Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3363343a3a2f34382d3438203d3e20323135303834.roa
File: 326130663a383563313a3363343a3a2f34382d3438203d3e20323135303834.roa (raw, json)
Hash identifier: wlPkWHM5QQgX8eUy/nQJcZtKe44aMSAyuAf0DXmH7Aw=
Subject key identifier: 0C:DE:5D:68:C1:7E:46:32:6B:4A:D3:2B:B4:72:49:C2:E6:71:D4:AE
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 4285F28401E84896426A13D833B434AE544B1058
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3363343a3a2f34382d3438203d3e20323135303834.roa
Signing time: Fri 19 Apr 2024 16:58:54 +0000
ROA not before: Fri 19 Apr 2024 16:53:54 +0000
ROA not after: Fri 18 Apr 2025 16:58:54 +0000
asID: 215084
IP address blocks: 2a0f:85c1:3c4::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:85:f2:84:01:e8:48:96:42:6a:13:d8:33:b4:34:ae:54:4b:10:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Apr 19 16:53:54 2024 GMT
Not After : Apr 18 16:58:54 2025 GMT
Subject: CN=0CDE5D68C17E46326B4AD32BB47249C2E671D4AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:45:27:1a:ab:34:9b:e0:09:3c:45:40:28:bc:
68:dc:05:48:03:6d:00:2c:55:00:5c:17:ae:65:af:
77:4d:c2:e2:3d:75:a0:b1:c7:e8:48:05:6e:26:a5:
c3:3b:3a:5d:d8:65:14:c3:91:7c:b1:82:a6:0d:ac:
f3:3e:2c:d3:af:d6:25:f4:06:ae:07:a7:e7:c8:ea:
c4:c2:8d:79:41:cd:d5:ed:d5:06:30:be:5a:88:df:
61:91:b4:2f:49:54:4e:e9:2c:ca:86:20:5d:19:b9:
b5:c1:d3:47:12:5e:a5:6a:7c:86:1e:f3:f4:b6:d7:
c5:ee:73:11:d5:2a:5d:8f:00:de:7d:79:1d:d3:80:
2c:0e:42:af:a1:93:2f:e9:d1:12:65:0d:74:fc:ee:
eb:68:78:a4:2a:0f:01:54:bd:89:a5:d1:3e:68:9d:
2b:b2:34:a1:1f:2c:18:66:45:94:f6:a2:fb:65:39:
1f:0c:35:a6:c2:5f:b4:a1:e7:c1:71:d5:b4:71:a8:
35:ef:d3:6e:16:de:ad:1c:1e:0d:ec:7c:31:a0:77:
49:51:b8:9d:8f:25:6b:e6:4b:13:ad:ff:4e:27:4a:
91:3b:cd:99:a3:ed:35:7d:93:68:69:d2:cb:e1:ed:
f4:13:de:41:e5:eb:10:d9:8f:f6:fa:4d:59:cc:6f:
93:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DE:5D:68:C1:7E:46:32:6B:4A:D3:2B:B4:72:49:C2:E6:71:D4:AE
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3363343a3a2f34382d3438203d3e20323135303834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3c4::/48
Signature Algorithm: sha256WithRSAEncryption
42:d8:e9:6e:d6:e8:26:49:31:48:de:85:80:3c:d8:6e:e0:f4:
fe:e1:7c:1d:f3:17:65:99:42:93:7f:2b:6f:ac:b7:92:b9:ae:
1c:39:49:76:9b:71:ef:a4:00:e8:8c:d0:ce:df:5c:5f:d4:0d:
21:14:11:0b:31:25:7c:1f:60:d5:58:b5:88:79:30:73:dd:2e:
84:84:3c:7a:51:8a:da:5e:e0:4f:51:38:21:13:0d:6f:f5:03:
15:7b:4e:85:21:c4:53:64:88:5a:bd:e2:bd:ee:01:ff:a6:ae:
c0:6b:61:7b:f2:fc:de:2c:b6:a8:e2:14:7e:9a:2f:bb:05:dc:
92:b9:da:ca:f5:99:b6:de:5c:1a:31:a1:d0:69:51:85:39:66:
d9:12:68:87:85:1f:32:7f:43:d0:c1:3c:e3:c6:b6:26:fc:7c:
d4:20:d0:7c:d5:f7:bf:b1:fd:ef:15:2c:cd:e4:7d:d9:ef:e5:
02:5d:ed:2b:77:0d:3e:e0:e0:e2:a7:24:14:2e:5c:c1:03:f7:
90:5e:25:74:9e:e4:60:53:8a:dd:95:3c:44:8b:8e:65:5a:63:
7f:f5:5d:b6:98:f4:0f:07:da:b8:e9:08:77:d7:1d:d5:52:d2:
e0:a0:2a:1b:9e:60:ef:57:66:4c:d4:4f:c7:b8:95:f1:46:d1:
55:1e:9b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org