Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a633064303a3a2f34342d3438203d3e20323037363039.roa
File: 326130663a383563313a633064303a3a2f34342d3438203d3e20323037363039.roa (raw, json)
Hash identifier: QKME8DUOBs9asNQjFsrAztquevubK5xnAKSELclOgoA=
Subject key identifier: 69:4F:FD:01:F7:D9:12:46:9E:77:5A:43:6B:C4:A4:AC:0F:BB:B9:CF
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 7EB8331DFF8C6DD203E14FF40EE663C2100F70DB
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a633064303a3a2f34342d3438203d3e20323037363039.roa
Signing time: Tue 10 Oct 2023 15:15:55 +0000
ROA not before: Tue 10 Oct 2023 15:10:55 +0000
ROA not after: Tue 08 Oct 2024 15:15:55 +0000
asID: 207609
IP address blocks: 2a0f:85c1:c0d0::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:b8:33:1d:ff:8c:6d:d2:03:e1:4f:f4:0e:e6:63:c2:10:0f:70:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Oct 10 15:10:55 2023 GMT
Not After : Oct 8 15:15:55 2024 GMT
Subject: CN=694FFD01F7D912469E775A436BC4A4AC0FBBB9CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:d1:60:b3:24:cc:83:73:2f:81:24:bc:aa:
cb:88:69:6c:d3:60:16:64:c2:6f:74:a0:7c:53:16:
e2:36:35:85:a4:71:e5:7e:c3:3e:92:90:d8:19:c9:
30:0b:8f:d9:0e:f4:14:f5:ae:55:ba:69:94:77:7e:
36:8a:9f:2f:56:7f:a8:13:e5:e1:d1:f2:24:10:e9:
06:90:ae:41:5c:f5:34:c4:8e:34:52:aa:5a:17:05:
e4:5f:73:72:3a:31:39:68:7c:63:a9:9a:d4:ef:7d:
61:27:f5:e2:11:3d:79:29:21:cd:96:e7:a5:7b:12:
a3:22:f1:44:4f:83:09:31:f9:bb:56:80:cb:42:34:
31:1d:16:1d:39:ed:b2:c8:8b:8f:31:4b:3e:07:07:
d3:68:5a:36:e4:78:80:dc:21:81:51:b5:0d:d6:f7:
94:af:d1:66:db:1a:0d:40:12:2d:55:4e:d5:96:e7:
4f:6e:25:c3:5f:e4:82:d2:b6:f1:27:3a:0b:32:82:
61:4f:57:18:f2:bf:57:0c:58:bf:d6:5a:9b:cb:0d:
70:cb:ef:94:8d:7e:3a:c3:a7:dd:4e:d6:eb:28:7b:
cc:c5:05:e1:26:eb:f0:9f:c8:0d:26:64:e6:c9:07:
b1:81:e9:dd:60:6b:c4:66:4a:fd:c4:6a:83:3e:32:
e3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4F:FD:01:F7:D9:12:46:9E:77:5A:43:6B:C4:A4:AC:0F:BB:B9:CF
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a633064303a3a2f34342d3438203d3e20323037363039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c0d0::/44
Signature Algorithm: sha256WithRSAEncryption
6b:1c:8c:28:4b:45:f1:5a:a7:57:1b:da:b9:2c:82:00:6f:db:
0b:11:84:09:eb:27:6e:6b:be:1f:3c:40:82:df:61:65:fc:cb:
93:07:8d:79:91:44:21:5f:3c:a3:2c:54:56:0d:58:37:9f:22:
64:23:6b:e7:ea:88:e9:d1:e8:e1:6f:79:4d:58:e5:28:4a:cb:
b7:ea:2a:41:d3:6c:b4:89:51:3c:d1:25:62:93:9f:ac:96:c7:
14:e2:8f:e6:90:3f:0b:9f:30:85:6e:16:19:63:19:12:aa:30:
48:8c:cd:39:1a:8e:02:a9:b8:05:7b:8c:e3:e1:ed:0e:49:99:
98:27:32:59:f2:27:38:d1:7d:40:ff:99:3c:a1:9e:d1:24:8d:
d1:60:db:5b:07:43:49:9f:0a:b3:14:95:93:a5:10:b4:91:ef:
40:56:f4:03:39:9b:66:91:dc:6f:ca:ae:e5:ff:f6:71:59:d0:
55:ba:5e:35:6c:96:ec:24:ca:bb:69:b6:a0:5a:15:74:1b:6c:
6b:f6:8e:d4:b3:c8:8c:bb:2d:c5:d1:33:a8:5b:14:09:8f:d3:
cc:d5:f0:bc:fb:c5:99:67:03:d8:5d:47:5c:ce:0e:b0:d7:ec:
19:fb:97:28:db:4b:53:34:3b:0b:ec:36:d1:2c:29:80:86:c6:
ab:dd:b9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org