Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3332363a3a2f34382d3438203d3e203434383736.roa
File: 326130663a383563313a3332363a3a2f34382d3438203d3e203434383736.roa (raw, json)
Hash identifier: 5gfE/3L/TypHWdwVxwmHHKTNLyA6fvY4+gZHlj4YUZw=
Subject key identifier: DD:7F:E1:9E:79:70:0E:BF:9E:87:8F:74:E1:C9:5D:4B:0A:7F:23:96
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 14B963BF3A89271AFA8A759D381458D608F250AE
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3332363a3a2f34382d3438203d3e203434383736.roa
Signing time: Thu 02 Nov 2023 13:23:00 +0000
ROA not before: Thu 02 Nov 2023 13:18:00 +0000
ROA not after: Thu 31 Oct 2024 13:23:00 +0000
asID: 44876
IP address blocks: 2a0f:85c1:326::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:b9:63:bf:3a:89:27:1a:fa:8a:75:9d:38:14:58:d6:08:f2:50:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Nov 2 13:18:00 2023 GMT
Not After : Oct 31 13:23:00 2024 GMT
Subject: CN=DD7FE19E79700EBF9E878F74E1C95D4B0A7F2396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e1:31:73:bb:a7:5a:a5:05:62:30:a2:37:30:
c6:aa:9d:7d:f3:3c:fa:3c:b3:4b:d0:b6:0e:60:43:
86:15:48:91:66:78:73:db:71:ec:59:12:4c:f0:bf:
cf:c2:3f:8c:5c:56:e5:8a:2e:77:dd:7c:61:48:ce:
5a:bb:cc:10:ef:5e:99:81:b3:c2:fe:53:87:4f:42:
88:59:d1:3c:58:86:13:24:65:3a:7f:78:21:a4:6e:
89:f9:77:39:5b:cd:1a:9a:7a:b9:2c:62:63:12:4e:
af:21:25:95:57:aa:b0:e0:d6:79:b0:12:7f:54:cb:
b8:12:43:af:8c:b7:b4:85:06:7c:98:72:41:91:73:
23:24:0e:b5:81:62:8a:0b:30:2f:ee:ac:ad:bd:9c:
55:0c:3c:65:7d:25:46:0f:c9:58:ac:93:49:2d:ca:
b8:45:04:fd:31:13:6c:eb:ae:5e:e6:16:e9:1f:a0:
b9:b7:09:1f:d9:70:a0:f2:55:89:bc:a5:8d:f2:10:
24:ce:92:dd:d6:d4:a0:f5:79:a7:c3:75:3d:82:ed:
91:23:e8:e7:ce:a1:a9:7d:ed:08:1f:99:6f:b1:6f:
e7:76:31:63:60:ec:32:a6:43:33:68:a8:55:c6:9d:
05:46:27:04:92:79:b3:34:bb:77:73:b5:ac:da:92:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7F:E1:9E:79:70:0E:BF:9E:87:8F:74:E1:C9:5D:4B:0A:7F:23:96
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3332363a3a2f34382d3438203d3e203434383736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:326::/48
Signature Algorithm: sha256WithRSAEncryption
2f:2a:b3:fb:0b:22:9e:74:64:2e:79:39:58:b0:31:c7:14:40:
03:d8:78:34:f6:aa:b5:6f:47:70:1d:93:3b:92:e0:b3:fd:cd:
85:eb:88:12:a9:3e:4e:1a:ab:36:32:5a:d0:e8:d8:42:ae:4c:
f7:44:04:ea:59:b6:c3:63:7a:2c:74:d9:5d:6d:de:95:dc:08:
1a:f3:c9:08:9a:82:c7:92:26:76:62:00:30:55:57:86:cc:ed:
a0:a3:15:4c:2e:11:6c:4b:0d:7d:07:12:6a:94:16:2b:f8:07:
01:9c:0f:aa:9f:7b:04:57:76:d2:8c:db:73:a4:f3:46:6d:db:
75:3c:72:d8:31:3e:be:fb:fe:c4:01:59:e7:f7:0c:2e:08:dd:
58:17:9c:50:c4:ec:ef:20:bc:6a:37:e9:63:c0:31:3b:07:81:
69:1f:62:a0:9c:a9:e1:98:e6:ea:0d:a1:33:d3:85:4c:8f:3f:
2f:80:2e:d4:74:0d:b6:8e:70:07:88:05:6d:fa:9a:d7:74:f2:
84:fc:38:f2:5a:29:20:ad:77:3e:47:e4:b9:46:bb:15:65:15:
09:78:1f:cd:12:cf:41:18:d6:32:e7:0d:8c:e0:f3:a1:ce:a3:
dd:a2:46:c1:64:db:ce:0f:57:7a:7d:f0:6e:ba:3d:d2:70:0f:
7a:46:6e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org