Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663333a3a2f34382d3438203d3e20313938383035.roa
File: 326131313a663263303a666663333a3a2f34382d3438203d3e20313938383035.roa (raw, json)
Hash identifier: DIm7gaVQbX+vTUOx4r+BLFiFM2FvoChAgTuilSdGT20=
Subject key identifier: 3A:C8:80:31:9D:58:4F:F6:82:85:BB:32:AA:CF:43:97:87:64:6F:F7
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 01D7A3EEE2A765C122403B3D62729269B7A34581
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663333a3a2f34382d3438203d3e20313938383035.roa
Signing time: Sun 30 Jun 2024 12:15:22 +0000
ROA not before: Sun 30 Jun 2024 12:10:22 +0000
ROA not after: Sun 29 Jun 2025 12:15:22 +0000
asID: 198805
IP address blocks: 2a11:f2c0:ffc3::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:13:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:d7:a3:ee:e2:a7:65:c1:22:40:3b:3d:62:72:92:69:b7:a3:45:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:22 2024 GMT
Not After : Jun 29 12:15:22 2025 GMT
Subject: CN=3AC880319D584FF68285BB32AACF439787646FF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:9c:6d:f1:67:5f:1e:9e:be:3e:d2:91:5f:
a1:27:55:9f:8e:08:66:fa:34:b0:1a:e5:20:5c:62:
e6:f9:a5:62:8a:4c:47:f5:a4:b7:dd:9f:7d:e0:48:
fa:35:a9:ae:2e:a2:3a:76:92:67:5d:72:5d:8a:69:
c7:b6:b2:ba:8f:8e:09:74:ad:b1:3c:47:51:41:64:
d2:30:86:3c:fc:4c:6f:6d:83:17:c3:c0:1b:98:7d:
17:3c:97:7a:b7:65:8d:a3:0d:70:6b:31:cb:76:0f:
df:4a:99:92:91:9b:c2:ca:b6:3f:11:dc:fc:db:71:
37:1b:ce:a2:97:da:d9:03:c5:ef:75:65:7b:10:57:
cd:ac:e5:fe:db:39:12:ee:1d:ca:01:63:99:6d:fc:
b5:2a:31:f8:6d:cf:28:a3:ae:c4:dc:4f:49:b3:44:
a3:87:c2:9f:e5:d1:21:28:88:55:c9:36:1b:b2:80:
aa:13:5e:ba:28:24:18:d5:f2:1e:0b:f9:b8:37:b1:
68:63:ca:18:c2:41:34:76:2b:22:04:55:dd:d6:02:
e0:87:9b:93:48:3f:18:f7:51:f4:bf:08:f5:84:5a:
bd:56:04:89:e0:c6:07:69:e4:51:a3:79:a8:50:0e:
9b:ca:97:51:e8:f8:28:85:7f:6d:a0:b5:99:c4:27:
7d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C8:80:31:9D:58:4F:F6:82:85:BB:32:AA:CF:43:97:87:64:6F:F7
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663333a3a2f34382d3438203d3e20313938383035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffc3::/48
Signature Algorithm: sha256WithRSAEncryption
b4:c4:97:cb:a4:25:0b:48:bb:72:70:fd:bc:aa:ba:93:46:9f:
d9:9c:3a:a8:8f:95:0a:65:5e:c7:5b:cd:2a:36:f3:3a:0b:10:
00:ac:b3:bf:78:fd:af:51:fe:fa:fb:8e:d7:70:2c:d8:b1:2e:
fd:8c:cb:b7:49:96:3d:75:d1:58:69:bc:03:a5:8e:26:c0:9f:
a2:0f:97:88:95:1c:ad:87:19:c4:a5:4a:c3:8c:5f:9b:c9:43:
fb:25:38:fd:ad:6c:8a:f1:bc:b2:a2:40:4d:fb:49:d2:3f:16:
4f:4e:e3:da:59:0c:9e:af:5e:7c:46:22:39:cd:ba:de:59:6f:
ac:2c:50:b4:4e:c5:94:d6:b0:f4:55:d7:1e:17:84:a5:f1:d3:
59:c4:2e:6a:8d:93:52:23:72:1f:f4:23:94:a9:cd:6b:a7:a6:
cd:07:03:4a:32:1e:6c:9c:49:b7:2a:63:0b:5d:3f:7f:8f:3b:
62:87:b9:31:26:fa:fe:59:17:34:66:f5:34:ea:11:03:65:69:
f2:79:d4:8a:f3:9f:7d:50:0c:9c:77:7a:9f:74:74:6b:89:f5:
7c:b1:57:45:bd:e4:a4:2e:91:65:e6:b2:a2:ad:d1:fa:52:79:
35:14:62:b8:5f:c2:de:2d:0c:8c:73:5e:7a:ab:b7:23:f9:0a:
58:29:01:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:11:39 2024 by rpki-client on console-ams.rpki-client.org