Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238343a3a2f34382d3438203d3e203437323732.roa
File: 326130363a313238343a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier: kC4GevCUQVSVhJLGIOvFn1uUxOI6Uuz0nvTh8LZAAqU=
Subject key identifier: 49:EA:41:7E:E7:62:5F:81:3B:3B:56:7C:88:7A:1C:2E:24:58:88:55
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 6D5BFE05A922DE8AB202F70695EE6815760B4E45
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238343a3a2f34382d3438203d3e203437323732.roa
Signing time: Sun 13 Apr 2025 20:00:27 +0000
ROA not before: Sun 13 Apr 2025 19:55:27 +0000
ROA not after: Sun 12 Apr 2026 20:00:27 +0000
asID: 47272
IP address blocks: 2a06:1284::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 13 Apr 2025 20:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:5b:fe:05:a9:22:de:8a:b2:02:f7:06:95:ee:68:15:76:0b:4e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Apr 13 19:55:27 2025 GMT
Not After : Apr 12 20:00:27 2026 GMT
Subject: CN=49EA417EE7625F813B3B567C887A1C2E24588855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f8:0d:cd:ff:70:df:98:86:90:c9:09:ff:10:
aa:af:3e:2d:2a:c6:11:73:43:ef:f5:2d:b5:ac:4d:
eb:49:37:4b:94:32:6d:f9:de:8e:68:3d:2f:31:64:
41:cd:49:eb:fd:9b:c9:57:0a:3f:1e:15:b0:bb:e4:
bd:8b:f6:a4:7d:bc:ee:9a:39:12:87:22:82:bf:8e:
5b:2f:fd:32:89:5f:4e:39:76:3f:6e:30:1e:98:56:
7d:13:6b:a6:88:bc:85:e7:d4:02:9f:43:01:b7:73:
f3:3a:b1:4a:4d:67:7b:35:8e:2f:33:77:33:67:c6:
b2:8e:93:d7:34:b0:77:86:86:33:39:00:9a:32:04:
dc:ca:3c:53:1d:ee:77:63:9f:99:16:04:55:6c:a9:
6f:78:3b:e3:35:0c:f1:bb:05:e4:d4:0c:ea:f3:cf:
9e:3e:52:19:90:61:3c:2b:46:ad:d8:95:0e:1d:9f:
11:ac:c7:51:05:21:6d:1e:c5:e6:3c:c6:c2:57:66:
6b:a4:58:1a:14:ca:5f:28:db:4c:5f:da:13:34:43:
23:4d:d7:6d:5c:59:31:19:17:ce:13:28:80:99:41:
ca:3c:47:59:e9:4c:32:0f:c9:9e:09:e3:f3:24:d3:
29:9e:b2:fc:5e:65:29:a6:8a:79:a3:ad:ef:95:60:
77:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EA:41:7E:E7:62:5F:81:3B:3B:56:7C:88:7A:1C:2E:24:58:88:55
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238343a3a2f34382d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1284::/48
Signature Algorithm: sha256WithRSAEncryption
77:60:3f:c8:00:ce:ff:4a:ca:f6:3b:e1:9a:6e:e7:07:43:80:
36:aa:9d:6d:8b:80:2c:6a:a1:fc:54:fa:b7:f9:4f:83:4b:36:
e7:3a:6c:77:63:82:8f:40:ef:21:32:1b:5c:92:9b:3e:08:e5:
9c:b8:b8:4f:99:4c:f9:c4:2d:d7:ac:54:c5:34:34:d6:6c:e2:
59:c5:e8:a4:62:88:a7:5e:26:9f:24:e0:8f:55:f3:60:c1:5e:
6f:b3:0d:c5:91:48:1f:27:63:6d:d0:fb:c5:98:b2:7f:27:f2:
e9:74:48:0d:15:73:3d:b7:45:4b:52:5f:9b:b3:de:7a:2a:29:
c4:33:5c:f3:5b:d0:26:13:96:9e:53:4e:97:b8:6a:f6:42:fa:
79:e6:9e:94:fe:ab:3d:44:d4:88:b0:e1:2b:bb:3a:34:53:50:
a2:a6:55:11:f5:da:d6:9d:3e:ed:b5:b1:d7:64:b4:c0:0b:f5:
ef:b6:a0:c6:a3:40:27:cd:b9:ef:0d:ae:ec:96:df:83:17:0a:
ba:3f:3b:f0:6a:d1:7b:63:f1:b1:9c:08:59:d0:9a:6f:c4:78:
2e:35:e7:f2:60:8a:e6:bc:39:84:8d:ca:ae:c7:98:fd:0d:2d:
ba:f1:05:0d:bb:ff:4a:6f:a0:06:1c:9f:b5:aa:da:29:df:65:
fa:b4:72:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:40:29 2025 by rpki-client