Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238313a363030303a3a2f33362d3434203d3e20323135383230.roa
File: 326130363a313238313a363030303a3a2f33362d3434203d3e20323135383230.roa (raw, json)
Hash identifier: V0sx5Zv7EG9BNIjaLDll4E8K1a+5BbdE79d+RQMab00=
Subject key identifier: F9:C5:94:40:B4:42:64:52:B2:28:5F:6E:AF:D7:6F:A1:96:3E:B1:0F
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 06D2FDD765279905CE0FC18F06ADEC04E64B0E14
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238313a363030303a3a2f33362d3434203d3e20323135383230.roa
Signing time: Sat 08 Feb 2025 18:22:04 +0000
ROA not before: Sat 08 Feb 2025 18:17:04 +0000
ROA not after: Sat 07 Feb 2026 18:22:04 +0000
asID: 215820
IP address blocks: 2a06:1281:6000::/36 maxlen: 44
Validation: Failed, certificate revoked on Sat 08 Feb 2025 19:38:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:d2:fd:d7:65:27:99:05:ce:0f:c1:8f:06:ad:ec:04:e6:4b:0e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 8 18:17:04 2025 GMT
Not After : Feb 7 18:22:04 2026 GMT
Subject: CN=F9C59440B4426452B2285F6EAFD76FA1963EB10F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:49:e9:e3:d5:7a:4a:47:6f:ff:26:ff:2f:d9:
59:f2:ce:88:66:fa:b0:a1:0f:75:7f:3d:dc:6b:a8:
57:ce:65:65:d7:bc:4c:6a:a2:df:4f:41:75:b3:32:
66:00:16:60:37:34:7e:49:bc:4f:6d:1d:73:81:94:
62:92:ae:b9:b7:11:60:57:e8:b3:50:79:64:91:b7:
01:71:05:4f:45:ae:4a:a1:a0:7a:f6:b2:f2:fa:74:
0b:1d:d6:d9:1a:bc:20:78:f1:3d:43:b1:a3:5f:06:
b4:f8:a1:33:be:3e:bd:48:10:a6:e6:ca:fa:b7:f5:
cd:bd:da:56:a6:39:74:3d:15:85:03:f2:dd:ae:f1:
9b:8d:ba:03:d3:29:0a:d8:b6:31:9d:0a:99:08:2c:
68:da:57:dc:31:0d:e1:81:ca:dd:15:43:71:18:b4:
10:ac:42:63:0a:fa:03:05:1e:c6:70:c9:a3:0e:5f:
5a:a9:bb:62:66:f9:81:da:9e:34:9c:e0:37:78:14:
07:bd:66:8a:d8:62:f4:31:0d:5f:56:b3:cc:fc:31:
9e:ca:ea:4d:ad:60:9b:6e:0d:eb:e2:79:59:3b:2e:
f9:2e:7f:30:71:5d:ac:d3:21:97:2a:aa:55:af:d6:
d2:71:07:02:87:5c:bd:7c:00:42:09:73:e3:07:b9:
0c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C5:94:40:B4:42:64:52:B2:28:5F:6E:AF:D7:6F:A1:96:3E:B1:0F
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238313a363030303a3a2f33362d3434203d3e20323135383230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:6000::/36
Signature Algorithm: sha256WithRSAEncryption
35:92:4d:4e:a5:1c:1b:2d:4c:2b:8d:8a:09:0e:68:5b:72:09:
72:eb:0c:f5:69:f6:ad:41:dc:2a:96:24:a3:53:bb:64:4e:36:
98:3f:f4:3e:74:3d:9d:5f:e2:0e:04:18:29:a5:12:45:6d:c3:
82:65:4d:25:e4:50:0e:df:72:67:72:c5:c9:d6:cf:24:68:84:
88:6f:2b:c3:68:e2:96:ab:05:9e:2f:a1:a7:f2:39:01:b8:72:
a4:52:28:06:48:15:57:08:e9:60:ba:7c:88:12:cc:4e:ce:13:
ed:b7:69:11:9d:ad:bc:44:5d:07:a5:94:31:17:4a:a2:40:61:
3a:82:11:3c:55:3c:f6:41:83:43:67:89:af:6c:ed:3b:f4:98:
e5:96:cb:b4:a3:18:b2:1f:ad:6e:e8:7e:5d:88:11:1c:a9:04:
11:b0:54:5c:79:81:55:2a:91:0f:aa:df:5e:15:df:2a:b1:84:
be:ba:be:27:8d:ba:c6:4c:b2:2d:8e:e6:db:b5:a1:9e:f3:a6:
40:d0:11:6b:0d:5c:00:7a:f9:be:ee:d2:31:f0:c2:93:a9:63:
3d:d2:ff:66:16:f0:1c:e7:63:a6:6b:bd:fa:c7:32:af:e4:8d:
cb:a5:e7:81:09:77:d2:53:dd:4a:bb:e0:1e:88:ee:2a:23:3e:
6f:cd:81:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:57:29 2025 by rpki-client