Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa
File: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (raw, json)
Hash identifier: IntQIY/GKmUlaqodEVN85QHxntDKnyxIT/g2cfmMqtk=
Subject key identifier: 02:0D:CF:38:54:82:7B:49:39:C6:EA:33:5F:3B:A0:03:2C:34:93:C4
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 7330ABC40982BFA81E7F6AB608A49BAF54B8DB09
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa
Signing time: Sun 30 Jun 2024 12:15:21 +0000
ROA not before: Sun 30 Jun 2024 12:10:21 +0000
ROA not after: Sun 29 Jun 2025 12:15:21 +0000
asID: 205789
IP address blocks: 2a11:f2c0:b00b::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:30:ab:c4:09:82:bf:a8:1e:7f:6a:b6:08:a4:9b:af:54:b8:db:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:21 2024 GMT
Not After : Jun 29 12:15:21 2025 GMT
Subject: CN=020DCF3854827B4939C6EA335F3BA0032C3493C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:c2:2b:d6:bf:61:41:b8:31:2e:9b:50:25:
7b:81:02:24:1f:5d:6f:35:d4:3c:d5:49:4a:4d:cb:
fb:1e:13:82:dc:21:f5:3d:fc:9f:d9:9b:0f:f9:64:
18:32:78:ff:14:3a:09:d2:11:76:db:ed:f4:a2:f8:
05:b7:00:e1:cc:c7:8f:fc:7d:f3:ee:fe:30:54:5f:
5d:cc:f7:55:01:73:92:ff:f7:33:3d:45:9e:1d:2c:
93:5c:b7:37:fa:79:3c:a7:46:1b:4e:a8:8f:92:74:
2f:52:5e:b7:4c:ab:4b:43:1b:3e:2a:2b:58:69:45:
cf:e3:3c:ca:05:26:bc:04:46:cf:88:3f:0d:b6:db:
fc:ed:54:ff:3f:b5:28:53:62:fc:95:e7:dc:2d:31:
a6:dd:76:63:b4:cd:f8:fb:14:aa:ef:62:3f:a7:42:
07:6a:59:4a:fe:07:d5:50:30:85:be:ee:df:82:c9:
ec:86:eb:f8:68:ec:25:78:e4:8d:9a:8a:ff:16:a3:
d2:ef:39:81:e4:05:0c:e4:48:8a:e2:8b:51:52:8c:
5b:1f:89:01:d7:e5:8b:dc:cf:87:0c:75:54:27:b1:
f3:0d:98:80:7f:5a:be:ae:38:ad:a3:0b:ba:e8:c4:
0b:81:05:8e:1d:7d:bb:aa:ed:0c:76:52:b1:55:d3:
f2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0D:CF:38:54:82:7B:49:39:C6:EA:33:5F:3B:A0:03:2C:34:93:C4
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
02:95:c1:01:5e:37:a8:a5:77:69:ac:8b:12:19:b6:53:e5:59:
17:7a:09:e1:da:4f:1d:40:2d:40:b7:81:46:07:da:27:0a:94:
88:d3:2c:6c:a1:ff:6e:ef:7c:57:eb:82:ab:23:e3:99:f3:5c:
c3:2b:21:3d:e5:fb:39:cd:d3:f5:99:04:18:ee:7a:b6:1a:ab:
0f:0f:05:7a:36:34:d4:36:a0:81:ec:b7:c7:ed:01:54:46:3a:
a9:d2:e0:38:c3:7a:9d:29:70:0c:1a:b6:66:f6:b1:ec:fd:e3:
02:d3:d7:aa:0a:d7:47:21:52:1d:94:73:2a:07:f6:95:61:40:
fa:82:23:c7:d1:cc:e9:e1:77:59:e5:46:2f:d4:a0:38:85:c8:
48:bb:0b:c0:8b:c3:04:37:5a:7c:bd:01:dd:6f:3e:73:a9:61:
0a:98:61:d9:5b:0d:bf:be:94:f1:be:e0:45:4d:7d:f1:76:0a:
3b:e0:9e:26:83:85:21:7a:d1:9a:a4:a5:e6:36:89:43:ef:85:
55:dd:ad:ee:8a:f2:22:8f:99:e5:d7:cf:fd:c4:de:95:84:42:
6e:cd:b7:53:d6:ba:8a:74:83:8c:1d:c4:a2:b6:03:2f:7b:6c:
03:11:89:f8:66:00:b2:eb:0c:18:19:c2:39:24:80:91:87:94:
fa:71:53:a1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUczCrxAmCv6gef2q2CKSbr1S42wkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNDA2MzAxMjEwMjFaFw0yNTA2MjkxMjE1MjFaMDMxMTAvBgNV
BAMTKDAyMERDRjM4NTQ4MjdCNDkzOUM2RUEzMzVGM0JBMDAzMkMzNDkzQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEv8Ir1r9hQbgxLptQJXuBAiQf
XW811DzVSUpNy/seE4LcIfU9/J/Zmw/5ZBgyeP8UOgnSEXbb7fSi+AW3AOHMx4/8
ffPu/jBUX13M91UBc5L/9zM9RZ4dLJNctzf6eTynRhtOqI+SdC9SXrdMq0tDGz4q
K1hpRc/jPMoFJrwERs+IPw222/ztVP8/tShTYvyV59wtMabddmO0zfj7FKrvYj+n
QgdqWUr+B9VQMIW+7t+CyeyG6/ho7CV45I2aiv8Wo9LvOYHkBQzkSIrii1FSjFsf
iQHX5Yvcz4cMdVQnsfMNmIB/Wr6uOK2jC7roxAuBBY4dfbuq7Qx2UrFV0/LnAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUAg3POFSCe0k5xuozXzugAyw0k8QwHwYDVR0j
BBgwFoAUCDmpPatUTClv+hQ0VoRKiygYsdAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGRlODM3ZmItNjM5MC00MWI1LTgyYTAtZjBkMDJjMDNh
MmM2LzcvMDgzOUE5M0RBQjU0NEMyOTZGRkExNDM0NTY4NDRBOEIyODE4QjFEMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NEbXBQYXRVVENsdi1oUTBWb1JLaXln
WXNkQS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGRlODM3ZmIt
NjM5MC00MWI1LTgyYTAtZjBkMDJjMDNhMmM2LzcvMzI2MTMxMzEzYTY2MzI2MzMw
M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNTM3MzgzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoR8sCwCzANBgkqhkiG9w0BAQsFAAOCAQEAApXBAV43qKV3aayL
Ehm2U+VZF3oJ4dpPHUAtQLeBRgfaJwqUiNMsbKH/bu98V+uCqyPjmfNcwyshPeX7
Oc3T9ZkEGO56thqrDw8FejY01Daggey3x+0BVEY6qdLgOMN6nSlwDBq2Zvax7P3j
AtPXqgrXRyFSHZRzKgf2lWFA+oIjx9HM6eF3WeVGL9SgOIXISLsLwIvDBDdafL0B
3W8+c6lhCphh2VsNv76U8b7gRU198XYKO+CeJoOFIXrRmqSl5jaJQ++FVd2t7ory
Io+Z5dfP/cTelYRCbs23U9a6inSDjB3EorYDL3tsAxGJ+GYAsusMGBnCOSSAkYeU
+nFToQ==
-----END CERTIFICATE-----
Generated at Sun Jul 7 20:08:26 2024 by rpki-client on console-fra.rpki-client.org