Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666665303a3a2f34342d3438203d3e20323038303531.roa
File: 326131313a663263303a666665303a3a2f34342d3438203d3e20323038303531.roa (raw, json)
Hash identifier: HBUcuQ36oLulyBAz1fIuv1v3DRfNDjqcm6tYrbg1+dE=
Subject key identifier: DC:F0:1A:1D:E6:CD:F8:99:78:03:8B:76:5D:8B:81:2B:A9:AF:D5:9B
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 206E57949A9AF1B5F8D65F0AAFC5E4F5A43AED11
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666665303a3a2f34342d3438203d3e20323038303531.roa
Signing time: Sun 30 Jun 2024 12:15:21 +0000
ROA not before: Sun 30 Jun 2024 12:10:21 +0000
ROA not after: Sun 29 Jun 2025 12:15:21 +0000
asID: 208051
IP address blocks: 2a11:f2c0:ffe0::/44 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:6e:57:94:9a:9a:f1:b5:f8:d6:5f:0a:af:c5:e4:f5:a4:3a:ed:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:21 2024 GMT
Not After : Jun 29 12:15:21 2025 GMT
Subject: CN=DCF01A1DE6CDF89978038B765D8B812BA9AFD59B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:db:31:33:9e:7a:81:d8:f9:ba:f5:8c:8f:a4:
d3:8d:1a:2c:bd:6c:27:bd:5c:bc:e8:09:7f:bc:76:
17:70:69:bd:3a:37:f7:b7:13:69:54:b5:6b:d7:05:
c4:ed:da:01:11:42:80:7e:59:a0:b6:97:89:e3:d4:
33:64:98:e0:a1:d3:e0:8d:db:3e:8c:c5:28:f7:fc:
99:87:02:b8:c2:4b:3b:65:e0:ed:07:2d:6c:2b:07:
49:29:67:11:0c:29:cf:79:de:7c:3c:22:5a:10:14:
be:b2:c1:2c:a0:9f:ec:92:29:0a:51:c5:6b:c3:58:
9a:cb:f9:9f:8e:54:26:83:cc:5f:6a:44:61:da:67:
9c:51:e9:08:39:5b:67:6d:f2:1d:26:04:a5:ad:8e:
b2:b1:d5:b3:2c:1c:1c:1c:c3:25:ee:53:1c:df:6b:
b3:06:82:a2:c3:d5:31:eb:ac:17:35:67:42:b2:53:
ee:79:32:e8:b3:b6:54:c4:b8:65:16:4e:0a:5f:dd:
95:d2:b0:bd:f6:9f:fe:c8:41:58:a6:3d:e7:9e:a9:
2e:a8:10:63:8e:8f:64:3c:07:78:ac:d9:a8:5d:7f:
80:0f:89:20:6d:38:27:07:7a:b4:af:64:47:dd:77:
e0:b1:3e:fb:e3:f5:79:b5:c9:cf:68:e2:e2:d8:43:
3c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F0:1A:1D:E6:CD:F8:99:78:03:8B:76:5D:8B:81:2B:A9:AF:D5:9B
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666665303a3a2f34342d3438203d3e20323038303531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffe0::/44
Signature Algorithm: sha256WithRSAEncryption
a3:26:75:b9:74:10:36:e3:67:13:fd:20:64:25:51:6d:59:bf:
b8:e3:46:e9:1e:65:0b:7c:3e:54:a3:86:20:81:50:11:cf:1e:
a5:a3:47:67:f1:e4:c8:89:1a:ee:36:b4:3a:ec:97:29:98:6c:
16:58:e1:e6:80:e0:d0:ce:0c:77:aa:73:1f:a0:37:ed:f3:d5:
df:c1:2f:8c:13:d7:6b:f8:7c:37:56:0a:97:ba:b2:21:e3:e3:
9f:0b:a9:ce:ad:c9:fe:20:69:d4:24:bd:3b:6d:2b:43:da:9f:
be:1b:67:4d:fa:7e:7e:6c:26:c7:6a:71:7c:9e:58:af:1e:49:
bc:5e:06:53:32:fb:5b:c4:6e:af:64:27:84:78:aa:3b:69:17:
c1:b4:94:b4:b7:4c:aa:21:df:97:6d:8a:cd:ba:a2:0b:44:ce:
e7:1e:73:2b:d8:48:8b:f4:4e:8b:60:57:fb:fe:ef:79:9a:30:
fe:70:81:0e:c4:fd:68:bd:69:b8:72:42:fc:dd:b1:52:36:d1:
95:bc:96:4f:63:7c:28:92:9a:7c:c4:7f:2f:36:ff:d7:2f:5c:
48:96:d9:8e:54:89:05:22:39:ea:85:70:fe:d2:da:4e:a2:42:
ff:01:8b:34:29:40:29:43:b5:60:53:08:34:c7:c7:10:6a:e0:
5d:c6:e1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:03:41 2024 by rpki-client on console-fra.rpki-client.org