Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a32313a3a2f34382d3438203d3e20323036363238.roa
File: 326130663a383563313a32313a3a2f34382d3438203d3e20323036363238.roa (raw, json)
Hash identifier: 1xRwJS2rUzVHdYI7w6f9vCYLrVYf4UfD1P1G0LDgJl8=
Subject key identifier: 5F:28:5F:7E:3D:0A:06:0C:A5:B9:6F:47:94:13:F4:EA:B1:9A:F6:A5
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 3FFA9F516CF23504BBD98614F101423EFCA7F514
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a32313a3a2f34382d3438203d3e20323036363238.roa
Signing time: Tue 10 Oct 2023 15:14:58 +0000
ROA not before: Tue 10 Oct 2023 15:09:58 +0000
ROA not after: Tue 08 Oct 2024 15:14:58 +0000
asID: 206628
IP address blocks: 2a0f:85c1:21::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:fa:9f:51:6c:f2:35:04:bb:d9:86:14:f1:01:42:3e:fc:a7:f5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Oct 10 15:09:58 2023 GMT
Not After : Oct 8 15:14:58 2024 GMT
Subject: CN=5F285F7E3D0A060CA5B96F479413F4EAB19AF6A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c7:ec:5b:d6:30:4e:da:a9:f3:35:38:f4:43:
7a:b2:dc:70:27:93:c1:37:81:94:a0:8e:2e:90:50:
f7:e4:46:1f:14:bd:8d:f5:77:84:24:db:01:b0:cc:
77:b1:f6:5f:c6:dc:a5:ec:40:14:2c:a1:54:6b:88:
c0:6b:75:80:44:d1:48:4a:c8:f4:83:95:5d:41:aa:
a8:04:bc:95:a2:4f:0b:ca:79:fb:8a:99:ad:14:b4:
2f:05:26:3e:ca:a9:b9:09:bf:89:6e:bd:e3:0f:2d:
04:9b:f5:2a:93:84:18:5a:50:82:c6:84:40:46:4a:
74:5f:a9:d5:7a:51:75:98:72:a4:d3:94:59:a5:dc:
d3:74:93:d2:b2:81:59:f6:b3:fc:49:a2:b7:37:c6:
8c:03:4c:1b:3e:b0:e9:19:f5:16:2a:36:85:a0:10:
d0:22:7b:22:0a:de:f1:3f:8a:86:10:74:f1:44:b3:
81:f2:1a:96:b2:3c:52:57:50:e9:21:2b:99:86:4c:
23:55:d6:79:24:9a:2b:c4:00:36:be:a2:f8:c5:2a:
38:4a:52:eb:3e:7a:b7:12:4c:2a:06:09:da:8f:da:
a7:77:b8:2f:5f:f6:74:29:52:fb:2f:98:77:91:12:
cf:e0:bf:66:13:da:ea:20:22:05:53:dd:e4:42:e8:
56:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:28:5F:7E:3D:0A:06:0C:A5:B9:6F:47:94:13:F4:EA:B1:9A:F6:A5
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a32313a3a2f34382d3438203d3e20323036363238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:21::/48
Signature Algorithm: sha256WithRSAEncryption
73:06:b8:44:6f:e4:32:51:f8:75:8b:5c:32:2f:ca:cf:a6:8a:
9b:c0:78:be:a4:12:3a:1d:3f:2f:bd:c4:43:a9:50:3c:c4:2a:
49:50:54:48:40:af:42:ed:29:59:43:8a:e9:05:2a:a3:60:1e:
7c:1f:5f:4b:a9:be:fa:f8:d0:76:21:3b:a2:9f:fb:5c:d4:39:
6f:82:3d:f8:e4:c4:5d:84:8c:d7:e1:ee:59:68:16:f2:76:ea:
f9:cf:63:af:d7:9f:56:88:97:45:00:0f:ed:f1:6c:07:84:09:
11:06:59:9a:07:70:40:5b:68:b2:a7:9d:65:2d:7c:d5:34:64:
90:dd:72:09:21:95:34:1e:76:0a:0a:b7:73:c4:04:76:ae:b5:
3d:30:de:57:a4:0a:41:9f:3f:60:ae:8d:e4:44:75:5d:b3:9e:
0f:c4:b3:29:44:ea:47:f5:88:c6:99:5a:ee:63:c3:a9:b4:aa:
e7:2f:49:d0:03:63:9d:b1:c8:ff:e1:9b:24:f9:11:e5:c4:b7:
f7:e9:c5:a3:aa:ea:56:e5:4f:54:48:ff:63:98:af:a9:ab:89:
56:ca:91:90:cc:cd:c3:23:0f:9d:a2:40:b2:38:c8:6b:68:d7:
5a:29:e2:05:06:aa:90:e4:68:a7:18:64:c2:b4:94:67:83:2a:
9b:2c:89:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org