Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa
File: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (raw, json)
Hash identifier: E4+b2APkPrxwF/agH23PhpYHDTr0+udztpnZZiU9Ugw=
Subject key identifier: B1:15:86:79:C3:E9:0A:6C:1F:49:B7:7D:5B:A1:CD:0F:32:56:E3:D9
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 4E34CAB901787EA0EDD2680C347E1A5D029D7706
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa
Signing time: Sun 30 Jun 2024 12:15:22 +0000
ROA not before: Sun 30 Jun 2024 12:10:22 +0000
ROA not after: Sun 29 Jun 2025 12:15:22 +0000
asID: 215069
IP address blocks: 2a11:f2c0:ffd4::/46 maxlen: 46
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:25:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:34:ca:b9:01:78:7e:a0:ed:d2:68:0c:34:7e:1a:5d:02:9d:77:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:22 2024 GMT
Not After : Jun 29 12:15:22 2025 GMT
Subject: CN=B1158679C3E90A6C1F49B77D5BA1CD0F3256E3D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:0a:d8:9a:db:4d:76:72:b7:11:d3:1d:e1:
9f:7c:8d:e4:6d:11:b9:06:12:98:ab:b5:53:46:6b:
2c:6d:92:b1:3a:5b:13:4b:c9:4e:eb:24:db:ac:7a:
2f:bf:15:c0:5d:0d:c0:3d:40:d1:21:37:ee:1e:e2:
59:5f:67:f1:e6:bc:bc:db:0a:58:7a:51:35:0b:48:
93:01:af:10:1b:aa:f4:fa:eb:8e:25:ff:af:63:ce:
0f:ed:b5:45:73:b3:48:e2:05:e6:ba:d1:79:9d:42:
98:9f:c4:28:46:1e:42:81:15:5e:ef:93:45:55:fd:
c9:dc:a5:65:3e:39:c3:f9:d6:0d:dc:65:16:8d:83:
49:85:6e:8d:7a:c2:18:d2:65:54:5f:14:c5:3b:4c:
c4:2f:70:28:f5:c1:9b:07:4a:ca:aa:e0:7d:ec:cc:
d1:b2:e3:e4:64:96:30:c1:3d:d1:e6:ab:aa:73:a0:
20:a0:47:1d:a9:e5:20:bf:3d:3a:ef:cf:5e:d0:70:
d9:1d:92:59:68:e3:f5:f4:8c:ea:53:59:b0:e2:96:
d9:31:1b:56:6d:96:aa:ca:49:a5:a5:19:a7:0e:a5:
45:d4:b1:44:6a:fa:8e:ca:23:e1:4a:13:8e:2b:38:
25:2b:c6:4b:6b:bb:ef:08:75:e9:43:fc:a0:89:e7:
e0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:15:86:79:C3:E9:0A:6C:1F:49:B7:7D:5B:A1:CD:0F:32:56:E3:D9
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffd4::/46
Signature Algorithm: sha256WithRSAEncryption
42:ce:2a:6b:67:b4:e5:a8:35:48:f1:be:58:25:f6:dc:59:02:
1c:52:20:ec:2b:cb:10:56:39:c3:a9:89:7a:36:7f:06:1e:02:
85:a1:fa:54:30:d9:ff:6b:a6:04:42:7c:b1:50:cd:65:73:b6:
33:7a:be:ef:18:d4:ee:f3:9b:36:09:cc:cc:7a:1e:46:ad:27:
e1:75:06:d1:9c:c9:1f:12:2c:c8:fc:b9:e2:fc:c6:ce:90:d2:
24:ba:5a:21:a8:07:3c:8f:b7:23:86:19:ee:e4:fb:bb:92:5e:
c9:5a:7f:93:94:bb:37:28:06:8d:11:f0:bb:39:35:7f:2c:5b:
cf:70:38:0a:85:db:fc:ac:ba:3b:ad:4b:5e:bc:7f:8c:93:46:
76:f6:6a:a4:98:c8:14:23:71:e3:f4:98:c1:70:cc:1b:e4:60:
bc:c1:1b:c2:07:74:54:4f:f1:03:94:f9:36:d4:86:3a:5d:ad:
a9:42:82:d0:53:69:c3:73:ae:45:6c:cf:75:2f:b1:58:cf:f2:
d2:d3:79:f9:17:8a:1d:83:c9:45:51:5d:f0:f7:47:0d:0c:9b:
ba:6d:c3:8f:c8:2a:80:db:53:52:32:6e:ea:80:03:91:8e:a3:
49:fd:20:ba:13:4d:7c:6f:a9:25:4d:d4:28:ae:63:b9:dc:25:
dd:f0:5a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:03:41 2024 by rpki-client on console-fra.rpki-client.org