Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32653a3a2f34382d3438203d3e20323038393736.roa
File: 326131313a323963303a32653a3a2f34382d3438203d3e20323038393736.roa (raw, json)
Hash identifier: 5BBOexxCBTAhiKAESV1yWdZ8lkefru7MPgikfn5WxDg=
Subject key identifier: 33:64:FE:BA:D1:E7:93:D2:EC:97:3F:C5:9E:A4:19:9B:0A:4A:A6:2B
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 1C5EDD01187FA50F4430C64C9A9AC05D506CAFF7
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32653a3a2f34382d3438203d3e20323038393736.roa
Signing time: Sat 13 Jul 2024 13:07:18 +0000
ROA not before: Sat 13 Jul 2024 13:02:18 +0000
ROA not after: Sat 12 Jul 2025 13:07:18 +0000
asID: 208976
IP address blocks: 2a11:29c0:2e::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 05 Aug 2024 14:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:5e:dd:01:18:7f:a5:0f:44:30:c6:4c:9a:9a:c0:5d:50:6c:af:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jul 13 13:02:18 2024 GMT
Not After : Jul 12 13:07:18 2025 GMT
Subject: CN=3364FEBAD1E793D2EC973FC59EA4199B0A4AA62B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:84:0e:7f:2f:5a:da:ef:94:81:0e:87:c1:ef:
af:b3:12:b0:bf:42:26:c4:2a:06:ba:fe:40:7e:a0:
d7:0f:bc:49:4c:0a:c3:68:25:20:96:72:42:e9:54:
5a:18:7b:87:b2:20:32:c2:3c:b1:d1:66:ef:9f:47:
d5:4b:52:57:1c:0f:ba:fb:b0:de:2c:b7:3e:4e:dc:
cc:a4:6d:94:d3:e9:e0:ea:7d:c5:2a:c9:d1:50:c5:
e8:4e:e1:aa:dd:1f:07:f1:22:8b:bb:06:39:e9:28:
ed:7e:ee:1f:c1:28:c9:d7:30:e4:39:a4:2f:7b:0f:
44:0f:6c:c6:d1:a5:7e:36:a1:e4:58:31:e3:37:2e:
3c:c0:ed:b2:c9:a4:17:fd:61:80:04:70:b9:e8:38:
ef:00:2d:99:e3:f6:ca:f1:69:f0:e6:ca:19:cb:3f:
2f:a8:5d:68:87:7d:8c:67:f7:48:21:25:dc:7d:fd:
b9:82:47:60:c7:63:3e:fd:9f:e7:58:8c:bc:e7:4d:
4a:58:23:eb:3d:b1:30:05:8b:a0:f7:98:75:bc:78:
df:ef:36:0d:b7:1a:6c:ff:88:f6:e0:dc:bb:11:33:
10:4c:0c:26:e3:29:b2:7d:25:9d:ed:29:6a:97:b9:
8e:d4:92:e2:6f:1f:1e:8f:81:19:4d:18:02:3d:7e:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:64:FE:BA:D1:E7:93:D2:EC:97:3F:C5:9E:A4:19:9B:0A:4A:A6:2B
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32653a3a2f34382d3438203d3e20323038393736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:2e::/48
Signature Algorithm: sha256WithRSAEncryption
97:50:85:c6:1f:75:08:e0:d7:27:44:83:92:0a:b0:a1:0f:d7:
c8:9e:49:0c:3b:d3:84:b1:b3:7d:7b:67:9f:7e:62:8b:5a:f3:
bf:2b:85:60:f5:a0:90:1f:d7:15:43:10:d4:82:fb:b7:b4:da:
