Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3339383a3a2f34382d3438203d3e20323135333133.roa
File: 326130663a383563313a3339383a3a2f34382d3438203d3e20323135333133.roa (raw, json)
Hash identifier: XZZWJq1Xee8StCJi+OdsIiigjDmfPbcUGz2sWRK8SJY=
Subject key identifier: A2:60:1D:30:4A:A3:DC:B9:3E:32:AC:E2:36:70:F4:39:B5:35:90:7C
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 153CB6B61EA8C677D192CDF946EDECB809C698B9
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3339383a3a2f34382d3438203d3e20323135333133.roa
Signing time: Sat 23 Mar 2024 23:09:03 +0000
ROA not before: Sat 23 Mar 2024 23:04:03 +0000
ROA not after: Sat 22 Mar 2025 23:09:03 +0000
asID: 215313
IP address blocks: 2a0f:85c1:398::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:3c:b6:b6:1e:a8:c6:77:d1:92:cd:f9:46:ed:ec:b8:09:c6:98:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Mar 23 23:04:03 2024 GMT
Not After : Mar 22 23:09:03 2025 GMT
Subject: CN=A2601D304AA3DCB93E32ACE23670F439B535907C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:12:20:58:f7:b9:dc:0a:dc:29:35:dd:71:58:
f2:c1:99:8c:47:f4:aa:e1:27:0f:81:a5:f3:1e:e1:
43:1b:01:9b:06:9e:6c:5a:79:d8:c2:9f:77:f8:76:
61:b8:d9:67:71:17:ef:94:6b:59:6a:8e:b9:b5:96:
ad:43:55:0a:7d:03:c8:8b:da:76:e6:55:5d:1a:0d:
8e:c5:d9:e7:6f:db:1f:68:fd:20:20:38:6a:4b:e7:
ae:50:77:cb:c9:94:4e:7e:cd:c7:c9:32:ee:29:81:
76:d4:90:3f:bf:fc:f3:91:43:33:fd:0f:c7:f5:b2:
41:52:fd:90:29:b4:38:c6:42:55:3e:4d:33:69:04:
81:b3:7a:97:54:7b:de:1f:81:bb:e0:14:e3:5a:48:
9c:a4:b7:e7:af:f6:a7:af:40:b0:49:db:0f:27:2c:
a7:dc:df:de:e3:12:b3:d7:9b:fe:4e:c8:ab:33:cc:
23:e9:10:7a:c5:ff:84:50:49:3a:a9:76:1e:a3:6f:
d4:f2:ee:81:01:e4:8a:30:01:46:d1:46:9e:61:b8:
ed:9c:3e:c7:de:10:8e:45:96:44:a1:c6:9d:81:8e:
16:f5:f5:a9:43:1f:50:eb:dc:e4:81:6d:fe:97:a3:
ed:ca:1f:9e:16:77:52:85:84:0e:a0:c2:87:86:e8:
5f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:60:1D:30:4A:A3:DC:B9:3E:32:AC:E2:36:70:F4:39:B5:35:90:7C
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3339383a3a2f34382d3438203d3e20323135333133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:398::/48
Signature Algorithm: sha256WithRSAEncryption
04:d1:3a:cb:b5:9b:26:41:a6:02:c8:d5:df:9a:78:ba:7a:8f:
b4:de:69:d3:01:49:2f:5c:7a:23:aa:89:76:e6:cb:b6:75:38:
d4:f1:d4:05:8e:b5:a9:fa:48:4b:bb:0e:73:f6:af:5d:78:c7:
58:81:d9:b4:60:ac:a8:aa:b9:0b:0d:67:59:27:2f:80:02:04:
98:c8:c8:0e:c5:ed:71:63:b2:21:6f:ac:1a:6a:4c:6a:02:a9:
dc:05:66:35:f5:5c:5d:0e:27:9e:36:39:60:ba:62:d3:c9:02:
d5:a0:cb:02:67:3f:77:e2:9e:6b:72:bc:b2:34:e9:17:04:8c:
4d:b4:05:50:b1:4a:5a:ae:13:c4:da:3c:fa:95:74:07:d4:88:
86:1f:6c:42:f4:df:e6:bd:70:38:9c:42:f9:4b:cf:e3:b8:e4:
6b:90:20:6c:7d:0b:d3:d1:64:51:9f:a4:b6:44:81:91:d7:35:
54:35:03:f2:78:2b:d9:3d:94:64:54:ef:90:d4:60:5c:7b:9a:
f7:4c:db:12:e3:0b:83:1c:f0:2a:ce:2d:2e:19:f6:8f:d5:d5:
81:06:7b:0c:d6:dc:f3:d6:a3:b0:b6:bb:81:57:88:ed:42:de:
d3:c9:7d:6e:fc:aa:36:70:23:81:18:95:4e:f2:69:ce:9c:cd:
d5:9c:42:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org