Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663393a3a2f34382d3438203d3e20323135393633.roa
File: 326131313a663263303a666663393a3a2f34382d3438203d3e20323135393633.roa (raw, json)
Hash identifier: fKMY4xaeaLhjvxclEdI2lvhKW/YcPdSMUJCdLexKcHQ=
Subject key identifier: D4:C6:52:48:D9:0E:CE:7E:BB:4E:F5:23:D3:67:4D:A2:00:0C:4C:8A
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 0CB78A26BB53C4F78FC9FDC5C7ADFEF9F61F1C23
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663393a3a2f34382d3438203d3e20323135393633.roa
Signing time: Sun 30 Jun 2024 12:15:20 +0000
ROA not before: Sun 30 Jun 2024 12:10:20 +0000
ROA not after: Sun 29 Jun 2025 12:15:20 +0000
asID: 215963
IP address blocks: 2a11:f2c0:ffc9::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:b7:8a:26:bb:53:c4:f7:8f:c9:fd:c5:c7:ad:fe:f9:f6:1f:1c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:20 2024 GMT
Not After : Jun 29 12:15:20 2025 GMT
Subject: CN=D4C65248D90ECE7EBB4EF523D3674DA2000C4C8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:1c:80:a3:7c:44:91:96:fe:d6:28:06:c3:
dc:84:db:94:60:fb:7f:e7:a2:5c:2b:23:88:82:c8:
ce:7a:ff:54:be:db:02:5d:6c:0a:75:f9:01:3b:1b:
c9:7f:53:8c:aa:76:d6:6a:2d:7e:dd:e9:d3:72:7f:
10:c3:68:0e:f4:49:4f:94:dc:a1:f0:db:eb:e4:50:
57:a8:22:f9:fa:d0:36:5b:b8:15:11:9b:8a:0e:5b:
5f:49:6f:94:90:ff:9e:51:04:88:bb:96:90:1c:73:
06:56:1c:72:c7:57:30:1c:75:3d:84:a7:ac:00:a0:
50:ea:88:40:1b:f0:03:4b:9e:3b:bf:c0:fb:53:19:
64:45:b8:43:85:85:fa:4a:48:7b:17:12:ab:8a:b2:
15:db:c7:51:ba:14:81:35:cc:29:cf:51:9a:ef:fa:
24:72:46:4d:86:79:13:33:16:05:c8:dd:53:b1:81:
7f:52:1e:23:03:46:9b:82:e4:1c:8a:24:48:c3:7b:
5b:e6:87:a6:e0:bf:e6:52:79:e7:80:e0:f0:6d:2d:
5c:03:63:bc:1a:f4:be:b0:e8:d8:ee:da:5a:83:43:
91:52:1d:5c:1d:42:cc:0a:94:69:b5:f2:ea:a3:b6:
12:5c:64:be:49:45:b1:8a:79:7e:1c:f9:67:70:d9:
b3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C6:52:48:D9:0E:CE:7E:BB:4E:F5:23:D3:67:4D:A2:00:0C:4C:8A
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663393a3a2f34382d3438203d3e20323135393633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffc9::/48
Signature Algorithm: sha256WithRSAEncryption
73:6e:4f:90:6b:f4:78:d4:01:c3:bf:34:28:1a:54:8b:85:e0:
01:30:e5:e8:17:60:39:5b:5b:d4:22:09:93:16:58:83:3b:7a:
30:22:7e:83:c3:61:7c:0a:ee:d4:93:5c:95:85:3f:98:2c:b1:
ce:54:ef:7b:ac:0a:b8:21:02:86:6e:33:f7:56:b9:9e:e3:ad:
da:c4:e5:cb:ce:64:c5:28:3d:94:ac:5c:eb:64:49:2a:85:8b:
13:8c:53:52:1a:37:3c:36:e1:19:8d:99:54:71:64:d2:40:6e:
1e:e8:e3:79:5e:07:a4:58:7c:ab:93:f0:63:34:08:93:ca:dd:
ef:d1:6a:41:54:2e:70:04:32:07:b9:e8:7b:b8:30:e9:55:ae:
c4:d8:3a:f7:7a:48:b6:e5:e2:7d:95:5e:9e:31:ed:73:fc:ce:
12:c6:32:86:18:e5:4a:4f:fb:38:a7:46:40:d7:17:ce:4a:4b:
38:9b:80:fd:80:5b:12:5b:ad:02:1c:25:1d:b7:a7:b4:2a:fc:
1b:41:62:b6:3a:68:86:e3:1b:fd:2b:86:89:5d:a2:21:c3:20:
4b:aa:ca:10:78:42:58:08:19:1f:78:f1:29:d0:7f:8e:c7:7e:
60:9f:eb:c7:d9:c7:c3:d7:22:95:95:ab:ab:da:fd:43:7f:b4:
52:27:be:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:11:39 2024 by rpki-client on console-ams.rpki-client.org