Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663343a3a2f34382d3438203d3e20323136333733.roa
File: 326131313a663263303a666663343a3a2f34382d3438203d3e20323136333733.roa (raw, json)
Hash identifier: hksXm977QHS7ybW8HNvIGfS7b+3oVPc+CAYgomymlvQ=
Subject key identifier: CE:82:1E:C5:24:F5:7F:68:DC:A6:82:7A:A9:61:54:24:A9:30:78:FA
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 61787ABCE9695237C2DF4393B2D5946B005DC1D9
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663343a3a2f34382d3438203d3e20323136333733.roa
Signing time: Sun 30 Jun 2024 12:15:20 +0000
ROA not before: Sun 30 Jun 2024 12:10:20 +0000
ROA not after: Sun 29 Jun 2025 12:15:20 +0000
asID: 216373
IP address blocks: 2a11:f2c0:ffc4::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:16:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:78:7a:bc:e9:69:52:37:c2:df:43:93:b2:d5:94:6b:00:5d:c1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:20 2024 GMT
Not After : Jun 29 12:15:20 2025 GMT
Subject: CN=CE821EC524F57F68DCA6827AA9615424A93078FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:3f:5a:d0:2c:10:8c:1c:49:67:10:c8:fc:
88:b9:10:23:16:ea:6b:1e:19:36:82:de:2e:b2:e6:
e1:0c:12:d2:64:c3:2a:5b:a1:a3:21:a6:4b:29:11:
6c:4e:f9:51:2c:ab:c1:ee:b7:e0:96:aa:00:60:17:
49:ec:ec:89:ee:bf:64:2c:c3:e5:e3:8d:4d:c2:e6:
99:2b:3b:7c:7b:37:63:a9:72:0c:82:67:5d:19:96:
d5:33:54:5f:64:bb:b9:f4:eb:90:f5:6e:90:6e:05:
32:57:3d:23:c6:db:6c:84:58:42:82:1e:b3:9a:3d:
c4:56:9c:bf:af:4f:4d:76:13:24:6f:c8:31:33:e8:
3a:40:01:cb:62:2d:98:a4:9a:b4:99:86:4d:37:f0:
98:4f:01:d5:20:08:2a:43:35:2c:16:29:4d:e8:49:
88:a6:bf:17:7c:9a:7e:e7:11:75:af:ee:9b:54:cc:
ec:2e:ff:5e:02:08:c1:41:47:86:8e:ef:61:8f:22:
f2:04:6c:4d:2a:07:4c:5a:16:c2:85:6c:36:64:c6:
94:57:e1:9f:eb:07:b9:0a:8f:48:2b:60:f5:2c:61:
be:98:23:da:92:11:9b:d8:31:30:cc:bf:db:63:8d:
3d:be:3c:4e:18:a6:b9:54:76:90:09:18:b9:75:40:
df:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:82:1E:C5:24:F5:7F:68:DC:A6:82:7A:A9:61:54:24:A9:30:78:FA
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663343a3a2f34382d3438203d3e20323136333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffc4::/48
Signature Algorithm: sha256WithRSAEncryption
b4:8b:50:13:04:bc:cb:73:3f:d2:b7:26:b1:63:a6:9f:f5:58:
47:53:13:ac:92:1d:e2:84:9f:ef:e3:8d:5f:0d:db:ab:38:21:
22:7b:b2:1a:ab:2a:08:27:bb:9f:3e:24:70:03:ba:10:79:9e:
c0:9e:f4:28:a6:d1:56:69:3c:3b:c8:4d:e9:60:7e:17:79:77:
30:5d:02:c5:b5:65:93:3e:26:df:62:97:54:08:98:4a:f8:8e:
4f:e3:92:02:f9:e0:5a:ca:af:4b:c7:a3:e7:e6:53:f3:ec:b9:
f0:9e:2b:84:ad:ae:f9:27:97:d2:d0:08:ff:8b:3c:2c:f9:d4:
84:2f:24:ab:b1:b6:d0:3b:82:86:2b:d7:6f:84:e6:a5:38:e8:
b8:80:f4:f3:e2:04:de:ad:4e:0d:8d:2c:f6:a6:1e:e5:cd:9b:
f4:73:e6:9c:ed:1a:ac:7f:75:51:fa:a7:a5:d2:db:61:e0:54:
65:57:4f:da:2a:ab:58:5a:15:f3:0a:ff:7c:0b:47:ba:1f:67:
29:94:d3:2c:c3:cf:cd:b7:1d:ba:15:d9:0d:cf:e6:83:8f:f3:
61:db:d8:c2:4a:b7:d5:5e:d5:0c:03:ac:eb:b8:62:f4:07:fd:
d8:6a:8d:0f:f6:10:4c:6e:74:2e:13:c6:13:68:45:4c:3b:aa:
90:b9:cd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:03:40 2024 by rpki-client on console-fra.rpki-client.org