Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa
File: 326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (raw, json)
Hash identifier: giHTKGa7mymZMwMZY80GrhGTRIn1pYHCltWTwS8x9+E=
Subject key identifier: 4B:CB:45:76:EF:6B:39:CE:38:B3:07:F2:88:58:4E:E5:9F:DA:7B:3D
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 496E1E72D4E56ACED594E0A8C66E691F59D92F9D
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa
Signing time: Sun 30 Jun 2024 12:15:18 +0000
ROA not before: Sun 30 Jun 2024 12:10:18 +0000
ROA not after: Sun 29 Jun 2025 12:15:18 +0000
asID: 215069
IP address blocks: 2a11:f2c0:ffde::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:27:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:6e:1e:72:d4:e5:6a:ce:d5:94:e0:a8:c6:6e:69:1f:59:d9:2f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:18 2024 GMT
Not After : Jun 29 12:15:18 2025 GMT
Subject: CN=4BCB4576EF6B39CE38B307F288584EE59FDA7B3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e3:f5:2f:a8:44:a5:e5:f1:84:8d:46:e0:fd:
c8:cf:be:4d:eb:3b:3d:c4:6c:dd:ef:4b:34:dc:c7:
5f:88:a7:f6:4d:ae:94:10:1a:fd:b3:0c:e2:97:f5:
c2:d1:5c:9f:27:6d:35:be:29:8e:ed:6d:88:35:77:
e5:30:e7:89:6f:10:fc:f0:8b:d1:ff:c3:30:db:0f:
44:fe:0f:38:e5:e7:81:c5:a2:ad:b9:e5:56:58:97:
c9:da:33:44:49:2e:28:e5:af:2e:3b:a8:c8:dc:fe:
98:c0:95:59:8e:bd:9b:40:39:86:e5:e6:69:74:66:
0f:64:26:3d:90:60:c3:b1:fe:c7:fb:b9:0f:4f:51:
dd:fd:02:6b:88:52:90:12:5c:ec:84:c1:0a:84:91:
13:01:ef:86:e9:32:93:2a:b6:ce:eb:75:35:57:58:
a2:54:2a:91:a3:46:77:c8:d5:8d:67:dd:93:6e:14:
ce:11:ec:53:59:62:61:ae:1f:f5:f0:61:af:3b:91:
ba:2f:8d:db:07:3d:02:c0:b5:f5:c8:40:1b:1e:db:
cd:9c:18:97:1e:71:b4:45:4e:76:bb:26:23:83:62:
5c:1e:b0:ea:12:0f:c7:9a:74:fa:9a:64:b5:53:81:
03:da:bc:35:cc:5e:f1:c2:37:90:06:c1:c7:0a:e5:
95:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CB:45:76:EF:6B:39:CE:38:B3:07:F2:88:58:4E:E5:9F:DA:7B:3D
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffde::/48
Signature Algorithm: sha256WithRSAEncryption
5f:f3:0c:9c:36:6d:06:64:0b:f5:e9:d1:0a:64:fa:f0:35:40:
9d:0f:4b:59:48:65:cb:78:77:ef:e1:ae:e7:c5:2f:24:31:26:
d5:2e:e2:fb:b7:71:1d:ad:a6:2b:cb:29:4b:f7:c1:19:ad:38:
83:a0:83:72:1a:77:f7:d9:d0:ae:98:89:f4:53:c5:63:e9:de:
2a:bc:b2:b5:ff:ee:90:36:32:2e:0e:c3:d6:f2:3a:81:b9:05:
57:98:6c:5c:b1:1e:5e:36:f3:3b:0b:13:f2:6b:28:ba:38:11:
c3:5a:21:4f:19:b8:70:19:46:64:6e:fc:1d:47:6e:9d:e0:d5:
b7:24:65:64:92:91:a7:e4:c5:16:8a:13:32:82:61:7b:ea:42:
c9:e4:1a:67:48:43:bd:63:b9:2f:3e:f8:be:45:cb:db:86:33:
5a:4f:2d:e5:82:b1:93:1e:03:52:5a:cd:1f:ec:f3:3c:22:37:
1b:30:f2:bc:dc:29:97:bf:8d:c5:a1:29:24:b0:87:ad:f2:27:
f1:ec:c6:01:b1:d2:75:22:92:9e:ec:62:b5:f6:9b:f2:52:e7:
fb:01:f3:43:df:4d:fd:b3:5a:26:60:d4:57:de:c9:1a:e6:42:
46:3c:11:ef:c2:4a:f6:ad:ca:11:2b:2f:04:b5:f0:8b:cb:f0:
32:ee:20:30
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUSW4ectTlas7VlOCoxm5pH1nZL50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNDA2MzAxMjEwMThaFw0yNTA2MjkxMjE1MThaMDMxMTAvBgNV
BAMTKDRCQ0I0NTc2RUY2QjM5Q0UzOEIzMDdGMjg4NTg0RUU1OUZEQTdCM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP4/UvqESl5fGEjUbg/cjPvk3r
Oz3EbN3vSzTcx1+Ip/ZNrpQQGv2zDOKX9cLRXJ8nbTW+KY7tbYg1d+Uw54lvEPzw
i9H/wzDbD0T+Dzjl54HFoq255VZYl8naM0RJLijlry47qMjc/pjAlVmOvZtAOYbl
5ml0Zg9kJj2QYMOx/sf7uQ9PUd39AmuIUpASXOyEwQqEkRMB74bpMpMqts7rdTVX
WKJUKpGjRnfI1Y1n3ZNuFM4R7FNZYmGuH/XwYa87kbovjdsHPQLAtfXIQBse282c
GJcecbRFTna7JiODYlwesOoSD8eadPqaZLVTgQPavDXMXvHCN5AGwccK5ZVRAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUS8tFdu9rOc44swfyiFhO5Z/aez0wHwYDVR0j
BBgwFoAUCDmpPatUTClv+hQ0VoRKiygYsdAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGRlODM3ZmItNjM5MC00MWI1LTgyYTAtZjBkMDJjMDNh
MmM2LzcvMDgzOUE5M0RBQjU0NEMyOTZGRkExNDM0NTY4NDRBOEIyODE4QjFEMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NEbXBQYXRVVENsdi1oUTBWb1JLaXln
WXNkQS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGRlODM3ZmIt
NjM5MC00MWI1LTgyYTAtZjBkMDJjMDNhMmM2LzcvMzI2MTMxMzEzYTY2MzI2MzMw
M2E2NjY2NjQ2NTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNTMwMzYzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoR8sD/3jANBgkqhkiG9w0BAQsFAAOCAQEAX/MMnDZtBmQL9enR
CmT68DVAnQ9LWUhly3h37+Gu58UvJDEm1S7i+7dxHa2mK8spS/fBGa04g6CDchp3
99nQrpiJ9FPFY+neKryytf/ukDYyLg7D1vI6gbkFV5hsXLEeXjbzOwsT8msoujgR
w1ohTxm4cBlGZG78HUduneDVtyRlZJKRp+TFFooTMoJhe+pCyeQaZ0hDvWO5Lz74
vkXL24YzWk8t5YKxkx4DUlrNH+zzPCI3GzDyvNwpl7+NxaEpJLCHrfIn8ezGAbHS
dSKSnuxitfab8lLn+wHzQ99N/bNaJmDUV97JGuZCRjwR78JK9q3KESsvBLXwi8vw
Mu4gMA==
-----END CERTIFICATE-----
Generated at Sun Jul 7 21:03:41 2024 by rpki-client on console-fra.rpki-client.org