Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a33313a3a2f34382d3438203d3e20323036363238.roa
File: 326130663a383563313a33313a3a2f34382d3438203d3e20323036363238.roa (raw, json)
Hash identifier: LLOSuyaycw+wGhfKFClUQZixoeTrDMaDWQsvRpiKSGQ=
Subject key identifier: 8F:01:62:70:11:26:45:67:1E:DB:14:F1:6A:E1:92:54:55:6B:72:26
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 439866DEADBAA386389DBFF044162BD1D3CC53E7
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a33313a3a2f34382d3438203d3e20323036363238.roa
Signing time: Tue 10 Oct 2023 15:15:29 +0000
ROA not before: Tue 10 Oct 2023 15:10:29 +0000
ROA not after: Tue 08 Oct 2024 15:15:29 +0000
asID: 206628
IP address blocks: 2a0f:85c1:31::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:98:66:de:ad:ba:a3:86:38:9d:bf:f0:44:16:2b:d1:d3:cc:53:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Oct 10 15:10:29 2023 GMT
Not After : Oct 8 15:15:29 2024 GMT
Subject: CN=8F016270112645671EDB14F16AE19254556B7226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:b8:d5:f0:13:3e:72:55:a8:5b:27:d4:b6:
52:6f:fd:37:16:fc:3b:a6:b0:e3:35:31:29:6e:46:
66:29:dc:90:9f:d0:6c:81:ee:3a:9a:a2:5d:29:54:
68:e9:58:bc:81:93:15:21:69:69:82:2e:c9:d0:56:
19:2a:0e:37:3e:fb:01:a5:6c:3a:60:19:7e:21:89:
33:62:e8:c1:09:e5:21:4a:1b:40:ff:96:fc:d6:a7:
57:cb:b2:43:44:2e:88:69:83:0a:9f:86:ec:93:e4:
a6:18:58:0b:48:d7:38:a2:f4:d7:58:38:99:44:3a:
36:93:6a:c9:bf:b9:6d:b2:f7:99:2e:93:25:6c:99:
0a:44:2f:76:2f:31:78:0e:24:70:51:37:49:48:29:
10:28:ca:16:6c:63:92:3e:c0:ab:0f:7e:47:ca:a4:
c9:ec:36:38:5e:d3:8c:ea:87:3e:7d:16:64:94:94:
ae:13:bb:9b:9e:0e:6b:38:d6:20:08:35:9a:16:1e:
b3:80:a3:8e:ac:f1:48:66:00:6f:fa:be:1c:b3:57:
db:c9:f7:fa:aa:53:d2:c2:3a:f4:9b:4a:7d:9b:0e:
4a:f4:ae:30:ee:d2:b2:85:bb:71:48:76:67:2d:26:
9d:76:19:a3:f4:46:6c:0a:2a:08:f2:a6:a3:71:a2:
ab:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:01:62:70:11:26:45:67:1E:DB:14:F1:6A:E1:92:54:55:6B:72:26
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a33313a3a2f34382d3438203d3e20323036363238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:31::/48
Signature Algorithm: sha256WithRSAEncryption
87:80:a3:55:72:e6:0d:50:bf:6e:8f:e9:98:cb:92:11:4d:27:
14:36:80:3d:69:b3:f7:0c:5d:84:fc:dc:24:b9:33:fc:d5:55:
37:10:d0:8c:e5:49:9b:d4:e9:fe:0e:b6:d7:11:da:ac:44:5a:
04:70:92:96:db:6e:bd:ab:37:6c:fe:45:fe:d4:e8:6c:c7:a4:
dc:2d:c9:ab:43:bd:0e:b2:30:80:5b:f3:d8:5a:da:3d:ba:60:
9b:6e:03:70:43:8a:2e:4c:e1:b4:3c:e5:89:e8:e0:87:52:4d:
e9:94:d9:d6:c9:08:57:72:0f:a5:29:34:d5:7d:50:ff:fc:09:
05:86:42:e6:e8:a2:de:84:0e:7c:38:50:21:1e:69:3c:eb:59:
06:87:ee:93:66:b9:ae:47:e8:58:96:f0:82:23:b3:e2:39:30:
d6:50:0f:56:8f:75:50:5f:75:5d:d1:72:fe:07:ad:25:b7:87:
e1:de:44:0a:5c:ff:39:7b:02:8d:09:38:af:d4:0a:cb:c1:d1:
b9:6a:10:a5:b3:a9:c9:ce:1f:e4:49:89:11:3a:dc:9b:46:75:
e1:e5:37:92:ed:f4:69:6b:95:56:73:da:80:d1:68:13:76:89:
07:07:57:23:c9:d9:49:54:3d:e7:67:56:b5:f2:9d:90:ee:17:
7b:50:a4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org