Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa
File: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (raw, json)
Hash identifier: FHz+sFvWK6Wg9Uds8VtBBluryM33Z/iWL3WW25sjh/0=
Subject key identifier: C5:06:DE:C0:83:57:71:F5:A5:A2:5B:32:98:5F:02:CF:5E:A3:CE:C4
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 6CA049DFBBFF4AA0335CF69B2A3428628A71CDA8
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa
Signing time: Sun 30 Jun 2024 12:15:20 +0000
ROA not before: Sun 30 Jun 2024 12:10:20 +0000
ROA not after: Sun 29 Jun 2025 12:15:20 +0000
asID: 215768
IP address blocks: 2a11:f2c0:ffcc::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a0:49:df:bb:ff:4a:a0:33:5c:f6:9b:2a:34:28:62:8a:71:cd:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:20 2024 GMT
Not After : Jun 29 12:15:20 2025 GMT
Subject: CN=C506DEC0835771F5A5A25B32985F02CF5EA3CEC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:97:4f:37:8b:a2:91:fb:58:0d:08:f1:fc:00:
20:62:62:d7:9c:83:46:17:f2:ea:b3:df:f4:a8:66:
53:55:01:67:9b:1d:8c:c7:2b:f2:00:03:63:8b:76:
27:e9:6e:a8:6b:9f:7c:c1:c4:75:72:e7:44:7e:e3:
49:22:a3:b3:14:e2:8b:83:1d:81:58:5d:15:ca:d6:
1b:34:50:17:58:cf:7f:82:56:d3:8b:62:13:f3:4f:
ca:45:af:6d:98:19:01:40:f9:e4:d5:e7:7c:7a:a0:
9a:a7:eb:a0:4a:c3:87:8b:63:6d:dc:91:93:e8:3d:
12:15:27:ab:05:9d:05:7d:e7:8a:8f:d0:5c:30:31:
34:0a:30:57:80:99:96:05:69:29:9d:0a:ee:71:6c:
98:cf:b8:c7:9f:14:31:ff:0b:00:b6:86:c9:c3:b6:
3d:5e:e9:b4:e0:2e:53:03:06:3e:ae:32:d6:05:d6:
c8:eb:50:48:b2:b0:08:c2:e5:f4:65:e9:f9:e2:ae:
95:aa:da:d1:d3:75:5e:5c:d8:7f:ec:7b:84:3d:79:
5e:04:10:83:f1:f5:5c:f0:2f:a6:84:4a:8d:b3:61:
b9:6e:6c:d0:37:6e:06:85:66:1a:b4:ba:0e:c9:3b:
b5:19:d3:fe:a0:95:f7:df:c1:7d:32:df:33:b7:76:
bb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:06:DE:C0:83:57:71:F5:A5:A2:5B:32:98:5F:02:CF:5E:A3:CE:C4
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffcc::/48
Signature Algorithm: sha256WithRSAEncryption
b0:b7:b4:37:65:61:66:82:79:a1:45:4e:07:88:db:f0:26:69:
02:bd:77:78:2e:4d:60:9d:3e:ff:d8:fd:6f:5a:44:7b:66:06:
d9:27:c7:6b:56:82:1b:5a:b2:a7:a9:10:62:b9:a1:3b:2b:6b:
83:be:13:9c:80:ca:a3:2d:00:d5:91:ff:62:de:f8:5e:52:5a:
e3:23:d5:73:a8:12:33:38:35:27:65:36:ba:5e:af:75:7a:c8:
cd:8c:0a:9b:fe:89:1f:7e:41:c6:7d:4f:77:94:7b:cc:b5:f0:
f2:eb:c4:dd:8e:32:2b:9f:68:31:20:63:1c:33:55:45:28:44:
23:82:f8:25:78:20:f0:39:18:80:9f:52:dc:88:b6:81:0a:af:
05:d1:c0:f6:34:b8:60:ff:11:69:8b:24:60:e7:89:cc:82:82:
c9:c4:d4:36:98:ee:67:79:b4:2a:86:4b:4d:fe:b9:44:58:5b:
3b:0e:65:41:38:f1:50:e8:61:b2:3c:47:3d:98:f8:69:61:ea:
18:ee:9f:af:b9:92:e6:f3:1b:99:59:14:26:78:07:5e:10:3d:
77:25:dd:a9:e7:8a:13:0c:74:36:21:3c:cd:2c:8f:f6:62:49:
7d:ac:97:20:2e:5e:95:3f:a1:70:89:f5:95:da:2f:b1:18:fb:
b9:e1:98:bb
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUbKBJ37v/SqAzXPabKjQoYopxzagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNDA2MzAxMjEwMjBaFw0yNTA2MjkxMjE1MjBaMDMxMTAvBgNV
BAMTKEM1MDZERUMwODM1NzcxRjVBNUEyNUIzMjk4NUYwMkNGNUVBM0NFQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGl083i6KR+1gNCPH8ACBiYtec
g0YX8uqz3/SoZlNVAWebHYzHK/IAA2OLdifpbqhrn3zBxHVy50R+40kio7MU4ouD
HYFYXRXK1hs0UBdYz3+CVtOLYhPzT8pFr22YGQFA+eTV53x6oJqn66BKw4eLY23c
kZPoPRIVJ6sFnQV954qP0FwwMTQKMFeAmZYFaSmdCu5xbJjPuMefFDH/CwC2hsnD
tj1e6bTgLlMDBj6uMtYF1sjrUEiysAjC5fRl6fnirpWq2tHTdV5c2H/se4Q9eV4E
EIPx9VzwL6aESo2zYblubNA3bgaFZhq0ug7JO7UZ0/6glfffwX0y3zO3drvvAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUxQbewINXcfWlolsymF8Cz16jzsQwHwYDVR0j
BBgwFoAUCDmpPatUTClv+hQ0VoRKiygYsdAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGRlODM3ZmItNjM5MC00MWI1LTgyYTAtZjBkMDJjMDNh
MmM2LzcvMDgzOUE5M0RBQjU0NEMyOTZGRkExNDM0NTY4NDRBOEIyODE4QjFEMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NEbXBQYXRVVENsdi1oUTBWb1JLaXln
WXNkQS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGRlODM3ZmIt
NjM5MC00MWI1LTgyYTAtZjBkMDJjMDNhMmM2LzcvMzI2MTMxMzEzYTY2MzI2MzMw
M2E2NjY2NjM2MzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNTM3MzYzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoR8sD/zDANBgkqhkiG9w0BAQsFAAOCAQEAsLe0N2VhZoJ5oUVO
B4jb8CZpAr13eC5NYJ0+/9j9b1pEe2YG2SfHa1aCG1qyp6kQYrmhOytrg74TnIDK
oy0A1ZH/Yt74XlJa4yPVc6gSMzg1J2U2ul6vdXrIzYwKm/6JH35Bxn1Pd5R7zLXw
8uvE3Y4yK59oMSBjHDNVRShEI4L4JXgg8DkYgJ9S3Ii2gQqvBdHA9jS4YP8RaYsk
YOeJzIKCycTUNpjuZ3m0KoZLTf65RFhbOw5lQTjxUOhhsjxHPZj4aWHqGO6fr7mS
5vMbmVkUJngHXhA9dyXdqeeKEwx0NiE8zSyP9mJJfayXIC5elT+hcIn1ldovsRj7
ueGYuw==
-----END CERTIFICATE-----
Generated at Sun Jul 7 21:11:39 2024 by rpki-client on console-ams.rpki-client.org