Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa
File: 326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (raw, json)
Hash identifier: +JdOTQeN4/NRYmUZhbFo/JynutjsMXLM0V2X/SLso24=
Subject key identifier: 23:6C:A6:A4:43:18:9B:E3:16:C7:1F:27:DB:75:46:E8:5C:16:08:13
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 0206D2FAEC9E7F736C3452E41544BA97AAD66843
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa
Signing time: Sun 30 Jun 2024 12:15:20 +0000
ROA not before: Sun 30 Jun 2024 12:10:20 +0000
ROA not after: Sun 29 Jun 2025 12:15:20 +0000
asID: 215069
IP address blocks: 2a11:f2c0:ffdc::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:06:d2:fa:ec:9e:7f:73:6c:34:52:e4:15:44:ba:97:aa:d6:68:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:20 2024 GMT
Not After : Jun 29 12:15:20 2025 GMT
Subject: CN=236CA6A443189BE316C71F27DB7546E85C160813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4c:91:ee:87:19:72:4e:46:10:8d:22:16:f6:
e9:c0:8f:69:1d:a9:a6:71:54:a7:04:33:25:15:d2:
0d:64:d3:a5:22:73:50:d8:8b:09:cf:c7:2e:bb:d4:
eb:f1:d8:fd:ba:2d:a6:66:26:32:6c:9b:2a:3c:13:
32:f7:0f:fe:2d:9d:74:de:bd:c3:0b:18:17:0a:f3:
5d:0a:df:13:f6:d5:fa:49:d3:d3:91:66:3e:a5:4f:
03:cd:e9:c0:59:8d:5a:42:cb:6c:0f:13:97:ba:7e:
25:5d:05:73:2f:8d:ab:0c:15:d5:db:e9:45:ac:63:
18:0d:ee:7d:e2:f2:b3:3c:12:29:22:51:92:79:3e:
01:42:c9:a3:af:5f:f5:6e:16:f7:69:33:f7:c4:33:
fb:5e:a6:ce:ef:fb:86:be:c9:49:1f:bf:e7:7c:44:
e9:a3:08:67:87:4e:d8:17:3b:e9:e2:35:6b:92:7e:
05:99:02:25:9a:c5:e7:2b:82:4c:7c:0b:de:4d:94:
c4:ba:20:99:da:c4:01:e1:56:10:04:53:ad:46:aa:
cc:a2:a0:8e:e8:20:26:6b:04:3a:92:6d:dd:76:5d:
4c:61:a3:c7:63:d0:86:61:c4:19:67:47:83:15:07:
3c:f0:a7:4c:42:2e:05:e9:30:c1:19:db:55:34:67:
11:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6C:A6:A4:43:18:9B:E3:16:C7:1F:27:DB:75:46:E8:5C:16:08:13
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffdc::/48
Signature Algorithm: sha256WithRSAEncryption
b8:43:24:08:d9:cd:17:7d:c9:4d:2f:5a:9c:c1:99:ef:99:36:
88:7e:08:6e:50:bf:03:8c:b2:65:74:b6:0c:0a:c1:b8:b9:bc:
49:eb:09:85:4c:52:fa:c8:f1:a1:9b:0e:9f:3b:41:11:d7:22:
d0:25:52:3b:4b:e2:8b:52:3a:f0:62:95:52:83:7d:b2:b4:9f:
5e:1d:e7:1f:2f:e4:97:18:58:84:d4:14:4e:06:46:b2:a1:37:
56:8c:80:c1:cc:2a:7c:35:e0:55:6a:d1:56:f1:2d:72:d5:76:
8a:ba:2c:f2:21:ce:6a:72:23:10:e2:f9:7d:be:1d:3a:a8:b9:
e5:1e:91:a4:16:4f:1f:54:0c:8c:29:4a:48:53:2f:a3:48:5a:
77:6b:79:df:aa:bb:12:3c:db:52:22:cd:86:c6:54:ce:10:3a:
6c:a1:f8:79:4a:9b:d2:1e:94:61:09:11:a0:58:92:9d:18:69:
ee:90:e4:46:4a:39:a4:f9:0e:61:15:ff:b3:9e:ee:8b:b0:56:
4c:4a:6a:f4:80:68:81:83:01:a3:f5:f9:45:57:3f:f2:b5:43:
08:f2:3a:06:6c:56:c7:5f:b4:83:ac:5c:8f:4c:fb:90:6b:59:
93:28:03:e7:5e:df:cd:b7:28:e3:b1:b8:d8:f9:9d:bd:1b:cd:
3f:ff:ca:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:11:39 2024 by rpki-client on console-ams.rpki-client.org