Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa
File: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (raw, json)
Hash identifier: TTwVi2gJzy+zQy29S3RL18Db2Ar0AYuuSOwTzHA8o4A=
Subject key identifier: CA:A0:FB:D0:F6:61:23:F1:6A:51:DC:9E:AC:3C:52:5E:A9:56:0C:8B
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 4A91B4860DBB44F20A5CC52A4E3ACF7A1BF58383
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa
Signing time: Sun 30 Jun 2024 12:15:19 +0000
ROA not before: Sun 30 Jun 2024 12:10:19 +0000
ROA not after: Sun 29 Jun 2025 12:15:19 +0000
asID: 212245
IP address blocks: 2a11:f2c0:fff6::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:38:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:91:b4:86:0d:bb:44:f2:0a:5c:c5:2a:4e:3a:cf:7a:1b:f5:83:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:19 2024 GMT
Not After : Jun 29 12:15:19 2025 GMT
Subject: CN=CAA0FBD0F66123F16A51DC9EAC3C525EA9560C8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c4:1d:3a:77:8c:88:ef:fe:d5:5e:f1:e9:21:
a5:2c:64:e3:3b:4b:93:4e:20:36:62:a2:b2:87:e1:
5e:e2:e0:7a:7e:58:c2:82:26:18:45:c0:16:1d:d1:
f9:ac:94:f6:c8:34:a3:bd:c7:b5:12:07:99:5f:34:
5c:65:fb:14:3f:c2:7b:81:4c:e0:92:4b:91:3d:58:
40:49:79:c9:6b:ae:64:2e:3e:00:52:1d:d9:89:05:
70:50:b8:07:e1:da:cf:0d:cd:40:70:88:d5:5d:f8:
1b:0e:62:76:66:e4:f5:86:2e:6d:9e:72:e1:01:b7:
ad:12:86:ce:08:8d:f5:2f:ee:8e:0e:0a:a1:fc:5f:
53:d4:f6:44:d9:a4:b7:8a:ed:43:66:27:2b:50:65:
dd:e6:b5:39:f8:86:4a:f3:4a:27:11:11:bb:81:02:
c8:92:47:b6:f6:d1:e1:d6:61:ee:f5:61:5f:d3:ce:
cd:36:d7:bb:98:a6:b2:ee:1b:f3:24:22:4b:58:7a:
a5:11:6a:0f:21:fd:b3:03:ef:3d:26:8d:6e:7c:8b:
75:a2:34:73:5a:db:5c:8f:21:bf:13:f1:03:88:27:
dd:18:36:00:80:7f:a8:1c:63:28:36:7b:14:c6:00:
a9:79:e3:31:e3:8f:99:12:6d:07:86:a5:6e:c6:ac:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A0:FB:D0:F6:61:23:F1:6A:51:DC:9E:AC:3C:52:5E:A9:56:0C:8B
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fff6::/48
Signature Algorithm: sha256WithRSAEncryption
3e:b4:a1:9c:62:52:c7:08:ca:fc:8c:9e:f0:0a:5e:96:9d:e7:
6c:c2:11:aa:e9:3c:e2:35:c1:c8:37:76:89:84:09:93:77:82:
68:8b:56:e6:16:41:fd:03:cc:31:46:ef:1a:eb:01:37:81:29:
b0:53:18:25:3b:9e:c4:08:34:22:1a:69:34:2d:cb:fc:f7:7e:
f0:2b:6d:5f:a3:2e:f9:1a:fa:16:7b:3c:d5:0f:86:c4:03:32:
45:e5:59:86:7e:f3:7c:d6:e8:70:4b:dd:61:ab:31:70:a3:3f:
ef:f0:fb:86:3b:ac:b4:ab:a8:8e:6b:81:25:a0:fb:66:09:d0:
45:b3:6a:f7:26:2a:2b:bc:5a:f3:67:86:44:11:46:c5:4e:db:
31:f9:f4:2a:ab:05:74:20:95:d8:cd:78:9f:00:35:20:f6:a1:
23:3b:3a:b2:8f:69:cf:68:fa:95:e5:f1:83:62:da:c9:77:af:
7d:f1:b4:43:8f:30:7a:7f:24:c3:bb:99:9d:79:09:a7:a9:0c:
09:fc:7c:40:2c:53:12:29:2a:a1:23:fe:61:94:24:33:29:47:
52:33:5d:3b:1f:7a:68:e2:eb:6a:b5:7f:a1:49:dc:c1:46:ab:
43:e1:cb:e8:96:47:1f:4c:d2:96:9f:2d:e2:8b:48:bc:87:7d:
17:43:62:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:11:39 2024 by rpki-client on console-ams.rpki-client.org