Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a35303a3a2f34382d3438203d3e20323130323032.roa
File: 326130663a383563313a35303a3a2f34382d3438203d3e20323130323032.roa (raw, json)
Hash identifier: awjmx9FJe0KsKA4ydhRcJoRlpw+zaVswB8AUfXWbY2w=
Subject key identifier: 7C:A4:06:90:99:20:2F:E1:4F:96:40:11:90:51:72:A2:66:D4:F2:AE
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 0302F189D88156CA82CBA4C7DCD1154C446C9018
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a35303a3a2f34382d3438203d3e20323130323032.roa
Signing time: Tue 10 Oct 2023 15:19:06 +0000
ROA not before: Tue 10 Oct 2023 15:14:06 +0000
ROA not after: Tue 08 Oct 2024 15:19:06 +0000
asID: 210202
IP address blocks: 2a0f:85c1:50::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:02:f1:89:d8:81:56:ca:82:cb:a4:c7:dc:d1:15:4c:44:6c:90:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Oct 10 15:14:06 2023 GMT
Not After : Oct 8 15:19:06 2024 GMT
Subject: CN=7CA4069099202FE14F964011905172A266D4F2AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:49:14:3a:7e:6b:7c:5c:ed:69:7d:88:a6:27:
0b:3a:e7:d9:ba:2e:68:8f:e5:3c:ad:fb:7b:01:f8:
23:6a:1e:a1:35:0b:29:e4:8c:5f:9d:f6:0e:a3:6e:
a1:72:07:fd:b8:4a:98:7d:bb:a7:e9:38:8f:35:95:
db:52:f6:05:51:f4:16:a9:36:24:66:ee:35:14:aa:
d0:2e:8b:20:dd:53:6c:73:13:44:80:4c:c0:40:a8:
75:33:1f:48:5d:fe:33:45:46:09:4f:ce:74:c7:71:
d2:4b:ab:47:d5:30:45:df:da:53:7d:22:a4:42:e6:
49:9c:db:5e:c9:98:25:48:02:bc:1c:ce:74:61:8c:
42:41:41:19:4c:28:61:52:e3:87:e9:4e:d9:81:56:
09:b3:4a:98:8a:c9:1a:bf:ab:ea:d8:83:4b:d0:62:
fc:c8:98:8b:31:98:46:28:26:11:00:2e:5e:bd:55:
36:07:4d:84:a7:f9:95:6a:f7:05:1b:d1:ee:77:5d:
f8:fc:93:29:45:ca:bf:74:52:cb:6b:65:bc:74:65:
4c:d1:55:cd:df:b9:d4:09:4b:56:21:75:54:a9:f3:
ac:38:b3:a5:88:68:4e:d8:d4:bc:70:06:7f:8e:c9:
6d:dc:9f:f2:32:72:56:40:9f:57:4a:54:52:a2:f1:
8d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A4:06:90:99:20:2F:E1:4F:96:40:11:90:51:72:A2:66:D4:F2:AE
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a35303a3a2f34382d3438203d3e20323130323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:50::/48
Signature Algorithm: sha256WithRSAEncryption
02:19:d1:1f:2e:3a:5f:87:8a:c2:d4:5e:a5:bb:2a:1a:bf:e1:
6b:99:20:c4:c1:40:61:e2:e7:f7:48:b5:cc:3a:14:22:b6:c9:
22:8b:23:87:ae:02:2d:48:e2:9e:2f:85:37:ec:c4:1f:73:4f:
60:53:69:ff:02:39:15:0f:a5:2f:27:98:97:e5:29:94:d2:f9:
e2:57:b4:53:3c:50:0a:f6:39:93:a8:5f:97:6b:28:d4:cd:36:
2d:43:37:61:d5:3a:f5:28:59:c7:26:d3:9f:df:bb:d7:c8:62:
d3:7a:22:60:4e:5e:a9:91:75:8d:ec:ef:50:02:7e:55:c2:f2:
1f:94:13:3b:1f:e5:cc:72:f1:ef:a3:2c:d4:f0:24:d4:21:86:
01:d7:99:d1:a8:e3:10:7f:5a:16:b3:cc:7f:ae:47:28:6e:29:
b7:a2:53:c8:e1:1b:09:56:d0:4b:2d:48:bd:f6:83:c8:05:9f:
cf:6b:7b:6e:28:d0:eb:63:e7:ef:18:f6:b2:dc:c4:92:20:24:
57:e1:b7:f2:69:c7:63:da:42:4e:7b:aa:79:f6:8d:39:cc:af:
6b:29:5d:41:47:d4:12:70:7c:c8:20:eb:4b:f6:41:c3:64:7c:
fb:3a:ec:ce:ca:6e:b1:c1:86:89:7f:48:62:22:36:04:08:62:
71:60:9e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org