Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666313a3a2f34382d3438203d3e20323032353132.roa
File: 326131313a663263303a666666313a3a2f34382d3438203d3e20323032353132.roa (raw, json)
Hash identifier: HSlB6lgGikzT45Zs0muU2tb+l6ywcmGGvnJy1VAxlcY=
Subject key identifier: 90:4D:AB:54:C5:FD:B3:9C:49:80:E4:46:8C:FB:50:2A:FB:1A:69:CE
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 31050322E1E29C2DE4755BC281E1FA1EDEE51D60
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666313a3a2f34382d3438203d3e20323032353132.roa
Signing time: Sun 30 Jun 2024 12:15:21 +0000
ROA not before: Sun 30 Jun 2024 12:10:21 +0000
ROA not after: Sun 29 Jun 2025 12:15:21 +0000
asID: 202512
IP address blocks: 2a11:f2c0:fff1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:05:03:22:e1:e2:9c:2d:e4:75:5b:c2:81:e1:fa:1e:de:e5:1d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:21 2024 GMT
Not After : Jun 29 12:15:21 2025 GMT
Subject: CN=904DAB54C5FDB39C4980E4468CFB502AFB1A69CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:40:e1:db:cf:ae:c2:f8:f1:fd:d4:8b:31:87:
7e:3e:c6:37:64:f3:06:96:c6:c8:f7:0c:62:9d:55:
78:f9:e4:2b:e0:a7:9f:87:08:bf:d4:5f:12:24:68:
d5:3f:15:75:4b:2d:2e:16:7f:d4:85:ed:c6:14:90:
47:2d:92:a5:82:cd:bd:92:27:23:26:89:f4:91:1e:
5e:51:9a:1c:29:ed:5c:ab:6c:3c:c5:54:d8:64:59:
44:96:32:1e:e5:9c:98:5e:4a:d4:b0:95:db:10:da:
3f:6f:14:94:45:a1:94:f5:82:69:19:62:1e:4a:e3:
01:88:d5:bc:84:72:8a:0c:0f:c8:ac:bb:72:b4:57:
84:03:70:90:f4:f6:27:35:f2:52:d6:cf:c9:dc:a4:
e2:de:1b:d8:cd:2f:1e:9d:0d:71:8f:c7:d6:35:0e:
32:b1:3c:e6:22:62:ad:95:a8:46:7d:85:ea:eb:d4:
96:23:fe:d2:b7:43:bf:74:1b:ea:4e:bd:df:1d:fb:
81:d4:06:55:24:2c:d6:1d:00:6b:a6:d3:60:db:55:
b3:43:c9:2d:cc:4b:1b:38:eb:c9:b3:d2:40:a7:98:
69:45:c1:63:de:59:d0:0c:7c:36:af:85:19:44:c9:
1d:b2:a1:36:dd:1f:49:8a:b4:c6:08:fb:7a:87:96:
cc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4D:AB:54:C5:FD:B3:9C:49:80:E4:46:8C:FB:50:2A:FB:1A:69:CE
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666313a3a2f34382d3438203d3e20323032353132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fff1::/48
Signature Algorithm: sha256WithRSAEncryption
71:50:42:2c:b9:af:63:04:53:47:42:e1:c4:5a:76:83:1c:e8:
15:a3:2a:3f:d4:c8:36:ba:f8:7f:7e:00:4b:ce:f0:36:13:00:
f6:bb:d5:55:6e:d6:1d:5e:a2:a8:c8:27:3c:fa:47:98:29:2f:
5c:22:21:7e:eb:ab:f0:c2:90:d2:49:3e:30:51:38:46:b0:ae:
2d:1f:39:e3:10:57:38:9e:77:7a:81:d6:ec:ae:bf:bc:4e:8d:
93:67:55:fb:0d:2a:3f:24:f2:6b:34:ad:74:58:e9:46:30:35:
57:db:e7:0f:26:34:62:30:e6:c0:68:2b:5d:e2:0e:f2:01:9f:
95:d5:42:42:0a:2b:40:d9:b2:72:6c:bc:94:7a:0f:58:e7:8b:
f8:40:45:b2:20:58:5b:cc:30:47:c7:51:e5:6e:a5:a7:6a:17:
f6:13:d1:fd:c9:b7:4d:df:5b:b8:39:19:9a:03:e7:c7:5b:d2:
b2:bf:ec:c1:85:1a:1b:59:42:4e:b6:c9:9b:1d:91:0d:be:d0:
87:5c:34:ad:7f:e4:e2:44:59:ae:dd:8a:1f:d7:0f:d6:f4:84:
08:08:0c:98:4d:16:30:fa:3e:08:83:e8:7a:fc:b2:a2:34:c2:
ad:a1:2b:5c:9a:e1:45:53:62:a7:c5:74:44:9f:f9:a8:7e:43:
9d:28:b7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:03:41 2024 by rpki-client on console-fra.rpki-client.org