Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa
File: 326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa (raw, json)
Hash identifier: /4EmByn0kVJ9z+VroMltQdDMZ/cLTzgbd3Q1ul+pFfI=
Subject key identifier: ED:4E:C0:D1:47:B6:97:2D:5A:6E:BD:62:E5:46:B8:B6:E5:E3:25:B9
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 18B4E0D3FBF6131B05BDEA363E49375614E2E40F
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa
Signing time: Sun 30 Jun 2024 12:15:21 +0000
ROA not before: Sun 30 Jun 2024 12:10:21 +0000
ROA not after: Sun 29 Jun 2025 12:15:21 +0000
asID: 204017
IP address blocks: 2a11:f2c0:fffa::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:b4:e0:d3:fb:f6:13:1b:05:bd:ea:36:3e:49:37:56:14:e2:e4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:21 2024 GMT
Not After : Jun 29 12:15:21 2025 GMT
Subject: CN=ED4EC0D147B6972D5A6EBD62E546B8B6E5E325B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:bd:f5:b7:31:dd:db:59:75:dc:21:48:fc:
a6:32:b4:4c:fb:e4:10:46:75:a2:84:fa:e4:ff:8f:
38:bc:90:1b:4f:f0:33:bb:93:03:47:de:48:52:50:
f5:2d:a5:b6:36:fd:1d:59:ca:c3:0f:bf:53:fe:b9:
a2:1e:e2:e2:36:fd:98:c4:5f:5c:c8:99:99:f7:83:
5c:f0:5f:fc:56:5c:5e:2d:13:97:bc:c7:b7:19:ab:
d9:80:c4:2a:43:10:1d:8c:63:c0:d6:bf:b6:1f:1b:
9e:5f:75:30:38:ac:0f:ba:a7:54:7d:15:1e:2a:70:
da:9c:28:5e:9d:54:a2:dc:b4:ff:74:e7:bf:99:ee:
20:ee:3b:5b:cf:f9:91:ca:de:27:a0:1e:8b:d2:f9:
6e:62:8c:a2:95:25:0e:a1:0b:13:53:97:7f:2b:1f:
27:99:4e:05:ad:c0:e3:e1:89:b3:da:5a:9e:ef:8b:
46:af:3e:d0:61:a7:6d:b5:42:ae:a1:a4:98:97:11:
cf:8f:5d:28:52:1a:91:64:a7:ad:e1:0d:a6:03:d0:
b0:a4:2a:b1:5a:4e:f9:d9:04:c9:8f:02:b3:0d:95:
0d:fb:71:06:6b:b3:c1:87:f5:03:81:23:33:90:bb:
5e:df:c0:f4:1a:4e:77:f5:79:80:29:23:c6:0b:14:
82:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4E:C0:D1:47:B6:97:2D:5A:6E:BD:62:E5:46:B8:B6:E5:E3:25:B9
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fffa::/48
Signature Algorithm: sha256WithRSAEncryption
ac:5d:25:8c:2d:a8:47:f9:7b:cc:12:05:5d:59:89:2c:39:cd:
3c:ef:4f:60:af:5c:0a:89:df:5d:87:90:42:65:e2:53:2c:57:
48:7a:05:95:ff:95:34:a3:a5:78:bd:75:e6:b8:ea:68:ec:75:
b8:db:52:42:41:d6:29:4e:28:f4:c3:1a:3e:d7:b8:5f:8c:17:
64:92:eb:df:df:c3:7c:2a:ae:e2:cc:38:e3:fe:02:d1:fe:ef:
0d:a5:23:8c:cd:b0:03:a0:05:9e:89:cd:b7:8d:66:45:a0:68:
88:a4:bd:79:8d:dd:04:51:11:18:59:7c:02:a1:3d:1e:74:ae:
b5:84:b5:64:b2:2d:5a:6a:a5:16:9c:47:0a:c0:69:77:ef:4d:
cc:b0:38:be:cd:f9:63:b4:39:fc:6e:a0:e7:78:b4:f6:6d:86:
7d:e6:9e:97:ff:81:c7:ef:21:0a:86:4b:be:cd:04:4f:2f:bd:
41:54:25:0e:6c:89:95:22:f0:99:67:41:de:d3:62:94:d1:74:
31:63:8e:4d:ae:f4:d4:50:87:92:19:70:98:00:f5:32:9c:50:
6e:8b:7d:c3:09:39:72:9d:99:99:87:06:b9:ac:6f:64:74:07:
f0:27:8e:20:bb:e8:cb:d8:c2:8b:d6:87:2b:3a:3e:b1:a1:c6:
4c:41:51:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:03:41 2024 by rpki-client on console-fra.rpki-client.org