Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/326131343a373538303a3930303a3a2f34302d3438203d3e20323033383433.roa
File: 326131343a373538303a3930303a3a2f34302d3438203d3e20323033383433.roa (raw, json)
Hash identifier: tW1bySIeO89vo2XueeanAxud/HQkGG1bEL8IXLXpfew=
Subject key identifier: 45:73:46:C9:04:B7:84:78:E0:15:90:70:24:87:E6:E4:5D:69:CE:28
Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A
Certificate serial: 6DA9022E72101350CECDECD0959FD7A74446DE16
Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/326131343a373538303a3930303a3a2f34302d3438203d3e20323033383433.roa
Signing time: Fri 11 Apr 2025 03:22:45 +0000
ROA not before: Fri 11 Apr 2025 03:17:45 +0000
ROA not after: Fri 10 Apr 2026 03:22:45 +0000
asID: 203843
IP address blocks: 2a14:7580:900::/40 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 06:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:a9:02:2e:72:10:13:50:ce:cd:ec:d0:95:9f:d7:a7:44:46:de:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A
Validity
Not Before: Apr 11 03:17:45 2025 GMT
Not After : Apr 10 03:22:45 2026 GMT
Subject: CN=457346C904B78478E01590702487E6E45D69CE28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:de:4b:07:8c:33:1a:b2:f3:df:12:a2:3f:
95:81:ba:7b:c7:9b:a8:8c:49:a1:d1:17:cb:52:65:
e5:d8:2a:52:ce:ad:e3:d1:9b:da:ec:b1:24:c7:fb:
74:32:1e:cf:bc:a9:6a:7b:a4:49:28:d0:c1:42:84:
0d:b0:74:5d:9c:c4:a4:5c:0a:df:89:4d:39:a1:24:
5a:2b:da:2a:a4:4e:fc:65:ce:6e:0c:6e:a7:2f:7e:
26:7f:ca:d0:ac:a6:bc:eb:34:d1:ce:60:93:2b:f2:
bf:48:ac:eb:6f:57:76:40:fb:8d:7d:3a:82:2c:04:
14:77:23:d3:c1:92:ca:ba:cb:a5:fe:f0:e4:56:5c:
3a:2a:45:5e:f2:b4:ed:28:76:de:53:25:df:71:df:
dd:6b:9c:cd:0d:1b:a5:48:c7:ba:75:06:f9:cf:af:
4b:2c:64:da:df:9e:b8:3d:bb:45:df:ad:ef:36:4d:
4f:f5:49:82:7e:6d:89:22:ae:51:d8:fc:05:f6:82:
0a:ad:e7:a2:7e:bd:1d:53:e9:12:af:a3:95:51:00:
a1:29:7f:39:70:06:97:a0:30:07:3f:96:1a:bf:5c:
bc:87:49:14:79:3a:87:ba:36:73:d1:46:18:ae:35:
31:77:af:29:13:d0:57:91:7b:39:70:34:08:8c:71:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:73:46:C9:04:B7:84:78:E0:15:90:70:24:87:E6:E4:5D:69:CE:28
X509v3 Authority Key Identifier:
keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/326131343a373538303a3930303a3a2f34302d3438203d3e20323033383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:900::/40
Signature Algorithm: sha256WithRSAEncryption
36:4a:95:eb:35:78:8e:00:33:6d:7f:56:96:c7:4f:8b:8b:d9:
19:bb:4e:fe:80:48:d2:85:c9:3c:25:2a:99:4f:82:b7:fe:c1:
18:bf:c3:ae:f8:99:11:49:b7:a7:c1:e8:36:29:1c:43:82:d2:
00:38:c9:96:ee:f5:63:4b:8d:f6:46:ec:0f:7f:0e:02:b2:b1:
00:d8:c4:99:7e:55:aa:34:ec:67:c7:55:a0:68:32:a8:14:69:
2c:d5:eb:a7:c7:04:4b:03:f6:b5:65:38:a4:3c:7b:c0:c2:1a:
27:ff:dd:99:68:95:c6:77:1c:60:5f:32:5b:ad:14:49:42:f1:
0e:6f:52:bb:88:de:a2:e2:b2:53:35:1e:ff:92:8f:ee:80:04:
59:18:e8:43:b2:af:8b:39:f2:93:a9:35:f3:40:e9:66:f4:40:
52:49:bb:f7:8a:78:50:eb:ee:5c:30:8c:22:c3:35:57:73:b3:
14:bd:90:66:06:f0:49:05:0a:d3:27:31:c8:9f:04:97:64:20:
85:f4:6b:20:5d:74:51:f3:4b:68:e5:37:bb:36:bd:fb:9a:3d:
55:76:a5:b2:1e:64:d3:3d:88:ab:30:af:2e:b6:2c:0d:f8:36:
15:e4:d7:80:7d:57:8c:3e:fa:c6:9e:e9:63:c1:34:9a:23:3f:
16:a4:b7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:17:10 2025 by rpki-client