Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663613a3a2f34382d3438203d3e20323135383639.roa
File: 326131313a663263303a666663613a3a2f34382d3438203d3e20323135383639.roa (raw, json)
Hash identifier: PWcTzWoM5AXzWgwyZSsWZPdj4FJg8M24t2u+uCxit3w=
Subject key identifier: 73:F7:05:5E:FB:F3:BD:35:0D:D7:34:AD:D3:98:DA:59:E9:0D:93:FE
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 1607BC8095AFAEF06CFA33128D1EE208F8761106
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663613a3a2f34382d3438203d3e20323135383639.roa
Signing time: Sun 30 Jun 2024 12:15:19 +0000
ROA not before: Sun 30 Jun 2024 12:10:19 +0000
ROA not after: Sun 29 Jun 2025 12:15:19 +0000
asID: 215869
IP address blocks: 2a11:f2c0:ffca::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:21:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:07:bc:80:95:af:ae:f0:6c:fa:33:12:8d:1e:e2:08:f8:76:11:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:19 2024 GMT
Not After : Jun 29 12:15:19 2025 GMT
Subject: CN=73F7055EFBF3BD350DD734ADD398DA59E90D93FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a8:0e:a5:75:eb:b3:f3:37:c3:84:ba:88:b7:
71:ee:7b:23:57:6d:78:44:0e:b6:b4:c2:5f:f0:f2:
41:bd:c7:a9:da:0c:95:46:29:1a:a2:0c:5c:4f:2f:
b2:df:22:70:0b:5c:e8:75:c2:f4:18:66:8d:fd:8c:
a9:30:62:d0:7f:5e:24:bb:6e:30:1c:d9:cc:57:ee:
61:d4:7f:4e:cf:76:e6:7a:79:72:bb:f0:e4:5d:89:
13:e6:4f:cc:86:28:60:70:73:f3:e9:98:18:61:f9:
f2:b6:97:11:26:e4:96:4b:8f:cd:5e:a0:8f:20:7a:
ec:e9:74:6d:d1:14:ab:a1:ea:73:6b:15:82:1e:ee:
bf:d2:06:b1:db:b9:a8:42:3d:22:02:94:72:02:5d:
29:12:ff:06:06:3f:70:a2:d4:76:b2:1a:40:04:a9:
4a:fd:3c:90:b3:48:f0:84:d6:1e:0a:ec:1d:fa:9f:
66:64:ab:9a:86:94:d7:cc:d9:d4:3a:5b:98:ef:21:
10:17:ee:33:9d:c7:a9:63:33:ea:d7:5a:9f:fc:90:
22:f4:c3:91:ee:63:4e:1d:46:f4:2f:fc:4b:c8:33:
11:b8:56:7d:7d:d4:28:92:4b:da:75:b3:c6:0f:c3:
dc:40:45:49:82:7f:55:da:ed:36:1f:d6:e4:f3:e1:
4d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F7:05:5E:FB:F3:BD:35:0D:D7:34:AD:D3:98:DA:59:E9:0D:93:FE
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663613a3a2f34382d3438203d3e20323135383639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffca::/48
Signature Algorithm: sha256WithRSAEncryption
1d:68:72:fe:2e:15:da:c0:51:54:c9:92:25:25:6a:43:d8:ba:
43:60:86:43:ad:1a:f3:91:fc:85:51:00:88:e2:7f:d9:dd:5d:
9d:16:8b:ce:f0:75:eb:2a:a8:46:ac:51:25:b2:77:ad:e6:a3:
