Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663653a3a2f34382d3438203d3e20323135343939.roa
File: 326131313a663263303a666663653a3a2f34382d3438203d3e20323135343939.roa (raw, json)
Hash identifier: JCkXRYiaVjOCJaKBCTHLeIZ5b067rADmh3c7lufQEko=
Subject key identifier: 94:99:11:3D:DA:D2:92:10:81:73:2F:E6:D9:E3:C6:8B:54:EB:10:53
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 5D8E0DC11FEEC118AFE476C922CE88E2D05774CB
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663653a3a2f34382d3438203d3e20323135343939.roa
Signing time: Sun 30 Jun 2024 12:15:20 +0000
ROA not before: Sun 30 Jun 2024 12:10:20 +0000
ROA not after: Sun 29 Jun 2025 12:15:20 +0000
asID: 215499
IP address blocks: 2a11:f2c0:ffce::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:8e:0d:c1:1f:ee:c1:18:af:e4:76:c9:22:ce:88:e2:d0:57:74:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:20 2024 GMT
Not After : Jun 29 12:15:20 2025 GMT
Subject: CN=9499113DDAD2921081732FE6D9E3C68B54EB1053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:0d:4d:6d:55:4e:39:39:73:4e:8d:0f:0e:
ac:b5:95:87:b0:60:9f:73:48:64:8a:6f:28:b3:c5:
d0:1f:c3:d7:28:10:a4:4c:6a:e6:71:8c:e7:e2:f7:
8f:b3:ed:63:6b:34:76:9c:23:e3:84:b8:1c:16:fd:
39:5b:aa:d5:12:53:63:3d:91:03:f1:ad:47:68:22:
cf:f5:3c:7c:cc:57:4c:df:ce:e3:98:fe:47:2d:d8:
ed:4a:01:57:10:17:77:07:91:60:97:86:65:ab:ae:
24:94:46:3a:5a:f2:de:18:c1:b9:39:a3:b7:46:0e:
f6:cc:17:ad:e6:aa:40:a8:ab:61:94:dc:60:9e:8e:
1a:8c:21:97:1f:fd:4e:ee:34:bc:cd:4c:69:a8:7b:
f0:74:82:6d:c0:61:bc:88:57:ed:f3:50:29:cb:63:
d6:fe:f8:42:63:a5:74:41:58:d2:ac:ac:16:5a:21:
cb:41:4f:9f:92:ec:c2:87:75:82:77:8a:84:57:ab:
c2:31:eb:5b:c7:48:f1:87:50:6e:de:1b:15:48:ce:
97:fb:98:a1:8c:f8:2b:1c:3b:a7:dd:b2:da:e1:d5:
2d:05:d5:80:33:ff:7c:cb:c4:97:42:9c:7c:9a:03:
50:65:3b:89:3a:5e:39:6a:fd:b4:40:db:e6:89:a0:
a6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:99:11:3D:DA:D2:92:10:81:73:2F:E6:D9:E3:C6:8B:54:EB:10:53
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663653a3a2f34382d3438203d3e20323135343939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffce::/48
Signature Algorithm: sha256WithRSAEncryption
b2:31:46:54:2b:b9:66:04:d0:7b:03:37:60:3d:c1:c6:b7:26:
35:18:50:cd:43:e8:e7:59:5e:58:bb:92:06:b5:7b:56:8d:00:
ca:6f:db:93:c6:81:92:d2:ed:b5:b5:74:c4:cf:80:53:3e:b9:
48:18:10:62:be:e9:01:d6:7f:a9:08:5d:ac:b1:1f:47:7b:da:
