Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa
File: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (raw, json)
Hash identifier: 1uSZXI3DD0iOEhIoDdst9BEZd5bLvt/z/G+GQ+Oh3j8=
Subject key identifier: F6:FE:3B:C9:A2:86:A3:37:2B:8C:67:1B:FE:92:25:25:92:00:65:4A
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 6513EAFB653231F7B10391FFC09E0BBEA3676F78
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa
Signing time: Sun 30 Jun 2024 12:15:22 +0000
ROA not before: Sun 30 Jun 2024 12:10:22 +0000
ROA not after: Sun 29 Jun 2025 12:15:22 +0000
asID: 205789
IP address blocks: 2a11:f2c0:fffd::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:13:ea:fb:65:32:31:f7:b1:03:91:ff:c0:9e:0b:be:a3:67:6f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:22 2024 GMT
Not After : Jun 29 12:15:22 2025 GMT
Subject: CN=F6FE3BC9A286A3372B8C671BFE9225259200654A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bf:9d:98:cf:80:95:e6:cc:47:1c:47:2f:02:
1c:e6:77:e4:6e:e9:d1:10:1d:2d:e2:a2:a4:08:1a:
9b:1b:b4:81:f2:fa:bc:45:1b:10:c7:34:5f:0e:a3:
cb:12:73:8a:f4:56:21:b0:12:ba:10:7c:b5:a8:96:
ce:2f:98:49:a1:91:fd:46:7b:6d:3b:b0:e0:4b:a1:
0c:6c:fc:0a:8c:7e:d5:87:ce:72:8b:b9:52:96:6a:
d4:41:04:a1:d1:5f:23:e5:78:16:a8:05:fa:6b:78:
b2:d3:ed:b0:f8:10:e0:64:31:e7:c2:23:65:bf:5a:
35:b4:c4:3d:8e:ae:12:5b:8b:8d:57:fe:35:04:47:
18:46:30:45:8e:b1:b6:2c:c3:83:d8:03:1a:06:6a:
42:c9:e2:32:8e:38:d5:59:89:cb:ec:29:50:a8:25:
21:24:6d:c6:33:a0:a7:48:76:49:c4:41:f2:79:a0:
03:09:b8:5d:14:56:b0:4e:d7:96:ad:a8:56:85:0a:
6a:98:96:8e:24:39:b5:da:0b:f8:e7:a2:14:01:0f:
2d:14:cf:58:73:51:72:d9:6a:96:53:b6:30:4c:eb:
37:a9:10:ab:b0:37:94:f6:d3:80:89:e2:e5:a2:9c:
16:af:46:65:c5:c7:4a:0b:03:2a:07:76:e0:db:df:
c8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FE:3B:C9:A2:86:A3:37:2B:8C:67:1B:FE:92:25:25:92:00:65:4A
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fffd::/48
Signature Algorithm: sha256WithRSAEncryption
4e:51:4a:ff:e4:6c:df:43:d4:8f:68:e6:25:d6:c6:59:77:23:
53:90:ed:36:f8:98:28:75:86:f7:cf:93:29:59:cb:60:66:20:
fc:33:99:dc:70:ee:a7:b9:62:e2:1c:b5:f6:d6:52:99:03:cc:
76:86:01:b5:2b:66:6d:df:fa:17:6e:85:08:82:a3:cf:b0:c5:
ce:b2:63:43:18:a1:67:83:33:a4:6d:81:19:81:c1:f3:e2:e2:
c4:2a:91:cb:da:64:91:49:e1:65:d4:76:ad:6d:25:b7:4e:33:
20:57:6e:ad:0c:3d:0b:34:a0:8d:7e:c6:03:73:36:82:77:26:
ed:a9:9f:03:9a:33:9d:d2:1e:0a:aa:38:10:7f:36:ad:f2:54:
a2:22:70:4d:0e:65:9e:b7:c2:7d:32:7c:b0:c5:5a:37:34:a1:
90:3a:16:f1:2c:af:2b:ea:ff:2e:ad:3b:57:c1:02:43:49:bb:
0d:0e:07:af:11:98:68:4a:df:a9:93:5d:3e:13:98:94:4a:0f:
42:1e:73:3c:8d:68:e9:b7:83:2f:9a:a5:b6:d3:72:ed:4c:a6:
65:ca:7a:f1:f9:ba:1e:29:28:19:7e:68:64:37:a7:3b:9b:03:
ec:21:7e:58:90:90:6e:44:33:35:f8:59:27:e5:9a:e0:6a:88:
a4:05:da:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:11:39 2024 by rpki-client on console-ams.rpki-client.org