1d:e2:20:6f:97:a4:e0:de:58:ed:b9:e6:60:16:5f:f0:6a:df:
da:75:65:84:a6:c6:1c:71:72:19:76:35:a9:db:e8:9a:b4:15:
55:b2:21:90:b4:2d:7d:91:44:81:86:99:9f:e4:2d:8d:33:6e:
42:76:1a:ee:9b:7c:8d:3d:75:43:76:d4:f4:7b:32:a7:4d:2e:
a5:7f:55:b2:6d:80:d1:9a:8a:6d:11:bb:72:f3:58:ce:eb:52:
88:53:04:a5:9b:38:95:13:27:6d:d2:d5:fc:a1:40:50:b7:5a:
a6:6e:dd:32:da:22:9c:8f:ca:30:fb:73:e5:cd:bf:61:b1:9d:
f4:d8:1b:f0:46:3f:2e:f9:ee:56:c0:06:d3:3c:1d:d5:5e:12:
84:bd:3b:91:d5:bc:6e:6f:4b:09:a1:88:fe:38:81:e0:99:3f:
4c:4a:63:dd:8a:82:0f:d7:0b:39:5d:c9:0b:e6:f5:df:d0:e4:
81:74:ef:76:18:49:ac:62:4b:74:6a:b1:4d:06:02:40:01:3f:
ea:13:f6:d4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUFge8gJWvrvBs+jMSjR7iCPh2EQYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNDA2MzAxMjEwMTlaFw0yNTA2MjkxMjE1MTlaMDMxMTAvBgNV
BAMTKDczRjcwNTVFRkJGM0JEMzUwREQ3MzRBREQzOThEQTU5RTkwRDkzRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQqA6ldeuz8zfDhLqIt3HueyNX
bXhEDra0wl/w8kG9x6naDJVGKRqiDFxPL7LfInALXOh1wvQYZo39jKkwYtB/XiS7
bjAc2cxX7mHUf07PduZ6eXK78ORdiRPmT8yGKGBwc/PpmBhh+fK2lxEm5JZLj81e
oI8geuzpdG3RFKuh6nNrFYIe7r/SBrHbuahCPSIClHICXSkS/wYGP3Ci1HayGkAE
qUr9PJCzSPCE1h4K7B36n2Zkq5qGlNfM2dQ6W5jvIRAX7jOdx6ljM+rXWp/8kCL0
w5HuY04dRvQv/EvIMxG4Vn191CiSS9p1s8YPw9xARUmCf1Xa7TYf1uTz4U0LAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUc/cFXvvzvTUN1zSt05jaWekNk/4wHwYDVR0j
BBgwFoAUCDmpPatUTClv+hQ0VoRKiygYsdAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGRlODM3ZmItNjM5MC00MWI1LTgyYTAtZjBkMDJjMDNh
MmM2LzcvMDgzOUE5M0RBQjU0NEMyOTZGRkExNDM0NTY4NDRBOEIyODE4QjFEMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NEbXBQYXRVVENsdi1oUTBWb1JLaXln
WXNkQS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGRlODM3ZmIt
NjM5MC00MWI1LTgyYTAtZjBkMDJjMDNhMmM2LzcvMzI2MTMxMzEzYTY2MzI2MzMw
M2E2NjY2NjM2MTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNTM4MzYzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoR8sD/yjANBgkqhkiG9w0BAQsFAAOCAQEAHWhy/i4V2sBRVMmS
JSVqQ9i6Q2CGQ60a85H8hVEAiOJ/2d1dnRaLzvB16yqoRqxRJbJ3reajHeIgb5ek
4N5Y7bnmYBZf8Grf2nVlhKbGHHFyGXY1qdvomrQVVbIhkLQtfZFEgYaZn+QtjTNu
QnYa7pt8jT11Q3bU9Hsyp00upX9Vsm2A0ZqKbRG7cvNYzutSiFMEpZs4lRMnbdLV
/KFAULdapm7dMtoinI/KMPtz5c2/YbGd9Ngb8EY/LvnuVsAG0zwd1V4ShL07kdW8
bm9LCaGI/jiB4Jk/TEpj3YqCD9cLOV3JC+b139DkgXTvdhhJrGJLdGqxTQYCQAE/
6hP21A==
-----END CERTIFICATE-----
Generated at Sun Jul 7 21:03:40 2024 by rpki-client on console-fra.rpki-client.org