Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666430303a3a2f34302d3438203d3e20323131393938.roa
File: 326131313a663263303a666430303a3a2f34302d3438203d3e20323131393938.roa (raw, json)
Hash identifier: NxO+vYLWaXo2dj3LkmW7z3PDMLsKDr/WHVjs2oVYrvg=
Subject key identifier: D8:F0:74:4B:7C:BF:50:B6:8F:F7:0E:B0:07:65:2B:3D:2C:8A:3A:3B
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 32B368B19515BA10B96DA31F546DDD3F4893892E
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666430303a3a2f34302d3438203d3e20323131393938.roa
Signing time: Sun 30 Jun 2024 12:15:21 +0000
ROA not before: Sun 30 Jun 2024 12:10:21 +0000
ROA not after: Sun 29 Jun 2025 12:15:21 +0000
asID: 211998
IP address blocks: 2a11:f2c0:fd00::/40 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:b3:68:b1:95:15:ba:10:b9:6d:a3:1f:54:6d:dd:3f:48:93:89:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:21 2024 GMT
Not After : Jun 29 12:15:21 2025 GMT
Subject: CN=D8F0744B7CBF50B68FF70EB007652B3D2C8A3A3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:47:16:a2:05:f3:32:e3:55:06:4e:07:aa:21:
f0:6a:16:b4:4e:9d:85:07:b3:89:bf:4f:1a:a6:c3:
e8:f0:41:27:df:ff:b1:85:3a:fc:bb:15:a7:36:18:
40:a1:33:95:95:fb:b2:b8:fe:cd:83:59:00:01:e6:
51:a6:60:48:68:4a:63:21:56:8a:19:90:9b:7f:94:
55:c6:02:6b:87:22:f2:db:ae:84:7d:68:2b:bf:b9:
3b:53:67:4a:90:35:cb:30:d2:45:78:4b:f6:b0:67:
60:16:74:20:16:d6:2c:c2:b3:ec:4b:05:25:29:19:
14:31:5e:e7:ac:fa:a1:d5:6c:5d:d2:30:03:a7:31:
be:80:02:9f:cc:fa:67:75:23:ca:b6:3b:8f:ed:44:
0c:e1:32:2a:10:cd:81:6c:f8:d6:c3:3a:4a:f0:6d:
e8:c2:53:fd:01:c3:9e:a8:b9:a4:ab:5e:3f:02:f8:
d4:86:cc:fa:bd:c0:3c:d3:c8:15:0b:c9:7c:ca:c1:
8e:75:02:31:a8:5f:64:f0:cc:8d:da:0c:9a:79:25:
83:df:aa:c8:4b:9a:5c:43:cc:0d:07:06:98:ed:cb:
f5:f9:f8:fb:6d:df:9d:f5:b5:de:5a:3a:ef:5b:63:
62:0a:70:6d:a5:9d:03:7b:bb:62:b2:9e:74:9b:ab:
91:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F0:74:4B:7C:BF:50:B6:8F:F7:0E:B0:07:65:2B:3D:2C:8A:3A:3B
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666430303a3a2f34302d3438203d3e20323131393938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fd00::/40
Signature Algorithm: sha256WithRSAEncryption
81:d7:5b:78:00:21:55:99:c0:ae:d0:9c:4d:2a:f9:e9:e5:ee:
b7:30:f3:fc:00:09:d8:47:4a:89:8d:63:a5:a3:4b:d3:4c:08:
dd:e7:a3:f9:ba:ef:f5:0c:b1:6d:9c:c9:73:f6:47:f7:f8:fc:
b9:7a:3c:d7:16:cb:4e:ca:5b:3b:19:f0:61:05:ea:6d:b7:9c:
eb:84:85:b7:77:31:fd:80:62:be:d2:65:94:c6:fd:a3:a6:a9:
8b:87:d5:ce:a1:8f:6c:b6:b0:f7:56:5f:7d:cb:51:07:8d:e5:
c7:1a:72:b3:c9:80:0d:08:59:ac:a8:33:be:0f:43:4c:b0:4c:
de:ba:32:e3:93:53:0a:fc:91:25:44:14:67:87:1e:85:ea:ff:
29:28:f5:cb:0e:61:07:ef:88:a5:04:7e:36:91:31:92:63:d3:
92:63:2d:6d:73:cf:6c:25:f9:d6:35:81:49:9b:95:9c:53:23:
fa:9a:ac:a4:08:d3:23:c8:7b:7b:89:80:e1:ae:4c:50:24:d3:
c3:58:f6:a1:e7:12:b3:0b:4c:23:e6:40:22:44:38:47:93:0f:
b6:67:c4:b8:2d:0f:09:a0:16:5c:b0:9b:49:ef:79:fd:09:58:
6f:39:59:ca:79:9a:40:81:cc:77:27:d7:c0:3d:e4:87:7b:61:
27:89:63:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:11:39 2024 by rpki-client on console-ams.rpki-client.org