Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa
File: 326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa (raw, json)
Hash identifier: +80kEtKDo2yX1OZmGD4zX0eqGalz5bPOG5SkyOlB3N8=
Subject key identifier: 6B:6A:43:46:DB:D0:CC:98:AE:BD:72:58:FA:52:DB:4B:7C:B1:EA:AC
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 03798DCDC49E33D2BD3D9EFAAC408B3717BCE3C6
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa
Signing time: Sun 30 Jun 2024 12:15:20 +0000
ROA not before: Sun 30 Jun 2024 12:10:20 +0000
ROA not after: Sun 29 Jun 2025 12:15:20 +0000
asID: 205589
IP address blocks: 2a11:f2c0:ffc0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:11:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:79:8d:cd:c4:9e:33:d2:bd:3d:9e:fa:ac:40:8b:37:17:bc:e3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:20 2024 GMT
Not After : Jun 29 12:15:20 2025 GMT
Subject: CN=6B6A4346DBD0CC98AEBD7258FA52DB4B7CB1EAAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:c2:42:07:62:d3:39:7c:34:43:53:10:6a:
2b:a7:0f:9a:f1:49:3d:3d:55:60:24:82:20:86:ec:
e5:d1:54:47:06:2a:66:12:9e:e5:1b:05:ac:08:80:
1e:5f:42:fa:e0:04:5d:8e:9a:95:7c:d0:1b:31:dd:
05:9e:07:63:5b:db:8c:75:04:1b:e9:1d:c9:b1:4a:
5a:9d:89:84:25:1a:e1:41:13:88:1a:79:10:94:c7:
91:c4:8b:03:11:da:88:1f:fa:38:41:90:2b:7f:de:
00:49:92:fb:07:7f:2d:15:08:ed:ac:ee:71:d0:b3:
e6:bb:ae:26:fc:be:9d:04:17:1c:68:eb:5a:b5:a1:
32:23:7a:86:e3:fc:35:31:35:eb:82:51:14:11:7c:
7f:03:cc:39:88:fa:89:bd:1e:43:1c:d8:17:bb:76:
0d:47:6e:80:67:43:f9:7e:f1:b0:84:8b:b5:b8:6e:
5d:f7:f3:7a:6e:7e:c6:37:d6:4c:f8:91:e8:87:a4:
c8:b4:ee:f7:ed:1e:1f:e5:58:ff:b0:72:9e:23:64:
dc:93:90:9d:9c:b6:18:cf:2b:5e:2c:13:09:40:55:
03:f6:2f:c5:ca:a5:ef:23:e7:2d:1a:ee:77:cf:66:
39:4e:53:85:41:1e:cb:ea:fc:f2:3b:bd:ac:6a:83:
12:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6A:43:46:DB:D0:CC:98:AE:BD:72:58:FA:52:DB:4B:7C:B1:EA:AC
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffc0::/48
Signature Algorithm: sha256WithRSAEncryption
33:97:53:64:08:d5:46:4b:a6:ce:28:d6:6f:32:d2:ad:e9:c9:
ce:e8:ad:fb:c1:e8:bc:c5:6d:fd:c4:e7:40:e1:74:61:1f:73:
be:1b:11:a7:ab:93:d4:cb:48:58:69:c6:47:1d:b4:1c:96:15:
b6:a7:f0:96:3d:94:70:81:03:20:6e:a3:e9:66:cf:ac:fe:c4:
d9:44:9c:77:c5:99:43:f9:e8:f2:20:da:aa:46:c3:b9:d5:64:
51:e8:7f:27:fc:b5:5f:79:e9:c6:78:d0:80:ac:3f:94:0c:ae:
53:69:8d:32:8e:cd:9b:95:1e:90:fd:9f:cc:6b:41:6a:d7:8a:
5b:55:8e:7e:35:23:04:75:cf:fa:6b:33:e8:2a:31:a3:1e:6c:
ed:4d:77:65:00:58:57:1b:f4:55:25:51:3c:cb:05:c5:76:dc:
e3:05:33:3a:19:d9:60:12:42:3a:7b:5e:bb:74:de:0a:3b:06:
da:3b:0f:b0:a8:db:d8:d8:1b:32:11:a6:63:bb:96:af:18:c6:
b2:cb:aa:e9:40:c5:a4:bf:b8:18:2b:64:bc:90:eb:5c:98:03:
7d:ac:b1:fa:ff:fb:28:90:2f:fb:27:6c:f2:b3:f1:39:16:7a:
86:16:3a:46:05:58:f8:91:f6:b9:da:1f:8b:0c:a7:c5:02:6a:
2e:97:b3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:03:40 2024 by rpki-client on console-fra.rpki-client.org