Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663353a3a2f34382d3438203d3e20323136323534.roa
File: 326131313a663263303a666663353a3a2f34382d3438203d3e20323136323534.roa (raw, json)
Hash identifier: uLP3foJGq3oi57DlBrDdpQ3/QTiMUYdGBO50XFRbWFE=
Subject key identifier: FA:20:71:E9:DB:60:7A:3B:4D:7F:1F:6C:0E:9B:8E:3C:30:F9:D2:A9
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 783D07A75F07C1282A57D184DBAA20256AE3DB69
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663353a3a2f34382d3438203d3e20323136323534.roa
Signing time: Sun 30 Jun 2024 12:15:19 +0000
ROA not before: Sun 30 Jun 2024 12:10:19 +0000
ROA not after: Sun 29 Jun 2025 12:15:19 +0000
asID: 216254
IP address blocks: 2a11:f2c0:ffc5::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:17:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:3d:07:a7:5f:07:c1:28:2a:57:d1:84:db:aa:20:25:6a:e3:db:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:19 2024 GMT
Not After : Jun 29 12:15:19 2025 GMT
Subject: CN=FA2071E9DB607A3B4D7F1F6C0E9B8E3C30F9D2A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b0:bc:de:e0:3f:9c:bb:c3:cf:f2:0f:33:88:
a3:55:d0:9a:5d:ea:0d:79:19:34:b1:b4:e8:39:47:
41:fd:ef:54:bf:23:87:f8:d3:10:5e:81:2a:5c:93:
72:f8:38:2f:57:df:11:5a:82:ab:2e:bd:75:61:8f:
0c:83:86:17:c7:2f:cc:00:45:0b:af:d5:83:98:c2:
b0:b1:dd:af:8d:cd:d7:8a:d1:01:0a:d5:5f:3b:3d:
f6:54:5e:3d:9c:50:cc:59:74:96:45:cc:04:53:76:
09:d5:6c:30:c3:4f:72:35:80:10:a5:d2:4d:6e:19:
83:94:fb:92:43:da:bf:de:30:db:6c:9a:8a:2f:78:
4a:78:ad:d4:c9:de:7f:82:57:e7:21:74:8e:95:69:
03:ae:04:3d:08:db:eb:4a:76:21:5a:b2:ac:a8:46:
a1:c6:79:29:c1:64:7e:7e:df:a1:95:65:3a:b2:0b:
93:ba:63:43:8a:f9:34:81:d7:b6:13:8a:ce:0c:61:
05:48:b5:5b:a5:9c:ff:31:4e:e4:55:c9:84:13:51:
2f:26:13:84:81:9e:e6:5f:ff:56:ae:d3:0e:51:fd:
82:46:86:6b:3f:23:c8:77:66:69:e0:88:7a:e5:f0:
dd:9d:9c:6f:5e:e8:30:1c:7c:0e:2b:8d:bf:c6:3a:
c4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:20:71:E9:DB:60:7A:3B:4D:7F:1F:6C:0E:9B:8E:3C:30:F9:D2:A9
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663353a3a2f34382d3438203d3e20323136323534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffc5::/48
Signature Algorithm: sha256WithRSAEncryption
48:a7:bb:eb:fe:d9:0f:ed:dd:4f:73:a3:18:07:0a:fd:bf:62:
86:a4:98:80:8a:cf:ec:80:5f:67:71:2e:78:1a:ce:5c:c5:b8:
ee:f3:11:8f:5a:8d:2c:09:58:eb:f8:48:e9:26:11:b8:1e:f1:
b0:ed:43:ff:de:f4:69:4a:bc:24:00:a1:96:ac:42:93:20:e7:
84:b3:bf:7b:36:6f:a9:6e:22:34:3c:42:74:47:08:75:e3:0f:
c1:5c:6d:69:6e:12:1c:3e:37:19:88:dd:61:ba:6e:28:6f:98:
64:18:e0:13:97:e0:91:36:63:c4:4b:a5:af:b9:15:0e:91:79:
d1:9a:db:a4:24:21:20:a9:00:91:bc:98:6c:a4:e5:e1:fe:b1:
5f:08:d9:4a:6d:c2:65:f9:ab:94:57:92:99:c7:f1:ac:24:d9:
ba:f9:25:88:89:c3:e1:12:58:3b:94:97:3e:af:6c:cb:d6:95:
3c:be:98:ea:45:f7:a2:b6:b8:89:df:9b:c9:1e:9a:0a:04:12:
84:52:9b:97:63:73:1f:9a:02:c9:a7:a1:32:05:77:fc:20:0b:
2f:9e:b3:7b:98:f3:07:d6:b3:ac:0d:9d:c8:dc:ca:37:ad:61:
54:02:32:f4:bc:37:ee:0b:dc:78:30:e7:8e:59:c3:3f:76:12:
be:97:24:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:03:40 2024 by rpki-client on console-fra.rpki-client.org