Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa
File: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (raw, json)
Hash identifier: 1mjiwqzX/aJaeX9pz5t3TWJYDC9klFCQc804Ikomf7Y=
Subject key identifier: F5:8B:5C:7C:15:0B:ED:1B:5F:B8:28:8A:8C:EE:8E:5E:1B:DF:C7:1D
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 328985612AD63843E66C7CFAC7BEB308F606A5DC
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa
Signing time: Sun 30 Jun 2024 12:15:21 +0000
ROA not before: Sun 30 Jun 2024 12:10:21 +0000
ROA not after: Sun 29 Jun 2025 12:15:21 +0000
asID: 203105
IP address blocks: 2a11:f2c0:fffb::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:89:85:61:2a:d6:38:43:e6:6c:7c:fa:c7:be:b3:08:f6:06:a5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:21 2024 GMT
Not After : Jun 29 12:15:21 2025 GMT
Subject: CN=F58B5C7C150BED1B5FB8288A8CEE8E5E1BDFC71D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:75:a3:62:c7:f9:09:3b:92:4e:12:13:7f:6c:
76:2b:ec:f8:ce:b8:0a:ba:03:5f:ee:3b:b5:a4:fa:
d4:0c:74:7e:80:28:5f:14:3a:dc:dd:2d:f1:b2:b3:
8d:ca:f0:90:c4:03:99:aa:65:99:d9:f2:cc:f0:2d:
ca:c9:d4:a8:00:27:f9:03:8e:7a:b5:c8:6a:06:55:
b2:30:88:6c:fe:a3:29:e1:75:e7:29:29:ce:f9:7e:
dc:70:46:bc:97:ff:ad:de:31:c0:4a:ad:ce:02:07:
f9:77:35:6f:66:79:c2:4c:a3:6f:75:a8:23:f3:b6:
dd:70:27:43:e7:36:26:ce:59:7e:46:73:24:6f:45:
a9:d5:80:1c:26:1d:a1:2d:be:15:fb:36:60:85:54:
1c:6c:2d:75:b4:4d:12:b0:db:13:ac:10:72:0e:30:
73:40:f4:19:38:73:e2:bb:8e:82:57:3d:fe:3d:f6:
4d:ec:33:1c:fc:9c:f9:2c:1f:29:73:79:f4:f4:54:
7b:14:74:02:4f:d3:db:b6:58:de:70:d9:5f:1b:b2:
73:c9:b7:f0:9c:d3:07:7a:d4:a5:15:1d:cf:17:4f:
cd:6b:b6:e0:60:7a:85:cc:86:f3:81:77:c1:a0:c7:
97:ed:e2:49:17:44:e5:20:b1:6a:d6:c6:69:ed:ef:
ce:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8B:5C:7C:15:0B:ED:1B:5F:B8:28:8A:8C:EE:8E:5E:1B:DF:C7:1D
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fffb::/48
Signature Algorithm: sha256WithRSAEncryption
24:28:ab:51:2a:63:52:69:f1:69:5e:99:ec:16:cc:4b:7c:a7:
52:da:f2:45:16:e7:cc:f4:0b:81:86:a5:25:cb:ad:96:74:aa:
ce:69:e1:b7:dd:42:7b:15:eb:49:c3:94:62:2b:dc:0c:f9:5c:
56:2a:92:60:ed:ef:36:53:cd:f2:e7:98:8c:ae:21:bf:ae:3a:
ac:c5:44:3a:46:5b:3e:d1:c5:0b:12:57:d6:05:c9:54:bc:70:
91:6f:d4:b1:3b:6c:6c:99:26:d5:e1:48:de:46:68:ae:63:0d:
c6:9d:82:40:1b:47:17:05:7f:01:73:8f:6a:4d:93:c8:e1:ce:
63:28:46:50:6c:72:eb:15:6e:00:fd:0f:cb:5d:58:d7:ca:ce:
80:63:0d:5d:0a:30:e2:f0:a4:f4:b8:de:ed:4a:6e:09:fd:d5:
71:61:4c:d2:ac:ce:bf:7e:ee:5f:bd:d4:94:7a:d9:43:5e:9b:
3d:e6:63:81:76:49:1a:d4:92:7b:0e:8f:0f:79:a8:f4:5e:c8:
24:84:5f:eb:ba:3d:11:c7:cb:c2:8c:58:5e:3e:1e:2f:74:44:
ed:1d:b4:91:a0:fd:42:6d:74:d2:39:24:1f:e1:11:c3:d0:54:
ff:f5:e0:67:12:82:8e:81:e2:f2:7b:a3:40:a2:a3:89:fe:fe:
f9:75:30:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:11:39 2024 by rpki-client on console-ams.rpki-client.org