Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666663a3a2f34382d3438203d3e20323130353633.roa
File: 326131313a663263303a666666663a3a2f34382d3438203d3e20323130353633.roa (raw, json)
Hash identifier: Kca/GfO+CtjmHO9wr7zPe9hpt7nF8oxW+ROtMf8DezA=
Subject key identifier: CF:B8:27:A3:10:BC:56:53:17:FE:C6:DE:31:D6:15:ED:64:D9:14:86
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 6A4C09D958C9894F43CAE808A7AAD27D5B76B26B
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666663a3a2f34382d3438203d3e20323130353633.roa
Signing time: Sun 30 Jun 2024 12:15:19 +0000
ROA not before: Sun 30 Jun 2024 12:10:19 +0000
ROA not after: Sun 29 Jun 2025 12:15:19 +0000
asID: 210563
IP address blocks: 2a11:f2c0:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 19:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:4c:09:d9:58:c9:89:4f:43:ca:e8:08:a7:aa:d2:7d:5b:76:b2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:19 2024 GMT
Not After : Jun 29 12:15:19 2025 GMT
Subject: CN=CFB827A310BC565317FEC6DE31D615ED64D91486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:ef:19:98:ba:5e:ca:07:1e:c4:77:dd:5c:
44:b9:79:cf:fe:6c:0e:e6:cc:b0:07:02:59:f6:30:
80:ac:47:0b:c7:62:b1:28:68:e8:a8:29:3d:cd:0c:
9a:5b:bb:42:51:11:aa:7a:b8:f5:e1:97:46:af:67:
bf:de:4c:e9:4e:e6:5a:57:1f:84:ca:74:14:89:5e:
03:60:60:58:fd:63:e8:2e:75:2a:43:ea:a7:2d:d5:
a9:4e:6e:f9:0b:b4:97:7f:79:dd:40:77:31:90:58:
97:f4:4b:28:f1:9c:ab:d6:d1:40:36:7b:a0:dd:80:
5e:07:0c:28:69:41:74:56:40:09:5c:20:ca:79:6a:
14:99:b9:9f:fd:fd:d8:0f:97:b4:10:ec:6c:47:6b:
e2:29:bd:4b:ce:f7:55:c2:cc:fa:06:8e:ba:57:74:
10:53:3c:16:49:8d:54:0e:88:a1:b2:67:75:87:e1:
c4:84:78:0e:fb:67:5e:be:e0:01:65:69:75:3e:26:
dd:49:47:19:98:ad:b9:d2:21:6a:92:7a:64:f4:bc:
ea:70:e8:49:c4:f1:cc:d8:aa:eb:74:3d:51:77:01:
c0:9c:74:6a:2e:89:38:a2:73:71:8f:34:cb:28:e8:
6a:6b:50:6f:7c:10:16:0b:ab:c7:f7:27:1b:68:16:
bf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B8:27:A3:10:BC:56:53:17:FE:C6:DE:31:D6:15:ED:64:D9:14:86
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666663a3a2f34382d3438203d3e20323130353633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
c2:8d:d9:f9:fb:a8:1b:a2:1b:17:39:fb:b3:0e:d0:a3:98:a3:
0d:fa:50:6e:7e:aa:96:21:91:88:7f:16:da:77:d7:5e:42:5c:
76:e5:8f:b2:26:43:8c:a2:0d:86:b1:85:30:65:a7:5c:a7:39:
d9:ef:1b:1b:59:cb:69:ef:97:f7:22:ce:00:9f:6c:7d:bb:81:
45:f2:c0:42:be:38:26:dc:fe:38:17:aa:23:3c:0b:9a:46:6f:
0d:e2:a4:4d:df:12:a5:9d:65:f8:b9:b8:40:9d:c1:a2:2c:ea:
75:ee:26:6d:bd:ee:cf:66:65:57:34:b5:c7:d6:61:f5:bb:26:
99:bf:d0:2b:ea:e2:20:74:e5:b6:43:ef:8b:9c:66:22:68:83:
9d:25:c5:ac:a5:7b:32:5f:45:fd:f3:69:1a:0d:c2:98:3e:91:
39:64:9b:0b:e4:9d:75:29:c0:ba:4f:da:d0:27:b6:06:cc:16:
88:b4:af:f5:8b:c4:1e:f5:6f:c8:be:38:83:9c:02:0c:2d:ff:
44:a7:ac:90:68:26:46:48:f4:62:fd:0f:75:6c:c1:93:48:7d:
6d:76:c6:b1:26:b3:b4:08:4c:07:09:5e:d7:66:72:86:6d:0d:
8a:21:c2:e9:56:a8:c6:ba:9c:f2:95:2f:79:da:0b:1d:23:c5:
78:b3:cc:ac
-----BEGIN CERTIFICATE-----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Generated at Sun Jul 7 21:11:39 2024 by rpki-client on console-ams.rpki-client.org