Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666653a3a2f34382d3438203d3e20323130353032.roa
File: 326131313a663263303a666666653a3a2f34382d3438203d3e20323130353032.roa (raw, json)
Hash identifier: SZEunfJDxy22g/zRokfiuo9ouzG3VSV/wMtoaFa2o+E=
Subject key identifier: CD:AA:F0:66:66:95:2A:CE:60:09:EF:68:00:80:BB:E8:DF:CC:97:18
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 3FCDF34311383C887EBFF503E6C173B624975802
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666653a3a2f34382d3438203d3e20323130353032.roa
Signing time: Sun 30 Jun 2024 12:15:22 +0000
ROA not before: Sun 30 Jun 2024 12:10:22 +0000
ROA not after: Sun 29 Jun 2025 12:15:22 +0000
asID: 210502
IP address blocks: 2a11:f2c0:fffe::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:32:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:cd:f3:43:11:38:3c:88:7e:bf:f5:03:e6:c1:73:b6:24:97:58:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:22 2024 GMT
Not After : Jun 29 12:15:22 2025 GMT
Subject: CN=CDAAF06666952ACE6009EF680080BBE8DFCC9718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:be:4c:94:89:69:d8:0e:57:46:6f:57:7d:
91:58:d8:97:6d:2b:4d:53:51:fe:f7:ae:b9:e3:f1:
a7:3d:50:f7:0f:06:07:cb:81:08:ea:78:51:f4:c8:
4c:35:7d:eb:ae:76:1e:ba:29:5d:09:92:a4:f9:9b:
c0:43:f8:6c:36:8c:dd:7c:3f:54:49:76:97:95:36:
11:90:c9:b7:11:19:06:ee:b5:fd:72:2c:7e:9e:17:
71:0c:86:cf:ae:82:ca:47:c0:f3:2d:a3:93:0e:06:
12:a0:ed:57:b8:67:43:f6:88:2f:32:d5:a2:2b:b7:
4d:e3:dc:18:29:35:b0:7b:26:5b:4a:a8:a6:6b:78:
86:cf:21:55:38:3b:ee:30:b7:47:6b:58:9a:92:0b:
2f:d6:67:99:39:4a:80:7c:36:5d:1c:08:ea:aa:01:
e6:e4:35:6d:bb:07:4f:c4:aa:3b:7b:30:08:2a:33:
51:19:62:fe:63:34:d8:44:62:78:32:a5:4f:07:22:
2c:d7:6c:cb:2e:37:02:06:03:4a:39:0f:54:ed:91:
05:f6:14:3c:ba:32:1e:b8:7d:f0:dd:25:df:5b:24:
26:59:db:92:5a:0d:2d:03:7b:af:33:98:49:83:0d:
22:84:05:ad:ce:c4:48:82:bf:f8:67:52:d7:3c:2b:
fe:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AA:F0:66:66:95:2A:CE:60:09:EF:68:00:80:BB:E8:DF:CC:97:18
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666653a3a2f34382d3438203d3e20323130353032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fffe::/48
Signature Algorithm: sha256WithRSAEncryption
62:dd:43:1f:58:6f:ca:91:4c:63:8c:25:5c:37:9e:1f:fe:75:
92:c9:c1:96:ab:7d:82:f4:85:36:0e:ea:53:4c:f9:d1:9a:97:
8c:4b:16:1d:f4:ad:6d:79:a3:18:eb:e9:4d:ac:5e:8e:f7:a5:
15:39:a4:51:fd:12:a3:29:54:7b:4d:cb:e9:8d:83:76:92:c3:
7a:9e:74:b4:58:47:04:92:7b:3a:c8:13:b0:ea:2b:36:37:df:
c5:12:54:bc:fd:b6:92:58:e0:ac:d2:08:25:86:51:ed:65:7d:
56:ad:32:68:66:c5:05:7d:d8:9f:72:59:e8:8d:cd:9a:76:9b:
0f:f6:f0:4e:c3:01:7f:8f:87:4b:c5:2e:6e:11:aa:5a:1f:41:
3c:52:13:85:c8:42:08:d0:89:24:7d:3e:30:a5:d7:09:49:cf:
61:60:dd:75:ac:ef:57:12:60:f8:cf:26:fb:34:38:9e:c7:55:
d2:03:37:45:a6:37:e1:d6:67:c0:19:33:ac:3a:9e:b0:f8:97:
db:01:7f:07:42:84:c2:c0:b0:06:d3:0d:f5:ac:f5:f8:93:cd:
41:5a:d2:5e:1e:26:21:78:a2:1d:d2:f1:67:2e:af:88:c8:35:
ad:bf:a1:db:b9:14:7d:31:63:88:ff:a9:28:e1:30:f3:6c:62:
02:b3:2b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:03:41 2024 by rpki-client on console-fra.rpki-client.org