Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663363a3a2f34382d3438203d3e20323136323038.roa
File: 326131313a663263303a666663363a3a2f34382d3438203d3e20323136323038.roa (raw, json)
Hash identifier: VB8nz2zb/w+NXIgYshjVaFbo/eFQEP/GHE7P5rLa7ao=
Subject key identifier: 35:E1:61:E5:F1:FD:22:35:5E:6B:0B:7E:35:11:A7:7C:CB:2B:1B:1A
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 66079330AB5BB89763335B0231BAA16060103F45
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663363a3a2f34382d3438203d3e20323136323038.roa
Signing time: Sun 30 Jun 2024 12:15:19 +0000
ROA not before: Sun 30 Jun 2024 12:10:19 +0000
ROA not after: Sun 29 Jun 2025 12:15:19 +0000
asID: 216208
IP address blocks: 2a11:f2c0:ffc6::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:17:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:07:93:30:ab:5b:b8:97:63:33:5b:02:31:ba:a1:60:60:10:3f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:19 2024 GMT
Not After : Jun 29 12:15:19 2025 GMT
Subject: CN=35E161E5F1FD22355E6B0B7E3511A77CCB2B1B1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:40:ae:72:05:3f:e1:a4:cd:44:5e:bf:47:
b2:1c:48:b0:c4:bf:b2:53:84:80:42:4a:c3:6c:9e:
59:39:a8:4c:45:80:99:fc:80:8a:ef:2c:7f:cc:16:
b9:d3:2e:18:5c:d5:33:f9:05:4b:57:b8:49:55:a6:
68:58:d3:03:e2:c9:f9:7a:b9:b4:64:a5:b5:29:aa:
a1:3d:f0:5c:68:5f:a5:f6:e4:43:9b:e2:06:98:cf:
f8:ff:89:3a:a3:c0:54:82:a7:74:4f:e5:ac:e4:88:
6e:9e:e2:31:df:dc:49:65:4c:25:3d:82:95:86:28:
36:c8:fd:e1:5a:9a:23:6f:66:8b:94:66:cc:d3:47:
f2:b5:71:5c:e0:90:f2:50:d6:eb:ea:ad:a4:a2:ce:
db:f9:28:36:96:80:c6:b2:22:68:73:4f:2b:29:95:
71:1d:67:9e:be:ab:c3:34:a5:40:3d:a9:c4:d4:46:
72:61:3d:27:9a:e8:b1:d6:fa:2d:34:e7:b1:3e:9c:
d2:b9:5b:41:20:db:d1:a0:19:bb:71:6d:52:3e:3f:
bc:f6:5b:c4:ff:e6:d3:17:d9:b3:70:69:f8:2f:9a:
7e:2a:32:57:80:d6:e3:35:1e:ee:78:9b:a8:a4:48:
bc:bd:f7:ed:9d:ca:59:1b:c1:12:e7:29:27:4f:06:
d9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E1:61:E5:F1:FD:22:35:5E:6B:0B:7E:35:11:A7:7C:CB:2B:1B:1A
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663363a3a2f34382d3438203d3e20323136323038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffc6::/48
Signature Algorithm: sha256WithRSAEncryption
4c:e8:3c:47:3a:fa:bb:de:37:58:4e:98:dc:ae:cd:f6:70:8e:
53:6e:d6:1f:ae:94:6f:f8:53:4e:3c:22:6a:ef:14:00:cd:fc:
5f:b9:d6:16:73:27:b4:80:2f:dd:91:48:67:59:f6:6c:3b:8f:
6e:88:3b:5a:36:aa:0f:a1:2b:bc:a2:81:bc:a2:35:d7:e6:04:
a9:75:c3:ae:e0:52:18:8d:b2:0a:5c:9f:d2:d6:27:20:a5:46:
e9:cb:0c:ab:1e:f1:cd:a8:40:eb:aa:c6:07:04:1e:58:cf:3a:
5c:5c:07:c9:09:1d:ec:ae:f7:fc:e3:4c:19:9f:2b:0f:f2:cc:
1b:0d:8d:42:c8:72:0e:49:cf:e2:f7:e8:ba:06:39:98:ae:82:
6b:49:fe:f7:5e:ab:25:2b:51:01:43:f3:38:f9:81:9d:de:45:
5f:92:c0:8f:17:80:f8:b3:23:ba:19:64:51:e3:9d:ac:19:24:
a8:92:da:45:35:a6:c1:cf:ca:ac:14:11:10:59:cc:8f:77:ef:
b7:34:6f:f3:87:bb:70:2c:12:94:dc:c1:1e:21:2d:a1:0e:b4:
24:5a:62:ad:b2:c2:23:32:a4:f1:62:be:ba:cb:86:65:eb:8d:
84:70:ab:c5:2f:f7:b8:58:e9:a1:12:9a:5d:39:e6:dc:63:bc:
5d:de:a4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:11:39 2024 by rpki-client on console-ams.rpki-client.org