Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3362393a3a2f34382d3438203d3e20323135313335.roa
File: 326130663a383563313a3362393a3a2f34382d3438203d3e20323135313335.roa (raw, json)
Hash identifier: pk/ysH3SE3wcYtwDAdyiJmTQP59AS1loVD0VLl6ZZ54=
Subject key identifier: 4B:5A:C2:9E:76:30:C1:4B:A7:4B:92:91:64:FA:42:16:FA:8F:EB:29
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 76C22A16AB44DA2AFB2C76DBDD8E898B3B0B4A10
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3362393a3a2f34382d3438203d3e20323135313335.roa
Signing time: Thu 25 Apr 2024 13:35:20 +0000
ROA not before: Thu 25 Apr 2024 13:30:20 +0000
ROA not after: Thu 24 Apr 2025 13:35:20 +0000
asID: 215135
IP address blocks: 2a0f:85c1:3b9::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:c2:2a:16:ab:44:da:2a:fb:2c:76:db:dd:8e:89:8b:3b:0b:4a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Apr 25 13:30:20 2024 GMT
Not After : Apr 24 13:35:20 2025 GMT
Subject: CN=4B5AC29E7630C14BA74B929164FA4216FA8FEB29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6c:d8:7f:ce:43:67:f0:99:b4:4b:cc:cf:75:
e6:00:d1:df:5c:58:1c:a3:71:8b:5f:d2:16:ae:53:
2d:9b:67:35:08:5d:7e:83:77:7a:78:5c:cc:fd:71:
3f:21:d5:2d:82:3e:eb:7a:ea:14:e1:a6:55:94:6f:
35:33:38:6b:60:fa:94:bd:3f:1a:49:f5:31:5f:d4:
ec:88:de:d5:e0:05:2d:59:88:b2:c7:7b:93:23:df:
d8:90:ef:f9:fc:f9:71:58:4f:02:53:ae:3c:f0:61:
53:da:15:83:36:67:11:05:5b:77:fe:33:d7:7e:1a:
1b:74:02:62:93:6e:17:96:0b:7b:6c:f7:2d:22:bf:
7a:5b:f9:2f:0a:3c:39:10:3a:57:5d:63:8f:7c:d5:
82:dd:9d:62:18:ab:a2:10:fc:f0:45:41:dc:f6:c3:
57:38:41:5f:45:aa:af:0e:3e:d3:02:b8:48:fc:64:
a5:89:72:3f:4b:08:84:03:08:de:a1:ea:08:40:5b:
42:7b:d8:c1:7e:5e:d0:5d:45:ec:12:42:58:d7:13:
28:b0:6f:be:b3:82:bc:96:b5:b5:c6:55:db:97:33:
ba:c8:4b:a9:2a:5f:a8:72:71:36:b4:06:b8:0f:93:
01:1c:91:b0:dd:f9:d8:44:3f:d1:a6:fb:69:cb:ee:
aa:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5A:C2:9E:76:30:C1:4B:A7:4B:92:91:64:FA:42:16:FA:8F:EB:29
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3362393a3a2f34382d3438203d3e20323135313335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3b9::/48
Signature Algorithm: sha256WithRSAEncryption
ab:66:58:e1:b6:01:fa:97:52:67:50:d9:98:54:57:55:de:89:
22:02:6e:8d:7b:33:63:17:72:b5:d8:ac:b9:fe:0e:93:ac:fa:
76:5b:a4:c8:3e:54:2e:15:f5:f6:d2:35:0c:2e:35:3d:4a:21:
d8:33:84:42:b6:29:37:15:49:7b:e6:ae:43:f6:50:a0:82:13:
d2:12:8d:6c:6e:4a:95:fe:bf:18:79:d6:0a:51:b2:0b:68:f1:
c5:2e:85:62:c9:97:e5:e9:ae:bc:85:97:dc:d5:43:42:29:cd:
6e:36:b8:aa:e5:84:41:0b:2f:1c:87:55:7c:6a:74:ab:0c:87:
68:a7:37:4f:28:3f:06:36:55:b0:c5:56:94:af:ea:34:e2:3b:
86:b6:72:1f:84:bb:56:86:91:79:4b:15:cc:f5:ff:1e:17:f5:
62:20:64:dc:32:f7:dc:16:68:a4:5e:fe:9d:0e:ee:78:e7:a4:
f4:47:65:b2:77:be:1a:9d:d5:0f:4b:1b:c6:10:08:5c:b1:90:
af:c1:2e:8d:ba:ca:f3:17:fb:2a:cd:10:b0:d8:bb:56:78:cf:
18:85:56:60:20:ee:3d:02:bf:39:d1:4d:6c:16:34:04:ac:b9:
63:e3:e7:35:c2:7a:74:53:68:a0:df:d3:5a:53:52:6a:cd:2d:
8e:c4:83:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org