Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa
File: 326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa (raw, json)
Hash identifier: KXEy/qYwM3DzWRddCPIEB0tAKHBml1jWQG2qqge44Tw=
Subject key identifier: E7:47:9D:75:29:7A:F6:16:8A:E7:CF:6A:E6:05:B0:F6:51:9D:08:31
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 19C9B65C4F8657A6E6BAACE5D011AD8234698E4F
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa
Signing time: Sun 30 Jun 2024 12:15:22 +0000
ROA not before: Sun 30 Jun 2024 12:10:22 +0000
ROA not after: Sun 29 Jun 2025 12:15:22 +0000
asID: 215069
IP address blocks: 2a11:f2c0:ffd1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:c9:b6:5c:4f:86:57:a6:e6:ba:ac:e5:d0:11:ad:82:34:69:8e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:22 2024 GMT
Not After : Jun 29 12:15:22 2025 GMT
Subject: CN=E7479D75297AF6168AE7CF6AE605B0F6519D0831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f0:89:27:6f:09:ba:e3:fa:fd:01:26:95:32:
4c:d5:fe:15:99:1f:53:18:a2:18:22:e4:30:a1:eb:
d3:57:3d:c5:3e:54:dd:b8:e2:f7:ee:7d:4e:dc:cf:
87:bf:5f:1c:0f:0e:08:ec:99:35:03:24:03:ac:d4:
e5:3f:0d:03:4f:66:c2:85:da:8c:99:8b:e1:af:18:
32:12:7c:2b:b5:9a:c0:e2:bc:c9:fa:9c:17:b6:73:
3a:55:c2:21:9c:12:12:69:d3:c6:01:d3:10:2b:eb:
6f:61:2d:16:75:4c:a3:fc:36:bf:d7:f5:84:c0:97:
ca:a8:56:48:65:68:a9:4f:9f:2b:91:71:93:fe:ab:
12:a4:ab:ea:b1:33:2b:06:b5:b9:ba:b8:87:e3:83:
d6:1c:08:44:f5:e4:a7:b2:52:5f:d2:f0:a4:f6:01:
33:70:33:27:bf:2a:26:34:ea:25:4e:b0:fb:e0:07:
2f:7e:03:89:0d:a7:7e:e5:61:e0:83:44:b9:6e:6b:
1d:f3:e1:b2:86:7e:6f:f9:a9:20:dd:f8:2e:d8:a6:
f1:8d:03:25:b3:b8:e3:52:2f:39:9c:ea:85:a1:2d:
ff:af:24:4b:25:15:ee:fe:03:6d:ae:0d:35:e1:0c:
e9:6e:73:31:ed:40:68:66:82:ed:89:63:c5:0a:d1:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:47:9D:75:29:7A:F6:16:8A:E7:CF:6A:E6:05:B0:F6:51:9D:08:31
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffd1::/48
Signature Algorithm: sha256WithRSAEncryption
a6:f3:e7:a0:8b:a4:69:df:e9:5f:67:45:46:f2:e3:a7:aa:31:
44:3a:a0:1d:30:29:96:f5:16:c7:10:a4:19:7f:8c:71:89:a6:
b5:99:6a:ce:66:1a:30:7c:31:5f:19:5b:9b:18:7e:25:d3:ca:
92:a3:c7:cd:79:a0:17:18:f7:f6:34:34:68:43:da:a7:01:ee:
d5:39:d7:aa:48:99:f8:0a:2c:7f:c3:9d:fa:13:18:95:75:9d:
a9:b2:e4:90:24:d3:70:73:ad:28:20:fa:42:30:b2:aa:07:21:
c9:39:60:ba:7d:c0:62:bc:94:72:4f:61:29:7f:6c:42:35:b6:
b0:97:65:37:7b:54:09:39:7b:a0:a0:0e:3e:4f:52:e3:df:39:
f4:1f:ac:7b:45:e7:fd:9a:95:08:63:fb:ff:3c:0b:64:0b:48:
54:56:09:0c:ca:a0:b8:c0:24:ef:5d:37:41:26:0c:5a:e8:c9:
27:3e:15:a6:38:1c:c0:31:7a:91:67:48:d6:06:df:4b:52:c4:
88:d1:ee:5f:36:a0:11:9a:52:f7:c7:95:8f:cc:18:82:ac:f4:
11:43:9a:6e:97:39:e9:57:e9:fe:2e:ec:41:52:a5:50:c9:2e:
4b:4a:9c:51:5c:af:71:00:0f:a3:34:16:d3:ff:5f:1b:2f:ca:
89:3b:e3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:11:39 2024 by rpki-client on console-ams.rpki-client.org