Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666330303a3a2f34302d3438203d3e20323032303736.roa
File: 326131313a663263303a666330303a3a2f34302d3438203d3e20323032303736.roa (raw, json)
Hash identifier: V5tdiEj++tph3il0Aonz7CcBQ2DX32DoimVIqfe9XEI=
Subject key identifier: D9:49:E3:5F:98:CC:7E:F1:EA:B8:D5:3F:A9:21:55:35:46:81:2B:72
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 3247BEA14F6894844DD5823DE5A348746CDB75F0
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666330303a3a2f34302d3438203d3e20323032303736.roa
Signing time: Sun 30 Jun 2024 12:15:22 +0000
ROA not before: Sun 30 Jun 2024 12:10:22 +0000
ROA not after: Sun 29 Jun 2025 12:15:22 +0000
asID: 202076
IP address blocks: 2a11:f2c0:fc00::/40 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:06:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:47:be:a1:4f:68:94:84:4d:d5:82:3d:e5:a3:48:74:6c:db:75:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:22 2024 GMT
Not After : Jun 29 12:15:22 2025 GMT
Subject: CN=D949E35F98CC7EF1EAB8D53FA921553546812B72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:33:e9:58:cf:af:ad:82:4f:16:02:ad:39:
3d:40:f1:27:02:77:0d:c3:17:f2:62:6d:73:01:71:
b0:50:2f:4a:fa:b5:aa:48:e0:05:36:d0:3a:21:38:
f7:2a:d6:cc:d0:b3:86:7e:d4:94:3c:9f:b1:21:ea:
0e:c1:83:d0:1f:ef:f8:20:f2:85:a8:2b:c2:7a:3a:
c8:f3:ed:12:a0:e9:23:ea:92:8f:a5:85:8f:8a:1b:
cc:f7:21:b8:c7:5b:88:b4:c5:a3:c5:a8:e9:ed:17:
cd:81:a8:77:35:41:d1:ca:d3:ef:4e:c2:8c:ef:20:
3e:50:f0:91:fe:3e:a1:de:ec:6f:24:c8:8e:7b:31:
bf:50:8a:17:06:0a:61:03:11:62:fe:58:aa:e0:b0:
4d:9c:f4:19:12:24:59:16:d6:96:67:60:5c:e7:6c:
81:f7:eb:18:cd:0d:39:e1:3f:9f:d9:d9:39:8d:f7:
82:b1:14:3d:db:c9:c6:3e:0b:e3:35:99:c5:9a:70:
31:a5:73:e3:7a:a8:52:d6:f2:aa:ee:08:05:05:be:
67:91:5b:fe:50:81:ec:24:c7:e4:66:58:8c:31:38:
b0:be:5f:ab:de:80:eb:ce:f5:8f:2c:d7:36:8c:56:
8b:02:4b:4a:87:51:17:03:91:87:19:18:f9:c5:34:
b1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:49:E3:5F:98:CC:7E:F1:EA:B8:D5:3F:A9:21:55:35:46:81:2B:72
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666330303a3a2f34302d3438203d3e20323032303736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fc00::/40
Signature Algorithm: sha256WithRSAEncryption
a8:b0:8b:53:6b:be:d7:22:0b:37:7c:a3:c6:1c:3f:43:40:8a:
d0:29:51:43:1f:d5:db:50:f9:34:1f:09:2e:8c:8c:68:e1:72:
be:e1:10:c5:c4:d2:34:f8:cd:a4:36:74:f4:71:c6:5a:1f:08:
83:0d:54:1b:e1:db:16:72:68:c3:94:f1:5a:33:bb:ac:9d:52:
cd:c2:49:94:d6:3e:34:a8:5c:a3:a4:cc:7f:9e:a6:2e:97:c4:
ce:37:b1:14:cf:f2:3d:22:09:54:3e:84:ae:c9:94:6c:0e:57:
8e:7e:45:10:da:3b:42:af:1e:c9:80:ac:89:8a:89:18:3e:42:
55:8f:d7:62:f3:b6:79:d2:79:a8:ef:6b:80:28:08:c7:95:ba:
24:fa:cf:68:a4:9a:26:a7:3f:d1:47:cd:8f:35:0c:20:04:08:
b5:ce:0a:55:d9:3f:e4:5f:ca:3e:43:44:9a:81:04:ff:8c:19:
db:91:15:7e:ff:f8:ba:d0:39:c5:b0:94:7b:d4:08:a7:8d:75:
f9:83:52:99:d9:e8:cb:b3:f5:78:36:da:a9:9b:26:ef:63:c4:
0e:12:a7:5d:bb:b9:fc:c1:2d:cd:0a:de:e3:50:99:99:fa:c5:
f6:a1:76:05:1b:15:98:9f:27:5d:8c:aa:3a:df:74:b2:98:65:
16:34:39:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 20:08:26 2024 by rpki-client on console-fra.rpki-client.org