Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/326130363a396634313a3130303a3a2f34302d3438203d3e20323134373233.roa
File: 326130363a396634313a3130303a3a2f34302d3438203d3e20323134373233.roa (raw, json)
Hash identifier: HoHZd43rRMvEuBrw2mPU5Hgxo6O7zHbed1DukrXNRgw=
Subject key identifier: E9:FA:CB:89:D2:47:A5:B0:83:E3:C4:7A:DC:27:F3:0C:ED:92:EB:83
Certificate issuer: /CN=75D5C2ECD30F680DB5D16987F457FEB45D8BA970
Certificate serial: 03B4588BC04AE331D17B43623567FD3CA40841FC
Authority key identifier: 75:D5:C2:EC:D3:0F:68:0D:B5:D1:69:87:F4:57:FE:B4:5D:8B:A9:70
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/326130363a396634313a3130303a3a2f34302d3438203d3e20323134373233.roa
Signing time: Fri 13 Jun 2025 18:59:48 +0000
ROA not before: Fri 13 Jun 2025 18:54:48 +0000
ROA not after: Fri 12 Jun 2026 18:59:48 +0000
asID: 214723
IP address blocks: 2a06:9f41:100::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 16 Jun 2025 16:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:b4:58:8b:c0:4a:e3:31:d1:7b:43:62:35:67:fd:3c:a4:08:41:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75D5C2ECD30F680DB5D16987F457FEB45D8BA970
Validity
Not Before: Jun 13 18:54:48 2025 GMT
Not After : Jun 12 18:59:48 2026 GMT
Subject: CN=E9FACB89D247A5B083E3C47ADC27F30CED92EB83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:36:12:bc:90:0c:84:99:d0:9b:f2:19:f8:10:
ff:66:32:80:30:38:e3:11:53:9e:2f:54:bc:88:4b:
02:8e:2d:3e:62:13:9d:4c:ce:a5:7b:76:72:3c:31:
7d:30:2b:f1:25:95:d2:5e:f1:c7:a1:e6:c3:fc:fa:
4e:4c:89:03:dd:fe:7e:51:4b:e2:55:98:87:a2:d4:
1b:31:c3:5e:d7:ec:de:43:5b:3f:43:78:a8:72:c1:
2d:d0:b2:66:7f:ff:9b:5e:5e:1f:8c:33:0e:3f:40:
87:64:54:f9:db:3c:65:38:78:6c:a2:e6:1f:3d:47:
b7:be:7d:92:81:13:d1:df:02:7b:50:8c:8e:ee:47:
5d:ca:ab:19:4a:09:66:84:81:d0:d6:d5:9b:cd:64:
56:74:41:af:a8:0e:52:d6:9a:af:69:05:32:fb:7a:
0a:ac:9e:60:9a:fa:da:1e:58:0f:07:e5:64:67:16:
6a:67:86:69:ba:63:8a:7c:7c:dc:39:3e:2f:f2:94:
2c:8f:09:cd:4e:76:20:4d:1a:b5:96:16:5d:f4:cf:
2d:4b:e9:a7:97:16:06:3e:ee:21:84:f2:0c:ae:6c:
f2:58:27:27:5a:b5:50:94:6d:29:b5:68:72:b1:80:
58:33:40:f3:e6:1d:33:88:91:e0:9f:5c:85:e8:5f:
e3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FA:CB:89:D2:47:A5:B0:83:E3:C4:7A:DC:27:F3:0C:ED:92:EB:83
X509v3 Authority Key Identifier:
keyid:75:D5:C2:EC:D3:0F:68:0D:B5:D1:69:87:F4:57:FE:B4:5D:8B:A9:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/326130363a396634313a3130303a3a2f34302d3438203d3e20323134373233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f41:100::/40
Signature Algorithm: sha256WithRSAEncryption
15:bd:46:14:28:bf:de:5b:67:32:48:68:1f:c2:fa:85:bb:08:
5b:8b:9b:bc:79:41:d1:d7:2b:6b:84:4a:cf:aa:56:2f:21:cc:
a8:7f:4f:dc:78:7d:7e:9f:a7:8b:27:8b:4a:34:07:a3:38:7f:
3f:f3:dd:af:fa:36:12:a2:0c:4a:52:10:e0:01:a7:a7:3e:44:
aa:2c:6c:d7:29:ff:54:4a:34:13:8e:96:1d:b4:bc:05:76:70:
64:c0:c5:0f:64:03:c8:85:b9:16:e5:6c:b5:e1:32:87:f3:7e:
7b:d7:41:5f:d1:d1:ab:f1:44:81:e8:79:bf:95:2f:2e:28:29:
39:91:1d:11:5a:b0:25:47:59:f0:96:7b:c7:e3:1a:0f:83:0e:
e2:fe:75:37:eb:c6:a6:f4:78:c8:c7:ad:80:9f:08:f9:52:dd:
51:62:33:23:7b:30:57:e4:85:0d:e3:05:4f:84:9a:43:3c:1a:
07:bb:3f:a6:3e:0e:72:3e:b3:65:bf:77:b3:3c:f7:a3:59:af:
99:00:f1:e8:61:68:e4:a4:eb:95:1d:1e:c1:92:05:09:c4:5d:
ba:ba:94:0f:2d:68:7f:23:f9:e9:92:85:03:d4:2c:6f:67:d9:
0c:4e:f3:4e:6a:34:6f:61:fd:1d:24:c8:50:1d:50:a9:84:f8:
3a:4f:42:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 06:49:42 2025 by rpki-client