78:de:cc:c7:48:cb:0a:ef:03:31:7a:e5:0e:6e:ef:66:91:dd:
44:25:1c:06:d4:57:93:8b:8f:56:d9:9a:78:7d:9b:c9:35:f7:
30:41:de:c9:86:e3:f9:4d:cf:cb:6a:0f:90:2b:16:df:14:08:
e2:3c:8d:89:39:c0:b8:ea:73:d2:6d:97:0a:92:59:7b:be:43:
56:7e:a7:07:05:56:20:3f:39:7f:13:fd:72:1c:9e:9e:42:b9:
45:7c:43:c2:a3:20:a8:97:9a:d4:40:cb:ff:a5:41:ce:9e:c1:
a8:05:99:5d:c8:c6:3c:c6:1f:0b:8d:ed:88:31:9f:38:d0:72:
7b:5e:20:f5:80:84:e8:de:7f:3e:01:22:e7:7b:d0:80:6a:07:
b5:31:46:78:ec:62:0f:f9:df:32:f3:13:ee:a0:a2:3b:88:19:
8e:2a:a3:f3:0b:96:3e:61:5a:07:c2:58:f1:f9:e3:f8:b5:cb:
14:0c:91:e3:dc:f5:09:ef:5f:59:fb:a2:4a:f9:4b:e2:ca:d1:
20:08:a7:61
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUHF7dARh/pQ9EMMZMmprAXVBsr/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTk2ZDg1OTk2ZTkzNTRkMTAwNWU0NGM3ODFkMzhhZGNm
MTA4Mjg3MzAeFw0yNDA3MTMxMzAyMThaFw0yNTA3MTIxMzA3MThaMDMxMTAvBgNV
BAMTKDMzNjRGRUJBRDFFNzkzRDJFQzk3M0ZDNTlFQTQxOTlCMEE0QUE2MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdhA5/L1ra75SBDofB76+zErC/
QibEKga6/kB+oNcPvElMCsNoJSCWckLpVFoYe4eyIDLCPLHRZu+fR9VLUlccD7r7
sN4stz5O3MykbZTT6eDqfcUqydFQxehO4ardHwfxIou7BjnpKO1+7h/BKMnXMOQ5
pC97D0QPbMbRpX42oeRYMeM3LjzA7bLJpBf9YYAEcLnoOO8ALZnj9srxafDmyhnL
Py+oXWiHfYxn90ghJdx9/bmCR2DHYz79n+dYjLznTUpYI+s9sTAFi6D3mHW8eN/v
Ng23Gmz/iPbg3LsRMxBMDCbjKbJ9JZ3tKWqXuY7UkuJvHx6PgRlNGAI9fh2DAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUM2T+utHnk9Lslz/FnqQZmwpKpiswHwYDVR0j
BBgwFoAU6W2FmW6TVNEAXkTHgdOK3PEIKHMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm
YmY1LzAvRTk2RDg1OTk2RTkzNTREMTAwNUU0NEM3ODFEMzhBRENGMTA4Mjg3My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZXMkZtVzZUVk5FQVhrVEhnZE9LM1BF
SUtITS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt
MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvMzI2MTMxMzEzYTMyMzk2MzMw
M2EzMjY1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDM4MzkzNzM2LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKhEpwAAuMA0GCSqGSIb3DQEBCwUAA4IBAQCXUIXGH3UI4NcnRIOSCrCh
D9fInkkMO9OEsbN9e2effmKLWvO/K4Vg9aCQH9cVQxDUgvu3tNp43szHSMsK7wMx
euUObu9mkd1EJRwG1FeTi49W2Zp4fZvJNfcwQd7JhuP5Tc/Lag+QKxbfFAjiPI2J
OcC46nPSbZcKkll7vkNWfqcHBVYgPzl/E/1yHJ6eQrlFfEPCoyCol5rUQMv/pUHO
nsGoBZldyMY8xh8Lje2IMZ840HJ7XiD1gITo3n8+ASLne9CAage1MUZ47GIP+d8y
8xPuoKI7iBmOKqPzC5Y+YVoHwljx+eP4tcsUDJHj3PUJ719Z+6JK+UviytEgCKdh
-----END CERTIFICATE-----
Generated at Mon Aug 5 17:11:46 2024 by rpki-client on console-fra.rpki-client.org