Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663643a3a2f34382d3438203d3e20323135353030.roa
File: 326131313a663263303a666663643a3a2f34382d3438203d3e20323135353030.roa (raw, json)
Hash identifier: PXAt135lZop49LXq2m96hIP5yyXivD2BOqPY21Irbgc=
Subject key identifier: 90:97:BB:2C:3A:55:44:D3:15:C7:F1:93:E1:9B:E1:7E:D5:8E:6E:50
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: B6967BA20A93B25A5ABD8A13A826028B8AAACE
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663643a3a2f34382d3438203d3e20323135353030.roa
Signing time: Sun 30 Jun 2024 12:15:20 +0000
ROA not before: Sun 30 Jun 2024 12:10:20 +0000
ROA not after: Sun 29 Jun 2025 12:15:20 +0000
asID: 215500
IP address blocks: 2a11:f2c0:ffcd::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:23:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
b6:96:7b:a2:0a:93:b2:5a:5a:bd:8a:13:a8:26:02:8b:8a:aa:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:20 2024 GMT
Not After : Jun 29 12:15:20 2025 GMT
Subject: CN=9097BB2C3A5544D315C7F193E19BE17ED58E6E50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:0d:74:74:d4:d8:0e:1f:6b:a1:0e:55:58:
0f:ca:c3:3e:9a:b3:20:18:34:db:94:69:6e:21:dc:
20:5a:1a:7c:ac:19:d8:79:ad:92:d5:fc:86:2e:ee:
dd:a8:5a:79:6e:c8:ee:b3:b1:4e:a3:07:d5:93:a1:
25:ca:72:c0:6f:e7:d7:e8:04:bd:eb:bd:91:eb:fa:
c9:c9:ca:bb:16:e4:8e:9b:4f:a3:f7:cc:a0:c5:77:
a8:a3:c3:e5:1e:4f:ce:aa:75:fa:c7:24:fb:28:83:
97:bd:b6:82:d6:27:35:c1:f2:91:b1:0c:c7:fa:f8:
bb:44:09:f7:a3:3b:31:51:a8:e3:03:0e:6a:e9:1e:
c7:34:23:85:d0:ae:a0:b3:85:8f:7a:48:4e:61:99:
86:a4:59:84:30:8e:52:50:72:d3:65:87:e8:cf:a3:
72:e6:26:7a:c0:d9:bd:8d:94:b7:71:97:f3:8a:c8:
28:14:40:c1:9a:d8:c8:33:40:cc:9b:e5:98:d1:f8:
7c:91:90:0e:68:7f:3f:06:0b:3d:55:f4:48:09:e2:
b7:5c:f6:5a:3f:99:24:93:43:a6:b5:e9:48:69:e4:
b9:55:2b:4e:a0:80:28:69:6e:5b:4e:3a:d1:36:69:
6c:51:f7:7b:0e:bb:f5:83:bb:12:02:a5:15:07:cc:
90:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:97:BB:2C:3A:55:44:D3:15:C7:F1:93:E1:9B:E1:7E:D5:8E:6E:50
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663643a3a2f34382d3438203d3e20323135353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffcd::/48
Signature Algorithm: sha256WithRSAEncryption
18:ce:cb:21:5a:76:c8:4d:74:5d:e9:c3:f4:01:da:1f:94:4a:
ab:6d:45:e4:3b:08:02:7a:fe:c8:26:fb:25:e4:32:3d:e4:28:
2d:e9:d2:5c:ba:12:28:0b:3f:f1:1e:9d:50:bd:e8:85:e3:e4:
