Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa
File: 326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa (raw, json)
Hash identifier: et5dEm0B1pTd3JCFBNqmGca4teIFmlXlq9O20S4EwOI=
Subject key identifier: 7C:F5:FE:6F:1A:AB:D3:E3:A9:5D:3B:B8:08:37:03:B1:09:32:43:0C
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 30928CB6A010FEE90986EA78ECBDACFC1670247D
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa
Signing time: Sun 30 Jun 2024 12:15:19 +0000
ROA not before: Sun 30 Jun 2024 12:10:19 +0000
ROA not after: Sun 29 Jun 2025 12:15:19 +0000
asID: 203024
IP address blocks: 2a11:f2c0:fff0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:92:8c:b6:a0:10:fe:e9:09:86:ea:78:ec:bd:ac:fc:16:70:24:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:19 2024 GMT
Not After : Jun 29 12:15:19 2025 GMT
Subject: CN=7CF5FE6F1AABD3E3A95D3BB8083703B10932430C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:00:40:5a:1e:af:f8:29:76:69:7a:96:8b:
0b:a1:36:9f:7a:94:69:05:08:02:17:68:71:e8:92:
80:10:91:a0:64:dd:cb:24:0e:35:86:e5:2a:82:69:
db:66:5e:91:94:de:1b:05:4b:22:e0:c7:8d:c8:0d:
91:d5:de:84:9e:f9:91:b1:3d:fe:d5:5a:02:95:fa:
1a:4f:5a:fb:a6:e7:e4:f8:b1:8b:1f:d1:92:71:fe:
dd:26:5e:62:9c:f8:a7:be:a5:a0:38:78:3c:16:11:
1a:bb:9f:29:21:51:a9:d9:04:b7:66:3b:83:09:ad:
57:9f:4e:14:90:29:57:83:b7:eb:15:7e:23:8f:3b:
33:b4:6e:ef:61:4d:f0:3b:40:27:da:ad:50:a4:a7:
de:91:bd:cb:30:a2:6b:ee:c8:9f:03:54:97:84:8e:
3f:15:7c:88:ed:51:e6:3a:8b:ec:26:b0:33:76:29:
7f:5d:10:dd:f5:1f:31:2c:53:c2:51:34:f6:62:df:
29:de:1c:9e:b7:91:d2:09:f8:36:b8:3d:11:5b:0a:
fe:1f:b4:1e:69:66:12:e7:21:3a:7c:a5:7b:b4:ea:
81:30:76:e5:34:9f:70:09:7c:53:36:4f:04:5f:0a:
c2:7b:55:22:c5:85:51:e1:eb:f2:10:fd:9d:5d:b6:
8f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F5:FE:6F:1A:AB:D3:E3:A9:5D:3B:B8:08:37:03:B1:09:32:43:0C
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fff0::/48
Signature Algorithm: sha256WithRSAEncryption
39:2e:69:6c:2e:03:7e:c7:a6:eb:19:7a:5d:06:6c:e0:38:2b:
10:4b:0e:39:2a:73:4e:2a:0a:2f:91:3c:ab:63:e4:e6:56:18:
e0:c2:c3:fa:13:e3:ef:a0:c2:89:d3:c4:79:90:09:47:88:0c:
e6:53:99:a3:fd:97:d1:9b:9b:d9:7b:c1:29:f1:71:08:ca:96:
7c:67:71:77:63:b4:fb:24:fc:30:07:19:3b:00:e5:e4:79:2d:
d4:6e:4b:24:19:24:44:fe:5c:69:33:a8:39:9d:d9:23:11:f7:
03:26:d6:93:96:06:82:52:43:42:1a:7a:9a:ef:60:25:2b:32:
9e:a7:10:6d:a0:87:31:0a:55:0c:1c:77:7b:7f:17:e9:2c:69:
73:e6:80:39:b0:82:07:6c:11:ba:15:53:23:84:4f:b5:da:0e:
fa:a0:65:37:97:05:ae:c4:36:25:c8:4a:eb:d1:53:cd:4a:4a:
af:e8:c5:3a:89:18:1c:82:95:64:00:21:8f:39:01:fb:51:e2:
c0:e6:16:c3:a0:e7:c7:e5:32:4a:e2:bc:28:7a:de:1b:fc:09:
05:00:86:0a:60:84:0d:0d:55:9b:70:74:6a:28:0b:9f:01:28:
9a:b8:ed:e9:df:d1:cd:7a:b2:82:c4:ae:5c:8f:ad:c7:67:7f:
09:9f:a6:0e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUMJKMtqAQ/ukJhup47L2s/BZwJH0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNDA2MzAxMjEwMTlaFw0yNTA2MjkxMjE1MTlaMDMxMTAvBgNV
BAMTKDdDRjVGRTZGMUFBQkQzRTNBOTVEM0JCODA4MzcwM0IxMDkzMjQzMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwRQBAWh6v+Cl2aXqWiwuhNp96
lGkFCAIXaHHokoAQkaBk3cskDjWG5SqCadtmXpGU3hsFSyLgx43IDZHV3oSe+ZGx
Pf7VWgKV+hpPWvum5+T4sYsf0ZJx/t0mXmKc+Ke+paA4eDwWERq7nykhUanZBLdm
O4MJrVefThSQKVeDt+sVfiOPOzO0bu9hTfA7QCfarVCkp96RvcswomvuyJ8DVJeE
jj8VfIjtUeY6i+wmsDN2KX9dEN31HzEsU8JRNPZi3yneHJ63kdIJ+Da4PRFbCv4f
tB5pZhLnITp8pXu06oEwduU0n3AJfFM2TwRfCsJ7VSLFhVHh6/IQ/Z1dto8TAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUfPX+bxqr0+OpXTu4CDcDsQkyQwwwHwYDVR0j
BBgwFoAUCDmpPatUTClv+hQ0VoRKiygYsdAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGRlODM3ZmItNjM5MC00MWI1LTgyYTAtZjBkMDJjMDNh
MmM2LzcvMDgzOUE5M0RBQjU0NEMyOTZGRkExNDM0NTY4NDRBOEIyODE4QjFEMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NEbXBQYXRVVENsdi1oUTBWb1JLaXln
WXNkQS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGRlODM3ZmIt
NjM5MC00MWI1LTgyYTAtZjBkMDJjMDNhMmM2LzcvMzI2MTMxMzEzYTY2MzI2MzMw
M2E2NjY2NjYzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzMzMwMzIzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoR8sD/8DANBgkqhkiG9w0BAQsFAAOCAQEAOS5pbC4Dfsem6xl6
XQZs4DgrEEsOOSpzTioKL5E8q2Pk5lYY4MLD+hPj76DCidPEeZAJR4gM5lOZo/2X
0Zub2XvBKfFxCMqWfGdxd2O0+yT8MAcZOwDl5Hkt1G5LJBkkRP5caTOoOZ3ZIxH3
AybWk5YGglJDQhp6mu9gJSsynqcQbaCHMQpVDBx3e38X6Sxpc+aAObCCB2wRuhVT
I4RPtdoO+qBlN5cFrsQ2JchK69FTzUpKr+jFOokYHIKVZAAhjzkB+1HiwOYWw6Dn
x+UySuK8KHreG/wJBQCGCmCEDQ1Vm3B0aigLnwEomrjt6d/RzXqygsSuXI+tx2d/
CZ+mDg==
-----END CERTIFICATE-----
Generated at Sun Jul 7 21:03:41 2024 by rpki-client on console-fra.rpki-client.org