Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663623a3a2f34382d3438203d3e20323135373738.roa
File: 326131313a663263303a666663623a3a2f34382d3438203d3e20323135373738.roa (raw, json)
Hash identifier: VfG+CrlbGCMoJ8tSYU2SqoU0CMCLdqWcoGKTPLhsQ9w=
Subject key identifier: AD:52:C8:6E:5F:4D:6A:78:2B:8A:F4:99:79:41:FB:CB:1E:C9:B0:21
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 261A67D15C56D19FBE79B0A628BA9C143B2FDCBD
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663623a3a2f34382d3438203d3e20323135373738.roa
Signing time: Sun 30 Jun 2024 12:15:20 +0000
ROA not before: Sun 30 Jun 2024 12:10:20 +0000
ROA not after: Sun 29 Jun 2025 12:15:20 +0000
asID: 215778
IP address blocks: 2a11:f2c0:ffcb::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:1a:67:d1:5c:56:d1:9f:be:79:b0:a6:28:ba:9c:14:3b:2f:dc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:20 2024 GMT
Not After : Jun 29 12:15:20 2025 GMT
Subject: CN=AD52C86E5F4D6A782B8AF4997941FBCB1EC9B021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:a0:e6:ce:a7:36:f4:08:9b:90:57:56:9f:
d7:f9:cb:12:01:6b:49:f7:dd:16:91:ca:52:3b:03:
44:9b:ea:3f:fb:0a:a6:e4:f2:36:fb:a1:98:79:95:
2d:c7:17:32:30:d6:d7:d9:d3:38:9f:a7:25:18:a8:
32:8c:d2:0c:19:cb:74:95:99:96:37:91:47:99:9d:
4f:61:52:a8:ec:60:22:3f:d4:ef:7e:6c:69:f1:3d:
21:ed:5a:6b:b7:ae:c5:de:cf:4b:b3:fa:08:f9:91:
7b:bd:08:6c:17:4e:9f:89:bc:50:50:a9:9b:8d:50:
68:1a:e3:1c:ad:08:58:37:36:35:95:32:5f:09:65:
9b:f9:45:75:d6:a7:b5:ca:8e:e2:55:fe:bb:b9:cb:
ca:de:29:b3:da:2a:ec:ea:aa:64:aa:6a:c9:17:01:
44:c5:fe:93:f5:4f:49:ab:19:c1:5f:56:2c:bc:c9:
e3:9c:75:ac:4c:f2:c0:9b:fa:f7:18:cf:20:c2:98:
09:24:31:03:4b:b8:f3:cd:d2:68:85:a6:f5:d0:71:
d3:c4:3c:40:ba:13:fe:dc:8e:24:17:f8:ce:cc:47:
aa:e2:a8:ef:15:f4:aa:5c:87:98:a0:09:4c:01:9a:
e0:dd:8d:c3:cc:18:ca:05:7a:f0:ab:6e:f6:d6:2e:
6b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:52:C8:6E:5F:4D:6A:78:2B:8A:F4:99:79:41:FB:CB:1E:C9:B0:21
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663623a3a2f34382d3438203d3e20323135373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffcb::/48
Signature Algorithm: sha256WithRSAEncryption
cc:2b:6c:57:40:f4:d1:46:8c:17:79:93:8c:e5:27:ff:7c:28:
5d:c0:3c:cd:62:bc:b3:15:28:b6:c2:07:57:97:cb:0e:25:b9:
a6:5b:75:2f:ec:0e:1d:3f:23:26:dd:c8:3f:22:2b:9b:b6:52:
8e:2c:a7:da:16:6c:84:df:32:93:33:5e:f1:0f:5f:35:36:37:
d0:62:17:3e:e6:de:13:d1:f9:78:6f:ae:73:32:56:04:11:a6:
ca:58:3e:2a:6b:c3:88:cc:95:e8:11:ca:f7:ed:7b:69:e9:7e:
b7:e1:cd:2e:01:80:b0:0c:cc:94:50:52:12:e5:77:69:f4:0b:
ea:b3:8a:ac:3e:78:68:33:16:6d:9f:38:5a:4f:cf:2e:8e:3e:
4c:da:1b:06:90:73:30:68:8a:4e:3f:15:89:a8:82:ce:32:49:
14:be:ba:ad:04:0c:71:4d:71:4e:00:db:60:90:19:ae:66:c1:
30:5d:3e:f8:10:cd:ec:6f:bb:59:59:56:d5:8b:4b:16:85:0c:
99:6b:de:9d:c7:5c:f5:c8:80:d5:f0:39:5b:f3:25:40:d2:4c:
10:b2:25:95:e9:c6:97:c2:4a:34:0a:85:b3:a8:f6:b2:7d:de:
3f:4b:75:5a:97:74:6f:23:6e:70:23:5b:48:04:4f:07:22:28:
ef:68:86:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:03:40 2024 by rpki-client on console-fra.rpki-client.org