Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa
File: 326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa (raw, json)
Hash identifier: Dib6jFnDLtAAIo8NFHKm5ASy0ahDVJ+rA/AO6wZEwZc=
Subject key identifier: AC:12:CB:77:BE:3D:C9:05:4B:8B:F6:EA:D5:57:6D:E0:C5:78:5A:44
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 72FDCF62E046BBB3FF50811C0D6F9FCB8B210047
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa
Signing time: Sun 30 Jun 2024 12:15:18 +0000
ROA not before: Sun 30 Jun 2024 12:10:18 +0000
ROA not after: Sun 29 Jun 2025 12:15:18 +0000
asID: 210561
IP address blocks: 2a11:f2c0:fe00::/40 maxlen: 40
Validation: Failed, certificate revoked on Sun 07 Jul 2024 17:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:fd:cf:62:e0:46:bb:b3:ff:50:81:1c:0d:6f:9f:cb:8b:21:00:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:18 2024 GMT
Not After : Jun 29 12:15:18 2025 GMT
Subject: CN=AC12CB77BE3DC9054B8BF6EAD5576DE0C5785A44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:7b:90:b1:32:3f:5e:66:4b:ed:81:4f:17:
80:cd:bd:7b:3f:0e:77:b0:68:9c:b1:9c:67:44:be:
c8:bb:fc:59:28:dd:75:42:8b:c6:a6:f9:d1:2c:de:
c9:c4:f7:4f:66:bd:96:6c:a3:fb:38:49:a4:d4:df:
4b:c5:64:ce:f9:3b:96:f2:87:70:ec:ae:8e:6f:42:
b4:a3:b3:9d:e5:db:71:e5:8d:43:ed:42:54:96:7a:
7d:95:98:5e:6b:df:1f:c6:8d:fe:49:eb:2e:a8:6c:
7a:13:0a:47:7a:11:62:a3:65:b2:6a:de:f4:0b:08:
05:58:04:60:d4:a9:93:60:10:e3:65:01:dd:59:d1:
5a:b6:0b:c7:fd:64:23:1f:36:8d:85:b5:38:3d:98:
b9:78:ce:6f:a2:66:1a:73:63:51:80:28:c4:05:37:
99:fc:21:32:1b:cd:e6:70:81:2a:08:cb:b2:bc:10:
53:89:eb:ae:20:62:90:7c:11:c6:e8:95:5c:ad:50:
71:d8:4c:5d:7d:1b:7f:03:8c:aa:39:f7:d4:a5:46:
12:f1:e5:68:ad:45:6a:0b:aa:f2:c2:3c:ec:61:84:
95:45:32:2e:f2:43:33:9b:d7:93:1d:17:37:17:b2:
06:2a:d9:d1:28:ca:b1:3f:04:1f:05:70:be:57:df:
fa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:12:CB:77:BE:3D:C9:05:4B:8B:F6:EA:D5:57:6D:E0:C5:78:5A:44
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fe00::/40
Signature Algorithm: sha256WithRSAEncryption
55:af:73:e5:b3:26:8b:6c:30:39:89:63:b9:54:0c:3f:3b:6a:
6f:31:da:77:d6:a8:5c:04:96:ea:ea:7a:f2:44:7c:78:15:07:
1d:7f:2d:66:d0:99:ec:1f:39:c7:f5:dc:1f:d0:4b:8a:30:34:
d0:b0:f7:8e:75:c7:3e:31:84:f8:74:a2:e1:2e:48:de:3f:bb:
e2:e6:10:ce:33:f2:77:9a:2c:52:63:8f:af:3b:15:58:fb:80:
a9:6a:1c:07:ad:b7:3f:f2:3c:11:9c:ca:d3:47:98:10:e6:7f:
76:04:9f:f6:5d:e2:e3:f2:d1:1f:e3:30:62:fd:bb:e8:10:5f:
05:0b:b2:06:76:53:10:09:af:ee:98:ca:d1:9a:ed:7e:16:e4:
c1:d0:de:23:c1:08:5d:fe:10:5e:c9:14:d0:3f:8d:0c:95:5c:
cc:19:68:64:0d:81:f1:83:73:f0:b3:48:6a:34:98:53:55:e2:
55:95:e2:d5:e3:88:cc:76:6e:b3:a5:2c:90:7b:69:86:ff:ee:
7c:2d:88:b7:62:4e:dd:18:08:d7:0d:35:ae:a7:8c:21:09:10:
82:aa:fc:40:24:3e:2a:3d:99:c6:1a:44:b2:56:6e:bd:ec:ec:
11:b5:0d:e5:bf:8b:23:8a:62:14:9d:03:98:0f:2e:4a:a5:6f:
88:1d:4f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 20:10:42 2024 by rpki-client on console-ams.rpki-client.org