Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666353a3a2f34382d3438203d3e20323037383835.roa
File: 326131313a663263303a666666353a3a2f34382d3438203d3e20323037383835.roa (raw, json)
Hash identifier: 9ORlMwrez3apnbrVUzO9N/I8xEFts5npJX7gbQ56hHg=
Subject key identifier: 65:80:0F:54:D2:47:91:3F:1F:D9:69:E3:35:CE:79:8A:DF:9A:2F:33
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 3945108414485E8C67682B431FF4D95408E384A2
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666353a3a2f34382d3438203d3e20323037383835.roa
Signing time: Sun 30 Jun 2024 12:15:18 +0000
ROA not before: Sun 30 Jun 2024 12:10:18 +0000
ROA not after: Sun 29 Jun 2025 12:15:18 +0000
asID: 207885
IP address blocks: 2a11:f2c0:fff5::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:38:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:45:10:84:14:48:5e:8c:67:68:2b:43:1f:f4:d9:54:08:e3:84:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:18 2024 GMT
Not After : Jun 29 12:15:18 2025 GMT
Subject: CN=65800F54D247913F1FD969E335CE798ADF9A2F33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ae:3e:ed:c9:3b:1c:82:80:47:e3:1b:90:df:
5f:0f:60:d7:e5:19:12:9e:ed:1e:24:bb:79:8a:a7:
fc:11:81:7f:3e:a8:03:45:07:48:7d:17:39:8b:85:
5d:c4:bf:50:ab:4f:3c:35:22:82:f8:de:a0:4e:76:
34:c4:4a:c9:01:75:64:97:f1:9b:bc:89:85:f9:29:
c8:95:e6:75:7c:b4:48:2b:f4:4c:f7:be:7e:23:96:
1e:11:54:67:f9:99:e7:7d:5b:43:2c:6b:bc:57:47:
14:0d:7c:4c:98:b7:a5:d5:ef:fa:0d:07:bc:ee:7b:
1e:e0:b0:1b:52:b8:53:24:16:8c:2e:fc:63:9a:60:
72:02:b7:5f:03:ed:c6:5b:fe:7a:09:a9:44:1e:8b:
6f:40:bc:ad:06:ff:2e:24:49:94:92:49:dc:da:79:
73:4c:f9:ea:9a:7b:a2:fe:96:6e:32:46:bf:c4:b7:
15:8d:c7:de:e0:12:47:29:7e:1a:bb:df:04:96:34:
47:57:8c:c6:4b:d3:23:54:23:7e:0e:96:da:ff:f5:
79:c9:92:e7:83:1d:c2:ec:83:49:80:78:28:f6:4b:
c8:6e:29:fb:4d:cf:3c:79:d9:e7:51:51:ea:77:42:
5d:75:8a:08:66:d4:f0:d1:97:5a:0d:bb:b7:00:4d:
69:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:80:0F:54:D2:47:91:3F:1F:D9:69:E3:35:CE:79:8A:DF:9A:2F:33
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666353a3a2f34382d3438203d3e20323037383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fff5::/48
Signature Algorithm: sha256WithRSAEncryption
78:d2:15:16:4c:15:f1:84:00:e5:6d:6f:8d:72:db:3a:71:8b:
a9:4b:76:d6:ee:5b:e3:14:5f:4f:a2:54:39:9e:d3:34:ec:6c:
d8:e9:6a:ce:54:b8:5b:5c:90:c1:5b:cb:bd:15:1a:42:c4:dd:
00:bd:bb:5d:6a:54:f0:a5:5a:19:c1:15:4a:7a:fb:8b:51:b2:
34:4f:35:08:cf:d9:0e:99:13:b7:67:1b:01:c6:06:18:c1:30:
45:bb:1b:b6:d2:df:28:56:2b:37:1a:a9:e7:4b:0a:be:e7:c7:
5c:ed:8d:64:37:53:a1:4d:a2:80:15:9d:dc:56:d6:d0:f4:9a:
61:00:98:6f:e0:a5:37:01:88:bb:45:47:dc:19:2a:dc:b7:45:
4e:41:0e:56:75:f2:13:b1:f2:35:17:17:19:5c:d0:f5:69:f4:
6e:e2:dd:86:4c:4f:7b:b0:23:dc:16:8d:73:94:3b:0b:63:b8:
fc:85:33:d0:a4:20:2b:7a:19:6e:21:9d:28:46:b5:eb:80:23:
09:76:0a:74:2d:ea:27:c8:ae:6f:4d:1f:68:a4:a8:56:cc:ce:
7a:dd:dd:0f:68:e7:b7:24:19:ce:90:ba:8a:a6:e7:5e:10:d3:
2b:f0:20:d3:6b:9f:49:02:cf:2b:1f:55:5a:27:7d:bb:73:82:
ef:59:4a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:03:41 2024 by rpki-client on console-fra.rpki-client.org