86:e3:97:25:c9:1c:f6:b9:96:99:f6:63:84:d8:ea:ca:1c:fa:
30:2f:47:2a:77:6c:52:f1:ce:e0:e0:14:ee:38:c1:a0:6e:7f:
60:84:9a:0c:3f:f6:cc:62:7f:56:15:b7:f1:98:b2:1d:74:a9:
d4:82:0e:df:7c:04:c3:3b:3c:9d:71:d1:b2:02:83:9f:56:5a:
11:63:34:f6:00:64:2f:1e:bb:75:47:54:90:2b:97:76:8a:12:
6b:1c:d0:cd:83:1b:4b:ec:bd:38:ed:0d:bb:7c:9c:9e:fc:7c:
d9:1f:5d:f7:f7:a0:b0:1d:1a:78:ab:f2:57:1b:85:79:4e:f0:
35:bc:3f:bd:2a:6e:b1:3b:3e:2d:70:b6:ef:08:2c:13:65:a8:
f6:30:23:63:25:cb:bc:52:1e:ee:1b:ea:ae:a1:d9:74:5e:de:
fc:fb:97:3a:3d:7b:50:fc:58:42:43:e7:69:05:03:1c:3f:55:
6d:8a:d7:88
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUXY4NwR/uwRiv5HbJIs6I4tBXdMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNDA2MzAxMjEwMjBaFw0yNTA2MjkxMjE1MjBaMDMxMTAvBgNV
BAMTKDk0OTkxMTNEREFEMjkyMTA4MTczMkZFNkQ5RTNDNjhCNTRFQjEwNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM1Q1NbVVOOTlzTo0PDqy1lYew
YJ9zSGSKbyizxdAfw9coEKRMauZxjOfi94+z7WNrNHacI+OEuBwW/TlbqtUSU2M9
kQPxrUdoIs/1PHzMV0zfzuOY/kct2O1KAVcQF3cHkWCXhmWrriSURjpa8t4Ywbk5
o7dGDvbMF63mqkCoq2GU3GCejhqMIZcf/U7uNLzNTGmoe/B0gm3AYbyIV+3zUCnL
Y9b++EJjpXRBWNKsrBZaIctBT5+S7MKHdYJ3ioRXq8Ix61vHSPGHUG7eGxVIzpf7
mKGM+CscO6fdstrh1S0F1YAz/3zLxJdCnHyaA1BlO4k6Xjlq/bRA2+aJoKaFAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUlJkRPdrSkhCBcy/m2ePGi1TrEFMwHwYDVR0j
BBgwFoAUCDmpPatUTClv+hQ0VoRKiygYsdAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGRlODM3ZmItNjM5MC00MWI1LTgyYTAtZjBkMDJjMDNh
MmM2LzcvMDgzOUE5M0RBQjU0NEMyOTZGRkExNDM0NTY4NDRBOEIyODE4QjFEMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NEbXBQYXRVVENsdi1oUTBWb1JLaXln
WXNkQS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGRlODM3ZmIt
NjM5MC00MWI1LTgyYTAtZjBkMDJjMDNhMmM2LzcvMzI2MTMxMzEzYTY2MzI2MzMw
M2E2NjY2NjM2NTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNTM0MzkzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoR8sD/zjANBgkqhkiG9w0BAQsFAAOCAQEAsjFGVCu5ZgTQewM3
YD3BxrcmNRhQzUPo51leWLuSBrV7Vo0Aym/bk8aBktLttbV0xM+AUz65SBgQYr7p
AdZ/qQhdrLEfR3vahuOXJckc9rmWmfZjhNjqyhz6MC9HKndsUvHO4OAU7jjBoG5/
YISaDD/2zGJ/VhW38ZiyHXSp1IIO33wEwzs8nXHRsgKDn1ZaEWM09gBkLx67dUdU
kCuXdooSaxzQzYMbS+y9OO0Nu3ycnvx82R9d9/egsB0aeKvyVxuFeU7wNbw/vSpu
sTs+LXC27wgsE2Wo9jAjYyXLvFIe7hvqrqHZdF7e/PuXOj17UPxYQkPnaQUDHD9V
bYrXiA==
-----END CERTIFICATE-----
Generated at Sun Jul 7 21:03:40 2024 by rpki-client on console-fra.rpki-client.org