Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563323a3a2f33322d3438203d3e20323037383431.roa
File: 326130663a383563323a3a2f33322d3438203d3e20323037383431.roa (raw, json)
Hash identifier: yFmu+3vfvpI3kRhpTJcbPIuGno8DrhQHyo6IcpNfd/s=
Subject key identifier: 63:77:B5:1C:45:C9:B9:BD:10:81:B8:D0:3A:50:1C:98:51:C3:DE:AF
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 5A108795C6C3F960699D844617DED80240357281
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563323a3a2f33322d3438203d3e20323037383431.roa
Signing time: Tue 10 Oct 2023 15:17:30 +0000
ROA not before: Tue 10 Oct 2023 15:12:30 +0000
ROA not after: Tue 08 Oct 2024 15:17:30 +0000
asID: 207841
IP address blocks: 2a0f:85c2::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:10:87:95:c6:c3:f9:60:69:9d:84:46:17:de:d8:02:40:35:72:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Oct 10 15:12:30 2023 GMT
Not After : Oct 8 15:17:30 2024 GMT
Subject: CN=6377B51C45C9B9BD1081B8D03A501C9851C3DEAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0f:fe:48:ff:9a:e0:07:d6:11:e2:33:42:d9:
19:b8:de:f7:20:7e:da:2e:1a:72:13:e6:22:29:be:
b0:97:71:d7:fa:2c:dd:32:58:87:a9:29:9d:55:18:
d2:12:09:1b:90:bf:85:b2:b6:3e:5b:f8:21:e6:79:
d6:8c:eb:20:24:d2:9e:97:79:7e:0b:88:be:96:a5:
6c:66:a5:7e:60:b3:73:11:d6:90:04:ac:38:7e:5c:
34:e9:86:65:98:b0:f9:ba:a7:15:eb:57:b0:ae:f7:
e4:86:65:2f:f1:8f:72:bd:53:00:26:26:a9:1b:01:
35:72:f5:03:d4:34:93:32:6d:18:23:6b:58:d3:56:
1d:0c:f0:44:31:46:d0:a9:d9:94:68:3b:56:da:20:
45:3d:88:df:32:4f:5b:81:13:be:c8:d4:17:35:7c:
63:1b:fc:94:15:df:77:d1:68:a3:7b:37:26:72:f1:
9b:a5:f1:44:05:8f:71:78:ae:b0:f8:bc:80:23:b3:
1d:e2:64:62:ed:c6:8d:24:ea:26:00:a3:c4:03:56:
8e:4f:5f:de:be:65:77:ef:2c:04:3d:de:91:08:6c:
a8:d9:e8:13:6c:04:8a:48:60:85:54:62:35:7c:21:
2d:18:50:19:d5:84:2a:48:2a:d8:be:ca:eb:98:ff:
ba:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:77:B5:1C:45:C9:B9:BD:10:81:B8:D0:3A:50:1C:98:51:C3:DE:AF
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563323a3a2f33322d3438203d3e20323037383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c2::/32
Signature Algorithm: sha256WithRSAEncryption
4b:24:15:d8:12:fe:1b:ab:49:26:45:0e:33:eb:66:83:d3:89:
37:19:95:47:d1:6d:0a:72:2b:ac:31:33:bd:ea:ed:38:0e:85:
15:83:d2:aa:3c:d1:6e:86:da:f1:cd:40:d1:8b:22:a3:5c:70:
d0:b1:93:66:f3:5a:90:fc:90:90:c8:ea:76:ad:f5:3b:b5:01:
dc:39:8c:7b:26:9f:15:aa:2b:00:ab:10:03:bf:e2:1a:9c:f6:
4d:34:e6:84:fb:fa:35:32:09:ae:1c:f2:77:e7:e3:8b:2d:c4:
e3:73:93:0b:96:02:66:5d:0d:54:52:0f:5e:11:7d:ef:98:e9:
5b:64:0d:97:d9:09:e1:3f:fc:f4:bf:df:e3:fd:c7:0a:6b:a1:
69:ec:d3:d1:87:b1:ac:0a:ef:b3:b5:a6:66:19:07:bb:b2:b5:
6f:37:96:37:a7:fa:e4:58:2c:3a:f6:1a:8a:2f:27:2e:de:d6:
da:eb:b9:a7:dc:ba:3f:e4:fa:99:0a:22:23:4f:9e:c6:bd:4c:
d0:67:a7:54:39:90:a2:73:5e:a1:68:27:4e:46:53:be:37:37:
35:9e:97:e7:88:02:ca:11:e5:f1:89:38:4c:36:2a:43:3e:f3:
b5:34:16:0e:49:df:66:f3:c3:86:78:ed:91:2a:d5:47:ee:07:
a7:9b:97:cd
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUWhCHlcbD+WBpnYRGF97YAkA1coEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWFlNDQzNzAyOTY1OTUzOWY1NGY5MDBiMzVlNDNiZTA2
YTk0YjM3YjAeFw0yMzEwMTAxNTEyMzBaFw0yNDEwMDgxNTE3MzBaMDMxMTAvBgNV
BAMTKDYzNzdCNTFDNDVDOUI5QkQxMDgxQjhEMDNBNTAxQzk4NTFDM0RFQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1D/5I/5rgB9YR4jNC2Rm43vcg
ftouGnIT5iIpvrCXcdf6LN0yWIepKZ1VGNISCRuQv4Wytj5b+CHmedaM6yAk0p6X
eX4LiL6WpWxmpX5gs3MR1pAErDh+XDTphmWYsPm6pxXrV7Cu9+SGZS/xj3K9UwAm
JqkbATVy9QPUNJMybRgja1jTVh0M8EQxRtCp2ZRoO1baIEU9iN8yT1uBE77I1Bc1
fGMb/JQV33fRaKN7NyZy8Zul8UQFj3F4rrD4vIAjsx3iZGLtxo0k6iYAo8QDVo5P
X96+ZXfvLAQ93pEIbKjZ6BNsBIpIYIVUYjV8IS0YUBnVhCpIKti+yuuY/7qPAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUY3e1HEXJub0QgbjQOlAcmFHD3q8wHwYDVR0j
BBgwFoAUWuRDcClllTn1T5ALNeQ74GqUs3swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMtYTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhm
MTk2LzAvNUFFNDQzNzAyOTY1OTUzOUY1NEY5MDBCMzVFNDNCRTA2QTk0QjM3Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1d1UkRjQ2xsbFRuMVQ1QUxOZVE3NEdx
VXMzcy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMt
YTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhmMTk2LzAvMzI2MTMwNjYzYTM4MzU2MzMy
M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzMDM3MzgzNDMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA
Kg+FwjANBgkqhkiG9w0BAQsFAAOCAQEASyQV2BL+G6tJJkUOM+tmg9OJNxmVR9Ft
CnIrrDEzvertOA6FFYPSqjzRboba8c1A0Ysio1xw0LGTZvNakPyQkMjqdq31O7UB
3DmMeyafFaorAKsQA7/iGpz2TTTmhPv6NTIJrhzyd+fjiy3E43OTC5YCZl0NVFIP
XhF975jpW2QNl9kJ4T/89L/f4/3HCmuhaezT0YexrArvs7WmZhkHu7K1bzeWN6f6
5FgsOvYaii8nLt7W2uu5p9y6P+T6mQoiI0+exr1M0GenVDmQonNeoWgnTkZTvjc3
NZ6X54gCyhHl8Yk4TDYqQz7ztTQWDknfZvPDhnjtkSrVR+4Hp5uXzQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org