95:ca:60:b4:72:49:23:29:78:fd:29:bf:23:b6:c9:f6:3a:b6:
5a:df:93:05:3e:24:96:40:13:d7:f7:4d:5f:d2:d5:55:b3:cf:
a3:28:70:96:5f:9b:4a:c0:53:11:ed:54:6a:87:7a:a5:94:e0:
c4:c8:28:79:2f:b8:58:89:99:bc:89:49:7a:44:d1:98:4d:61:
b3:81:a0:6c:64:14:6a:f7:a5:5f:7c:55:c9:a6:47:39:c1:aa:
ce:e8:85:d8:f7:9e:5f:92:b0:8b:7a:67:60:a3:c9:f0:11:41:
7a:ab:19:39:67:b3:45:8c:91:75:45:2c:0a:a3:cf:dc:72:c4:
4a:c5:8b:a6:28:d4:8d:ed:1b:3a:67:a7:df:77:8f:a1:c0:c6:
ad:81:05:9c:be:ee:64:2e:9d:f1:8b:b5:fa:33:f8:3c:33:11:
4f:ad:c7:ff:02:e5:12:72:a0:b0:f8:99:c0:fc:5f:de:68:83:
f3:96:a1:e2:3d:c8:84:56:17:61:ef:80:42:68:9c:ff:5e:6e:
c2:c1:88:b4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUALaWe6IKk7JaWr2KE6gmAouKqs4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNDA2MzAxMjEwMjBaFw0yNTA2MjkxMjE1MjBaMDMxMTAvBgNV
BAMTKDkwOTdCQjJDM0E1NTQ0RDMxNUM3RjE5M0UxOUJFMTdFRDU4RTZFNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd5A10dNTYDh9roQ5VWA/Kwz6a
syAYNNuUaW4h3CBaGnysGdh5rZLV/IYu7t2oWnluyO6zsU6jB9WToSXKcsBv59fo
BL3rvZHr+snJyrsW5I6bT6P3zKDFd6ijw+UeT86qdfrHJPsog5e9toLWJzXB8pGx
DMf6+LtECfejOzFRqOMDDmrpHsc0I4XQrqCzhY96SE5hmYakWYQwjlJQctNlh+jP
o3LmJnrA2b2NlLdxl/OKyCgUQMGa2MgzQMyb5ZjR+HyRkA5ofz8GCz1V9EgJ4rdc
9lo/mSSTQ6a16Uhp5LlVK06ggChpbltOOtE2aWxR93sOu/WDuxICpRUHzJCdAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUkJe7LDpVRNMVx/GT4ZvhftWOblAwHwYDVR0j
BBgwFoAUCDmpPatUTClv+hQ0VoRKiygYsdAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGRlODM3ZmItNjM5MC00MWI1LTgyYTAtZjBkMDJjMDNh
MmM2LzcvMDgzOUE5M0RBQjU0NEMyOTZGRkExNDM0NTY4NDRBOEIyODE4QjFEMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NEbXBQYXRVVENsdi1oUTBWb1JLaXln
WXNkQS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGRlODM3ZmIt
NjM5MC00MWI1LTgyYTAtZjBkMDJjMDNhMmM2LzcvMzI2MTMxMzEzYTY2MzI2MzMw
M2E2NjY2NjM2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNTM1MzAzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoR8sD/zTANBgkqhkiG9w0BAQsFAAOCAQEAGM7LIVp2yE10XenD
9AHaH5RKq21F5DsIAnr+yCb7JeQyPeQoLenSXLoSKAs/8R6dUL3ohePklcpgtHJJ
Iyl4/Sm/I7bJ9jq2Wt+TBT4klkAT1/dNX9LVVbPPoyhwll+bSsBTEe1Uaod6pZTg
xMgoeS+4WImZvIlJekTRmE1hs4GgbGQUavelX3xVyaZHOcGqzuiF2PeeX5Kwi3pn
YKPJ8BFBeqsZOWezRYyRdUUsCqPP3HLESsWLpijUje0bOmen33ePocDGrYEFnL7u
ZC6d8Yu1+jP4PDMRT63H/wLlEnKgsPiZwPxf3miD85ah4j3IhFYXYe+AQmic/15u
wsGItA==
-----END CERTIFICATE-----
Generated at Sun Jul 7 21:03:40 2024 by rpki-client on console-fra.rpki-client.org