Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa
File: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (raw, json)
Hash identifier: BAA3+uCGjb7qL3vIfiQ0eH6rw3lPVRCQDXa8Nuqvy6Q=
Subject key identifier: 0C:BF:48:48:09:06:FB:46:BE:78:35:FD:64:0F:16:7E:21:58:9A:31
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 054460A5E3BE5C3E5ED4E1AFC06C331E98CCD132
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa
Signing time: Sun 30 Jun 2024 12:15:20 +0000
ROA not before: Sun 30 Jun 2024 12:10:20 +0000
ROA not after: Sun 29 Jun 2025 12:15:20 +0000
asID: 212245
IP address blocks: 2a11:f2c0:aca0::/44 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:04:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:44:60:a5:e3:be:5c:3e:5e:d4:e1:af:c0:6c:33:1e:98:cc:d1:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:20 2024 GMT
Not After : Jun 29 12:15:20 2025 GMT
Subject: CN=0CBF48480906FB46BE7835FD640F167E21589A31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:39:c3:b4:93:0f:b6:73:9e:5d:92:6b:39:
2e:62:eb:d5:c0:8e:8b:b6:56:b4:1d:8b:71:a8:b3:
5c:8f:5a:3a:6d:5c:06:fe:e9:4d:4d:14:d2:8b:be:
3f:72:06:ed:e6:3e:f8:f8:32:8c:56:04:b4:4d:53:
46:88:2d:1f:44:ae:50:53:56:47:59:fd:f9:d7:19:
ed:b8:35:be:2d:17:d0:35:04:49:a8:81:69:89:8c:
f0:53:f9:a6:fe:71:46:e7:81:c8:7b:13:07:ee:94:
e3:df:6c:6a:4e:1b:9b:94:a4:e4:90:45:07:ce:9d:
8f:5e:c5:80:e4:00:6a:74:a8:72:b4:d1:a3:07:bd:
54:fe:40:7b:c5:d2:6c:8a:8b:c5:ad:db:85:7e:af:
23:cd:a9:76:4d:cd:3f:ef:43:a0:ed:ce:e4:3e:55:
43:3f:39:d3:5e:2c:b6:bd:4a:e2:1f:f9:a4:2b:58:
cc:3f:10:28:2f:40:a5:e0:50:a6:49:1c:4f:78:0b:
b3:0a:28:5e:f4:35:c5:70:95:e9:00:97:f9:11:e8:
9b:b3:96:02:49:40:4a:e9:87:70:58:24:99:bd:5a:
e6:40:aa:6f:68:f3:39:d3:09:ca:00:d1:84:01:45:
b6:c2:eb:7a:56:fc:ea:7b:e2:3c:41:50:3c:23:15:
f9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BF:48:48:09:06:FB:46:BE:78:35:FD:64:0F:16:7E:21:58:9A:31
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:aca0::/44
Signature Algorithm: sha256WithRSAEncryption
6f:15:02:92:c2:3a:bc:f5:af:ce:eb:90:fa:ab:ec:9a:40:c2:
d4:f4:ea:ad:16:f1:76:47:46:4f:b1:8c:3c:d2:de:86:ea:fb:
24:a0:d6:1d:8d:6d:57:96:96:5d:71:32:a1:4b:62:85:e6:c8:
67:2a:6b:7b:e0:15:51:41:c7:93:81:25:ea:0b:81:07:84:75:
b4:f6:38:2c:21:cf:dd:c7:60:01:7c:58:2c:93:a2:d0:33:74:
f5:4c:21:77:e2:d5:97:6b:e6:be:0c:c0:1e:15:b9:af:ba:3e:
b8:f4:4c:21:d5:c8:76:c6:51:21:c8:70:3f:0c:c2:f2:7b:b5:
25:6f:ad:a8:7c:1c:b7:70:b6:86:08:b4:39:c6:1f:4c:1e:a4:
98:59:0d:fb:c1:c5:80:e1:93:5e:6f:8b:87:b8:da:89:ba:a3:
16:b6:c7:01:39:f1:25:19:57:98:ba:0f:ec:26:49:97:4b:a1:
0c:a1:79:a9:fa:c4:a9:76:6a:c3:13:4d:35:13:b7:90:70:84:
81:69:31:d4:18:9f:2a:c8:1e:d9:f9:fd:6e:22:d5:90:27:2c:
5f:4a:56:c9:27:dc:65:4b:4f:ff:bd:85:1e:4e:39:32:00:b2:
30:1f:1b:c7:30:f2:15:89:11:4f:52:12:d0:20:b6:22:48:7f:
79:89:f5:db
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUBURgpeO+XD5e1OGvwGwzHpjM0TIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNDA2MzAxMjEwMjBaFw0yNTA2MjkxMjE1MjBaMDMxMTAvBgNV
BAMTKDBDQkY0ODQ4MDkwNkZCNDZCRTc4MzVGRDY0MEYxNjdFMjE1ODlBMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8uDnDtJMPtnOeXZJrOS5i69XA
jou2VrQdi3Gos1yPWjptXAb+6U1NFNKLvj9yBu3mPvj4MoxWBLRNU0aILR9ErlBT
VkdZ/fnXGe24Nb4tF9A1BEmogWmJjPBT+ab+cUbngch7EwfulOPfbGpOG5uUpOSQ
RQfOnY9exYDkAGp0qHK00aMHvVT+QHvF0myKi8Wt24V+ryPNqXZNzT/vQ6DtzuQ+
VUM/OdNeLLa9SuIf+aQrWMw/ECgvQKXgUKZJHE94C7MKKF70NcVwlekAl/kR6Juz
lgJJQErph3BYJJm9WuZAqm9o8znTCcoA0YQBRbbC63pW/Op74jxBUDwjFflLAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUDL9ISAkG+0a+eDX9ZA8WfiFYmjEwHwYDVR0j
BBgwFoAUCDmpPatUTClv+hQ0VoRKiygYsdAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGRlODM3ZmItNjM5MC00MWI1LTgyYTAtZjBkMDJjMDNh
MmM2LzcvMDgzOUE5M0RBQjU0NEMyOTZGRkExNDM0NTY4NDRBOEIyODE4QjFEMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NEbXBQYXRVVENsdi1oUTBWb1JLaXln
WXNkQS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGRlODM3ZmIt
NjM5MC00MWI1LTgyYTAtZjBkMDJjMDNhMmM2LzcvMzI2MTMxMzEzYTY2MzI2MzMw
M2E2MTYzNjEzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzEzMjMyMzQzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHBCoR8sCsoDANBgkqhkiG9w0BAQsFAAOCAQEAbxUCksI6vPWvzuuQ
+qvsmkDC1PTqrRbxdkdGT7GMPNLehur7JKDWHY1tV5aWXXEyoUtihebIZypre+AV
UUHHk4El6guBB4R1tPY4LCHP3cdgAXxYLJOi0DN09Uwhd+LVl2vmvgzAHhW5r7o+
uPRMIdXIdsZRIchwPwzC8nu1JW+tqHwct3C2hgi0OcYfTB6kmFkN+8HFgOGTXm+L
h7jaibqjFrbHATnxJRlXmLoP7CZJl0uhDKF5qfrEqXZqwxNNNRO3kHCEgWkx1Bif
Ksge2fn9biLVkCcsX0pWySfcZUtP/72FHk45MgCyMB8bxzDyFYkRT1IS0CC2Ikh/
eYn12w==
-----END CERTIFICATE-----
Generated at Sun Jul 7 20:10:42 2024 by rpki-client on console-ams.rpki-client.org