Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa
File: 326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa (raw, json)
Hash identifier: QTxh2hX0MYlYpiZBnivyGbqCx9Ke8PIevwf3OT2uZLM=
Subject key identifier: C6:D5:60:FE:79:8B:F4:3B:C3:E7:71:F4:43:58:DF:5E:D3:97:05:A6
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 3AA21C29879C284655A03993A46993D1FDC66B62
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa
Signing time: Sun 30 Jun 2024 12:15:18 +0000
ROA not before: Sun 30 Jun 2024 12:10:18 +0000
ROA not after: Sun 29 Jun 2025 12:15:18 +0000
asID: 216055
IP address blocks: 2a11:f2c0:ffc8::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:a2:1c:29:87:9c:28:46:55:a0:39:93:a4:69:93:d1:fd:c6:6b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:18 2024 GMT
Not After : Jun 29 12:15:18 2025 GMT
Subject: CN=C6D560FE798BF43BC3E771F44358DF5ED39705A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:8f:d4:f1:9b:ad:9d:e9:ca:95:48:af:43:
f4:20:70:d5:de:3a:c5:7a:c0:7b:c1:57:f7:01:a3:
32:d2:7b:2a:5b:77:9b:a4:ab:49:9c:cc:97:79:e2:
cb:fd:07:2f:57:95:7b:e7:3e:a7:42:17:a6:bc:9f:
6c:5b:37:73:e7:5f:f6:ad:94:6e:50:e9:2a:5f:72:
36:e4:41:81:53:43:cb:04:21:1e:60:50:8b:2e:26:
b2:97:42:58:89:30:0d:21:de:f1:65:b3:29:d3:98:
ee:4d:eb:d1:d3:4d:97:e0:40:95:ea:52:94:74:af:
ac:e6:60:21:02:d9:cd:10:f1:57:71:2b:20:a1:91:
62:52:7e:72:db:38:56:7b:01:22:1a:6a:69:e9:10:
5c:78:53:d7:de:af:69:dd:85:3b:ba:aa:c2:ed:de:
83:be:73:04:19:52:c8:1a:c3:ea:ba:c0:86:34:42:
c4:86:99:77:8c:d7:2f:a0:fb:e8:11:27:44:43:de:
59:28:a6:0e:b7:29:da:e9:fe:dc:f1:d9:2e:4d:24:
35:24:57:0f:70:6b:2f:ee:9f:6e:ba:38:bb:34:97:
3d:90:d2:13:5d:5f:3f:1c:0c:17:bd:c0:9f:bd:b3:
0b:40:66:72:90:54:18:c5:f7:37:8d:00:4a:fa:a9:
e9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D5:60:FE:79:8B:F4:3B:C3:E7:71:F4:43:58:DF:5E:D3:97:05:A6
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffc8::/48
Signature Algorithm: sha256WithRSAEncryption
01:e9:61:10:c5:68:a8:df:dc:7b:10:62:2b:09:4a:2e:bf:3d:
33:29:42:a6:1b:8f:cc:e4:35:fd:28:9a:9f:d3:df:a5:9d:e9:
57:f2:a4:a1:89:63:1d:02:c8:14:0a:3f:fd:1b:7f:a8:8a:ac:
ad:83:a2:8d:5f:9f:1c:33:2c:72:a2:19:41:49:97:d4:c1:6c:
a6:78:55:1c:5e:c2:3b:51:43:19:13:49:51:90:c9:ed:5e:c8:
c8:8e:b2:08:3d:0e:75:c6:3f:8a:d6:5e:6f:de:93:85:84:32:
12:b1:65:13:9c:41:38:4a:d1:5b:eb:87:e3:13:be:7d:7f:25:
bd:84:34:20:17:07:aa:50:a8:ab:1d:a9:b5:c4:ca:67:1b:6c:
34:3d:b3:cc:99:7e:02:60:c0:a2:31:5d:22:a5:f1:1a:42:11:
52:2f:af:f5:a6:6d:e7:94:19:23:ae:c8:b1:29:6b:85:1e:75:
8d:3b:6c:42:5e:e6:fb:7e:86:d5:99:72:e2:14:59:8b:3f:7c:
ea:b2:9b:2e:87:12:3b:65:f9:84:c0:34:bb:44:c4:3d:2f:33:
9b:a4:38:95:cc:18:7d:44:ee:a7:18:4a:42:b6:09:26:01:49:
3d:bb:e7:71:4c:db:1c:2d:c7:34:e5:2f:80:75:97:78:8e:61:
bb:63:8a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:03:40 2024 by rpki-client on console-fra.rpki-client.org