Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337363a3a2f34382d3438203d3e20323134373537.roa
File: 326130613a363034343a616337363a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier: VS/DZwBTpRoH8/J6GhiCOMEbqq4wcbFBZWsuRqWM/98=
Subject key identifier: F1:F2:59:94:88:C5:08:4C:52:62:BC:1A:71:FD:D3:1A:AE:21:69:F0
Certificate issuer: /CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Certificate serial: 2A3414B829338B4B5ECEC30F0212BE0918F815AE
Authority key identifier: 5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337363a3a2f34382d3438203d3e20323134373537.roa
Signing time: Sat 08 Jun 2024 19:01:15 +0000
ROA not before: Sat 08 Jun 2024 18:56:15 +0000
ROA not after: Sat 07 Jun 2025 19:01:15 +0000
asID: 214757
IP address blocks: 2a0a:6044:ac76::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 09 Jun 2024 06:49:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:34:14:b8:29:33:8b:4b:5e:ce:c3:0f:02:12:be:09:18:f8:15:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Validity
Not Before: Jun 8 18:56:15 2024 GMT
Not After : Jun 7 19:01:15 2025 GMT
Subject: CN=F1F2599488C5084C5262BC1A71FDD31AAE2169F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a0:80:52:d7:d0:38:68:8a:41:83:03:08:df:
c5:85:65:21:2c:95:05:22:b4:83:a9:58:23:b8:89:
3c:d4:24:df:f2:18:cc:bd:bd:e7:44:4d:48:97:65:
83:16:65:ac:e0:c6:87:57:43:a3:8d:65:77:b7:a3:
3a:10:ad:83:f8:08:33:69:88:9e:20:09:be:4d:dd:
ff:be:1f:0d:9d:ad:05:5c:ba:76:ac:5b:e8:4b:cb:
bb:65:41:5d:5f:80:3e:04:68:14:3c:6a:c1:35:29:
10:ee:b0:4e:c4:ba:5e:90:11:f6:88:be:13:94:59:
12:0b:8f:d4:47:0d:ee:a3:4d:22:52:4c:47:61:fa:
49:46:00:03:d9:25:39:97:70:e8:22:2e:87:47:13:
0c:1f:a4:49:89:8b:94:3f:c5:3e:04:be:7f:35:9f:
49:76:2a:3e:d8:b5:87:d8:77:81:28:70:69:65:18:
e3:01:45:14:e6:6a:5c:69:cc:e4:4d:3d:2e:48:50:
47:af:c9:65:7b:67:b8:44:82:43:c9:96:a7:25:db:
10:75:32:70:63:67:25:83:09:99:3d:43:32:4d:a4:
a6:9e:0e:f9:41:95:3e:e3:42:39:72:07:9e:cf:6a:
c3:d4:ca:16:8b:00:f7:7c:fd:83:ff:47:96:cb:18:
32:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F2:59:94:88:C5:08:4C:52:62:BC:1A:71:FD:D3:1A:AE:21:69:F0
X509v3 Authority Key Identifier:
keyid:5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337363a3a2f34382d3438203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac76::/48
Signature Algorithm: sha256WithRSAEncryption
9d:8a:44:5a:f7:c7:c3:36:0d:6a:aa:28:63:46:0e:a6:26:c9:
3a:88:fc:79:fe:f0:27:d2:97:4c:d0:c6:af:34:22:2c:83:77:
49:b0:e9:b1:34:9f:dd:01:9f:f4:9f:12:05:44:d7:78:79:34:
e6:a0:30:0b:bb:34:b9:d6:33:e6:05:ca:57:ed:73:8a:f3:8f:
8b:1d:d2:65:28:36:f7:96:1c:15:74:3e:7c:02:3b:e2:df:5d:
b6:74:83:85:67:51:66:df:d4:44:81:04:70:af:ca:1b:b8:c8:
89:5b:94:be:1f:09:e7:70:94:ff:7d:96:b9:00:92:e2:95:39:
e4:b2:a1:71:9e:52:0f:31:53:0f:43:8c:c8:ce:5e:a1:93:b2:
5f:3b:bc:5a:e7:ea:12:39:d8:0d:86:22:fc:ec:6f:c4:a3:98:
67:d5:c1:d3:b4:76:0d:c2:69:48:e0:e1:78:fe:d0:d1:aa:85:
8a:9f:50:70:18:fb:25:03:f8:bd:a7:63:ff:a1:7a:8b:04:56:
23:1e:f7:53:9b:ee:d0:76:24:4b:2f:60:77:12:4a:40:e7:29:
34:3f:b3:43:f7:fa:62:87:6d:e0:4a:30:49:bd:80:91:ef:92:
42:58:d8:49:69:81:e5:56:6d:c5:40:58:8c:76:a2:7c:c2:c1:
61:3d:cb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 07:51:10 2024 by rpki-client on console-ams.rpki-client.org