Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666373a3a2f34382d3438203d3e20323039323435.roa
File: 326131313a663263303a666666373a3a2f34382d3438203d3e20323039323435.roa (raw, json)
Hash identifier: JwaqsAWyHiNexn9ugWaI4yBia4L8H7jFH4OZY/du7rI=
Subject key identifier: 74:E8:A8:C4:3E:72:9C:27:17:F4:48:9F:8A:FF:7A:B9:73:E3:91:D5
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 5A8C889F3BB755F082F95F7B008D30F9143D82D0
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666373a3a2f34382d3438203d3e20323039323435.roa
Signing time: Sun 30 Jun 2024 12:15:21 +0000
ROA not before: Sun 30 Jun 2024 12:10:21 +0000
ROA not after: Sun 29 Jun 2025 12:15:21 +0000
asID: 209245
IP address blocks: 2a11:f2c0:fff7::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:8c:88:9f:3b:b7:55:f0:82:f9:5f:7b:00:8d:30:f9:14:3d:82:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:21 2024 GMT
Not After : Jun 29 12:15:21 2025 GMT
Subject: CN=74E8A8C43E729C2717F4489F8AFF7AB973E391D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:10:5a:58:d4:fa:bc:cf:22:71:e9:cc:98:
26:f3:b5:a7:d8:d3:31:91:17:86:da:44:7c:6e:f9:
b3:ef:89:78:7f:3a:81:5d:4a:0d:b5:ce:50:af:a6:
1f:da:5b:5d:3a:e4:d8:25:77:13:58:b0:0c:c2:85:
6e:ef:60:2f:d5:bd:ee:4e:1b:e1:6c:c6:c9:b2:e3:
cc:8a:6f:ae:bb:cc:5e:16:ce:d1:a3:ad:98:58:ef:
0c:29:6a:ff:77:bb:92:11:30:ca:06:11:2f:6b:71:
c8:f6:e6:9c:34:68:d4:d1:5b:3b:4d:12:ba:1b:21:
a4:5f:a8:70:50:17:0f:0d:74:d2:91:83:f6:3c:bd:
0e:67:39:a8:a5:2c:b5:94:af:7c:22:bc:e9:75:39:
6e:e0:d1:4a:80:8d:76:8f:b2:66:eb:ce:6c:a5:1d:
36:f3:5c:1b:5e:a9:90:af:b0:2d:15:6f:4d:58:4b:
97:64:3f:a0:d1:ec:3d:60:9e:03:2f:64:64:06:88:
6e:d4:2a:05:7a:25:e5:bd:ea:e4:41:4a:5d:14:26:
b0:1c:30:ce:c8:3f:9b:fc:73:b0:71:44:97:a7:04:
51:22:e0:0f:d8:82:25:4b:60:9f:b1:d9:95:8e:f2:
8a:70:1b:49:a9:16:10:9e:98:b0:38:96:94:c1:e5:
f7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E8:A8:C4:3E:72:9C:27:17:F4:48:9F:8A:FF:7A:B9:73:E3:91:D5
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666373a3a2f34382d3438203d3e20323039323435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fff7::/48
Signature Algorithm: sha256WithRSAEncryption
3a:b3:d0:73:78:dc:a6:8e:b1:7c:4e:6d:88:02:ea:65:0b:50:
a6:87:72:cd:12:26:8c:52:e4:11:56:a7:d4:f8:58:92:c9:c2:
74:e6:71:3e:86:41:cc:41:22:9c:18:9b:c4:d5:cf:54:20:50:
7f:22:a3:1a:b6:ae:4f:cd:d5:03:01:32:d4:af:ab:34:f5:88:
68:7b:e7:5c:3e:be:47:e1:26:54:b8:3d:aa:38:a9:5a:20:12:
4f:2a:97:b4:54:46:e8:fe:41:44:79:b5:2c:ae:7f:a5:08:9f:
d2:8f:a5:ba:0c:f5:90:aa:44:2c:b2:6f:5c:f6:e6:45:56:ce:
ad:f9:7f:cf:61:e6:74:bc:19:da:9a:15:a5:bb:c4:5d:2e:45:
ee:d2:d9:ed:97:12:db:52:c8:f2:74:7b:b0:a5:93:32:06:fb:
58:9b:4e:35:bc:64:20:96:d3:10:5a:a8:16:6f:c8:7a:fe:26:
61:6c:16:9c:b9:e2:31:d8:48:5a:5b:85:29:44:b5:8b:21:f6:
ef:7c:a7:10:97:aa:0e:93:a5:06:09:01:fd:f5:71:1e:04:73:
0b:1a:fd:e5:2c:0b:cd:1f:b4:73:21:cf:87:19:3d:9a:7d:f4:
42:cb:fc:51:60:af:68:11:6f:4c:7f:45:d8:8f:f1:f5:91:06:
94:f3:b6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:11:39 2024 by rpki-client on console-ams.rpki-client.org