Route Origin Authorization
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/326131313a663263303a666663623a373736663a3a2f36342d3634203d3e20323135373738.roa
File: 326131313a663263303a666663623a373736663a3a2f36342d3634203d3e20323135373738.roa (raw, json)
Hash identifier: siEfknkcopHyH4Ippx3LE/P3i9IYdYE7szozLSttSBc=
Subject key identifier: 7E:09:1C:30:50:52:AC:AF:B0:3F:D7:E9:00:3A:BF:26:46:CE:B6:78
Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F
Certificate serial: 64080C9DB30191BB6774CD2F42E92DC847FF275D
Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/326131313a663263303a666663623a373736663a3a2f36342d3634203d3e20323135373738.roa
Signing time: Thu 05 Sep 2024 21:20:24 +0000
ROA not before: Thu 05 Sep 2024 21:15:24 +0000
ROA not after: Thu 04 Sep 2025 21:20:24 +0000
asID: 215778
IP address blocks: 2a11:f2c0:ffcb:776f::/64 maxlen: 64
Validation: Failed, certificate revoked on Sat 07 Sep 2024 19:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:08:0c:9d:b3:01:91:bb:67:74:cd:2f:42:e9:2d:c8:47:ff:27:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F
Validity
Not Before: Sep 5 21:15:24 2024 GMT
Not After : Sep 4 21:20:24 2025 GMT
Subject: CN=7E091C305052ACAFB03FD7E9003ABF2646CEB678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:2a:81:10:fa:ac:d3:d9:28:16:14:7e:9b:
05:c7:51:c1:38:ad:47:96:ee:44:d1:6e:04:73:91:
4a:7e:23:96:6d:21:54:a3:8b:e7:75:73:83:fe:3f:
35:a0:b1:0c:ca:55:69:8f:04:cd:8f:27:28:9a:94:
83:ca:5a:0a:a2:d3:79:6e:6e:46:80:d7:46:1d:8f:
fe:80:bb:29:45:81:5a:54:9a:eb:da:66:dc:e1:50:
a5:43:74:ed:1e:08:26:5c:39:e0:8c:1b:ec:a2:7b:
a8:b7:4a:78:af:a5:24:41:3b:7c:da:30:9e:a5:60:
40:b8:5e:d8:19:c9:f4:89:54:29:04:e2:1a:69:18:
b3:f9:fe:9f:2e:25:04:f6:8e:c5:e2:05:bb:c0:a2:
f1:2e:e5:ed:c7:57:9d:bb:f6:f8:fd:51:f5:ec:6d:
51:3b:43:8d:f4:91:fc:61:81:63:81:7a:75:28:ca:
23:42:3a:e8:b0:e8:bc:b5:bd:fa:09:f2:76:30:7a:
65:41:2b:31:1a:0b:85:fc:67:71:8e:f5:eb:f6:5f:
f8:51:b4:fd:da:66:8b:ef:5f:cd:d4:7c:bf:82:6c:
08:96:35:33:f5:fc:01:31:46:fd:23:5d:71:5c:e2:
50:d0:dd:e5:47:7e:5d:37:f5:39:d3:ef:0c:1e:e4:
a4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:09:1C:30:50:52:AC:AF:B0:3F:D7:E9:00:3A:BF:26:46:CE:B6:78
X509v3 Authority Key Identifier:
keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/326131313a663263303a666663623a373736663a3a2f36342d3634203d3e20323135373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffcb:776f::/64
Signature Algorithm: sha256WithRSAEncryption
27:06:ad:4d:38:c6:ab:09:13:ef:db:5f:0b:2a:6e:fc:5d:75:
8b:09:b4:1b:ac:60:21:04:2d:a7:de:a2:0f:d6:95:a1:2f:eb:
d8:43:ce:72:a4:e9:50:c6:55:bb:31:53:66:d4:7a:6c:99:35:
95:86:a3:0a:0d:94:6a:2f:e6:13:f1:d8:ef:9d:8f:d5:a2:fc:
db:0d:18:e9:49:1f:c9:6b:97:73:55:fb:51:25:d8:9d:95:4c:
a0:c6:f6:8d:68:e5:e4:cd:7e:e6:27:13:0e:a1:3e:02:53:9a:
e1:8d:a1:e8:2e:b8:c3:20:c7:3f:c9:fe:0d:c6:17:20:68:a3:
20:43:be:7f:99:a8:da:96:aa:33:b3:ee:9a:07:29:5b:be:c1:
97:d7:ea:97:fc:7d:07:52:24:98:7b:0d:e2:60:95:ab:f2:74:
35:c8:5b:85:d8:d4:39:36:5f:9c:19:89:91:08:bf:90:3c:84:
4d:0b:f8:43:d2:4e:3e:37:c1:f5:03:d4:49:91:b8:6d:07:f0:
78:df:d8:31:39:dd:93:5b:cf:ee:dc:c8:ca:4a:4a:c9:1b:2a:
34:f2:8d:d5:14:e6:27:80:65:1c:44:1e:e3:a3:63:18:f4:9e:
65:c2:f5:1a:dc:d1:a3:12:40:9b:9f:27:9e:64:20:0d:ae:a1:
9f:ed:45:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:23:41 2024 by rpki-client on console-ams.rpki-client.org