Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa
File: 326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa (raw, json)
Hash identifier: s80Fh0etv3Jm3CSCnmlJEIgw3zTc9uFSxJsrhERo1cE=
Subject key identifier: DD:78:92:0D:1D:F7:08:12:40:A9:BA:4E:9B:14:18:4C:BA:19:89:D7
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 1194A750906F8949D20C98B524BF516B3E7C236D
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa
Signing time: Sun 30 Jun 2024 12:15:21 +0000
ROA not before: Sun 30 Jun 2024 12:10:21 +0000
ROA not after: Sun 29 Jun 2025 12:15:21 +0000
asID: 215069
IP address blocks: 2a11:f2c0:ffd0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:25:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:94:a7:50:90:6f:89:49:d2:0c:98:b5:24:bf:51:6b:3e:7c:23:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:21 2024 GMT
Not After : Jun 29 12:15:21 2025 GMT
Subject: CN=DD78920D1DF7081240A9BA4E9B14184CBA1989D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c0:33:d6:58:a0:8d:e2:20:bd:19:2d:90:74:
42:16:cb:39:27:52:24:8f:82:87:95:31:03:af:3c:
3b:c5:28:f0:0f:d8:fa:32:66:94:f2:10:b4:c1:84:
99:20:0e:b5:4d:d8:58:78:69:20:35:02:b1:46:ee:
1a:95:9d:18:ee:d4:56:58:d6:9e:13:4f:ee:03:fc:
97:97:fa:47:d8:36:1a:ee:b1:e5:d5:f3:9a:cc:a5:
4a:8a:f9:bb:58:f7:c5:b3:d4:e9:7d:3a:84:cf:ed:
bd:41:c9:38:8e:1f:9c:53:ad:a8:64:cd:4e:0e:a8:
89:ef:bf:74:16:f7:1a:69:6e:08:71:6e:f7:7b:b6:
f3:48:90:3e:b9:02:da:21:e7:f7:73:9a:c9:bb:94:
83:79:60:71:02:50:d7:59:ec:46:18:e9:8c:5c:44:
32:57:99:c2:a5:31:e7:39:cb:9a:a3:2a:65:5b:15:
8f:d2:8b:0c:ec:6c:9b:4b:a9:c7:0c:23:41:18:43:
02:c2:77:5d:64:b7:58:36:fd:d2:83:dd:20:44:ac:
da:63:1e:7d:5c:4f:57:6d:b3:cb:21:4d:2a:0e:9a:
a0:9b:07:34:36:1c:da:28:e2:d4:77:af:7b:c4:d7:
10:f3:fc:e4:df:1b:3b:fe:4b:d9:57:bb:67:a1:03:
f6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:78:92:0D:1D:F7:08:12:40:A9:BA:4E:9B:14:18:4C:BA:19:89:D7
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffd0::/48
Signature Algorithm: sha256WithRSAEncryption
54:bd:3e:cb:46:94:3f:ef:cf:e2:5f:d4:16:6d:fe:ee:11:03:
b4:6f:e5:00:ca:43:d4:88:9f:0a:32:e7:c8:89:b5:e8:83:47:
d4:01:c5:72:a8:11:4b:11:fc:83:9e:de:03:f3:02:89:0b:f8:
87:1a:73:d1:8f:5d:3e:b5:15:69:b3:a4:ff:18:6a:46:68:c5:
4d:ae:81:f6:c0:a8:76:87:a7:de:bc:f3:d1:73:ff:da:65:42:
df:83:9f:f7:87:d2:e6:20:c1:80:88:b6:69:1d:8e:88:09:51:
02:10:f4:64:92:23:f7:50:4d:7e:9a:13:66:31:14:d4:db:5a:
de:b4:0f:01:50:14:fc:b2:3b:cf:34:8f:54:1e:0d:4c:5c:6c:
83:36:c0:16:95:b4:2f:1d:70:35:26:e0:da:8c:c7:7e:17:49:
76:35:84:a7:5e:c0:6a:79:d2:42:13:1a:81:d0:0e:82:56:c7:
8b:70:61:90:fd:8e:20:08:a6:37:9b:58:33:9b:3c:69:0e:61:
e2:15:a9:cf:1e:30:eb:7d:19:fc:44:98:f4:fd:49:51:3a:25:
20:c4:b3:b9:69:ed:d5:83:64:d8:dc:ea:63:46:ef:4c:ef:fd:
ea:fb:ec:2b:0b:69:98:39:ca:36:e2:2f:dc:4a:67:56:f9:44:
a6:6a:a5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:03:40 2024 by rpki-client on console-fra.rpki-client.org