Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa
File: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (raw, json)
Hash identifier: 3NFS9aIRj8UJ35zqpgQP8Y2Kx8XEHNrJerZ8/LJVd9Y=
Subject key identifier: 8B:78:0D:84:FD:0D:BC:36:95:72:BF:6F:E3:C3:6B:63:70:B8:F6:1D
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 79DDC9E788B338E9790E58EF29A7877C7B80D37B
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa
Signing time: Sun 30 Jun 2024 12:15:21 +0000
ROA not before: Sun 30 Jun 2024 12:10:21 +0000
ROA not after: Sun 29 Jun 2025 12:15:21 +0000
asID: 199337
IP address blocks: 2a11:f2c0:ffc1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:dd:c9:e7:88:b3:38:e9:79:0e:58:ef:29:a7:87:7c:7b:80:d3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:21 2024 GMT
Not After : Jun 29 12:15:21 2025 GMT
Subject: CN=8B780D84FD0DBC369572BF6FE3C36B6370B8F61D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:fd:c7:08:d6:dd:44:f6:9a:77:1e:4f:1d:
6b:16:62:81:df:5e:7e:f5:8b:12:8e:7e:7e:25:5e:
20:48:7e:9b:e2:2c:8a:ef:fa:2d:28:a6:f9:e9:55:
ee:cf:4e:3c:ec:f8:93:76:c2:30:db:97:b4:4b:36:
73:2b:ef:13:3c:b1:ed:a3:bf:40:af:ca:af:52:d8:
c2:4f:fe:95:1a:c2:f6:d6:5e:80:e7:d6:ef:52:0a:
68:fb:23:17:0d:d6:9b:10:20:1f:3b:27:ac:a0:7d:
a8:c4:71:0d:56:1b:67:aa:a1:a4:60:7a:02:fb:fa:
69:71:9d:a4:55:3f:a9:73:6f:df:f7:b0:23:0e:bb:
74:06:cd:a7:f6:fd:a4:5f:76:fc:fc:2a:f6:1d:1f:
e8:0b:b9:cd:a3:b4:83:0b:3b:af:b4:61:90:5c:e1:
79:6d:2f:a8:ed:32:a1:be:9f:06:b8:2e:86:ab:6d:
b0:0b:5c:20:eb:bb:5f:36:0d:d0:13:2e:ee:b2:9d:
7b:f8:90:0c:0b:ef:b5:4f:0c:b0:9b:43:b1:35:a2:
24:c8:e3:57:e8:84:79:ab:9f:14:50:d3:cd:7c:8c:
dd:3f:82:96:06:c0:83:36:3f:8a:15:e0:3e:b4:48:
e9:20:9c:d7:77:bf:67:27:62:cb:fc:ca:a7:5c:a2:
12:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:78:0D:84:FD:0D:BC:36:95:72:BF:6F:E3:C3:6B:63:70:B8:F6:1D
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffc1::/48
Signature Algorithm: sha256WithRSAEncryption
72:c7:47:9f:c8:d1:1d:0b:76:33:e3:03:eb:ed:54:21:f9:39:
50:ac:dc:87:f0:f6:09:81:b1:5a:97:db:95:70:0b:60:56:ea:
89:f6:6e:c7:9b:93:cf:71:4b:5f:85:8e:ea:b4:46:46:1f:e1:
bb:fc:a4:19:a2:7f:1a:39:63:0f:77:7e:c8:b6:08:c5:bf:f2:
58:a0:69:c1:7e:f3:09:e5:e6:14:ce:1b:7c:42:53:30:58:48:
5e:70:ce:3b:7d:58:54:80:58:55:e7:d5:d7:bb:81:31:85:c7:
73:ba:7f:29:64:40:10:5e:6b:85:d1:8c:72:ec:cc:42:f8:13:
41:6f:f2:28:e0:80:07:85:c9:b5:a4:f8:63:39:9b:98:ca:24:
a1:16:7c:5f:fd:43:4a:42:93:00:76:04:e9:51:fb:8a:f9:ba:
87:2e:21:d0:7e:e6:d5:6a:11:3a:28:7d:f7:25:74:bf:12:59:
43:7e:ee:db:a8:41:02:62:f2:62:85:24:19:34:57:34:c6:55:
16:48:ac:27:4f:ba:1a:e3:1f:f8:96:d8:0c:ee:6e:ad:e5:57:
ef:1a:6e:0a:1e:95:c7:11:07:af:1e:76:29:1b:b2:c4:ac:3f:
c6:c6:4e:e8:ad:47:00:ad:be:fb:d7:1b:3d:4d:16:3a:a4:c1:
eb:19:ce:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:03:40 2024 by rpki-client on console-fra.rpki-client.org