CN=517321C44869997950EF4260948E645F35265600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:82:b0:ce:0b:02:a0:e9:fe:3f:94:91:19:
2a:db:95:d6:37:78:c3:80:35:f6:75:c1:37:bf:e9:
f6:a7:87:41:46:b3:9d:7a:42:af:be:ed:b1:1b:10:
5f:4f:9f:cb:11:02:42:3b:75:72:93:ef:43:10:fe:
0e:e0:f5:3e:63:11:07:c0:10:b4:13:61:b4:a0:20:
64:c9:d9:72:18:08:ed:31:98:80:45:ec:35:86:9f:
45:5c:fb:99:c8:db:9a:5a:88:55:38:22:76:a2:89:
6c:a9:da:b9:8b:57:93:44:91:bc:8f:bc:a5:59:40:
8d:67:df:a0:41:40:cf:3c:a6:7d:60:89:56:74:ee:
48:45:b0:f2:f7:cd:eb:3e:68:8a:52:6d:50:a3:5e:
71:fe:1b:ad:9c:52:b6:cd:e8:7f:c8:6a:cb:db:cc:
9c:ff:59:ed:e2:0e:f7:1f:bd:9c:a8:9b:ed:42:6d:
65:7d:02:01:0b:f4:71:b2:6a:ac:31:bc:8d:d6:a8:
00:44:11:3a:6c:e3:39:5e:a4:98:41:fc:ab:33:93:
9d:fa:c2:8a:9a:ee:a2:ab:df:78:2f:20:10:51:03:
f0:a1:aa:a6:d7:09:c7:ad:dc:4d:f1:47:bb:fa:73:
d8:c8:2b:68:dc:85:bc:48:4f:31:3a:3a:f3:86:14:
92:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:73:21:C4:48:69:99:79:50:EF:42:60:94:8E:64:5F:35:26:56:00
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3231333a3a2f34382d3438203d3e20323037343531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:213::/48
Signature Algorithm: sha256WithRSAEncryption
78:a9:5e:9f:10:b0:80:47:ea:95:ed:15:37:b0:2d:1e:92:3d:
c6:37:a7:fa:ae:25:3f:1a:9f:cd:9e:bc:5e:c0:e4:fa:cb:c4:
01:1b:cb:0b:e5:47:6f:b0:fe:4a:02:da:91:5d:2e:bd:d8:fe:
16:1f:ed:08:06:a4:27:5f:a3:43:8d:34:93:cd:8c:bc:4f:bf:
ac:c6:f6:e3:11:f8:29:e0:54:04:9a:14:68:ea:5f:0a:9a:7e:
c3:91:95:55:e6:d5:38:b7:e0:31:5a:72:75:c8:e7:a0:50:7e:
ae:2b:f5:81:84:f2:26:64:95:7c:85:d5:f0:1e:ae:59:8b:4b:
d3:6d:36:30:c0:ba:2e:d3:1f:21:1e:bf:6a:6e:2a:58:03:01:
19:25:c1:8e:7f:21:8d:39:53:78:12:8c:94:05:64:94:df:67:
91:60:cd:b8:78:27:7c:03:b2:54:43:18:f9:ce:87:aa:a3:b8:
ff:cc:ba:d7:b4:be:a8:64:2a:76:88:ce:e0:a3:fd:c0:27:31:
ea:2c:e3:de:18:bd:d4:7e:dc:fa:8d:6b:14:04:ef:0a:f3:89:
6a:ff:60:fd:94:df:69:72:6e:18:5a:c5:99:c7:ef:c5:3e:bf:
44:47:92:2f:17:7c:d2:da:d6:e5:f2:90:2a:c0:42:85:d6:9e:
09:1c:a0:87
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUGH3Ik6Oee7kE8ZFwgc8nLVVwpXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWFlNDQzNzAyOTY1OTUzOWY1NGY5MDBiMzVlNDNiZTA2
YTk0YjM3YjAeFw0yMzEwMTAxNTEwMzhaFw0yNDEwMDgxNTE1MzhaMDMxMTAvBgNV
BAMTKDUxNzMyMUM0NDg2OTk5Nzk1MEVGNDI2MDk0OEU2NDVGMzUyNjU2MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB5IKwzgsCoOn+P5SRGSrbldY3
eMOANfZ1wTe/6fanh0FGs516Qq++7bEbEF9Pn8sRAkI7dXKT70MQ/g7g9T5jEQfA
ELQTYbSgIGTJ2XIYCO0xmIBF7DWGn0Vc+5nI25paiFU4InaiiWyp2rmLV5NEkbyP
vKVZQI1n36BBQM88pn1giVZ07khFsPL3zes+aIpSbVCjXnH+G62cUrbN6H/Iasvb
zJz/We3iDvcfvZyom+1CbWV9AgEL9HGyaqwxvI3WqABEETps4zlepJhB/Kszk536
woqa7qKr33gvIBBRA/ChqqbXCcet3E3xR7v6c9jIK2jchbxITzE6OvOGFJIHAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUUXMhxEhpmXlQ70JglI5kXzUmVgAwHwYDVR0j
BBgwFoAUWuRDcClllTn1T5ALNeQ74GqUs3swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMtYTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhm
MTk2LzAvNUFFNDQzNzAyOTY1OTUzOUY1NEY5MDBCMzVFNDNCRTA2QTk0QjM3Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1d1UkRjQ2xsbFRuMVQ1QUxOZVE3NEdx
VXMzcy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMt
YTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhmMTk2LzAvMzI2MTMwNjYzYTM4MzU2MzMx
M2EzMjMxMzMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzczNDM1MzEucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqD4XBAhMwDQYJKoZIhvcNAQELBQADggEBAHipXp8QsIBH6pXtFTew
LR6SPcY3p/quJT8an82evF7A5PrLxAEbywvlR2+w/koC2pFdLr3Y/hYf7QgGpCdf
o0ONNJPNjLxPv6zG9uMR+CngVASaFGjqXwqafsORlVXm1Ti34DFacnXI56BQfq4r
9YGE8iZklXyF1fAerlmLS9NtNjDAui7THyEev2puKlgDARklwY5/IY05U3gSjJQF
ZJTfZ5Fgzbh4J3wDslRDGPnOh6qjuP/Mute0vqhkKnaIzuCj/cAnMeos494YvdR+
3PqNaxQE7wrziWr/YP2U32lybhhaxZnH78U+v0RHki8XfNLa1uXykCrAQoXWngkc
oIc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org