Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238343a3a2f34382d3438203d3e203537313130.roa
File: 326130363a313238343a3a2f34382d3438203d3e203537313130.roa (raw, json)
Hash identifier: 3LOMVvSxByqruLocothZgDz028jG1OQzyRWaVo1VD4E=
Subject key identifier: D2:86:13:18:CC:30:F1:A1:84:E1:97:2E:E3:D0:9D:95:D6:1A:0B:B1
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 31492D678D3CE8A111FB6B3C3597C162F0C30D31
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238343a3a2f34382d3438203d3e203537313130.roa
Signing time: Sun 13 Apr 2025 20:00:29 +0000
ROA not before: Sun 13 Apr 2025 19:55:29 +0000
ROA not after: Sun 12 Apr 2026 20:00:29 +0000
asID: 57110
IP address blocks: 2a06:1284::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 13 Apr 2025 20:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:49:2d:67:8d:3c:e8:a1:11:fb:6b:3c:35:97:c1:62:f0:c3:0d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Apr 13 19:55:29 2025 GMT
Not After : Apr 12 20:00:29 2026 GMT
Subject: CN=D2861318CC30F1A184E1972EE3D09D95D61A0BB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3b:8a:55:61:d9:16:12:1d:77:0d:2b:3e:9c:
aa:0a:ea:1a:b5:a0:bf:fa:66:d6:42:00:53:56:67:
80:a6:77:69:2c:92:56:b3:b4:7e:65:5b:d5:26:5f:
ab:fc:87:b0:46:f8:d4:f1:81:e1:93:86:b4:b3:0a:
42:27:7e:54:5b:ac:81:00:2a:f7:3e:b1:0e:99:4b:
b2:c0:18:fd:25:6d:e1:7d:6b:7d:9b:6a:07:08:fe:
c3:b2:4e:36:77:9d:14:85:03:e7:a2:af:54:af:32:
c1:ca:7f:65:43:65:ca:f1:34:fa:23:85:d3:ce:4a:
bf:e2:b8:a2:1a:74:eb:53:3d:25:1b:99:4c:36:9d:
14:81:f4:01:62:4e:10:e7:94:ab:55:12:3d:a0:9f:
b6:12:ce:d4:eb:9a:73:36:fb:62:a8:20:34:40:58:
46:03:d5:26:37:1e:ce:75:c3:22:ea:2e:28:7c:0d:
c9:5d:d2:05:6d:c2:f2:8d:ef:b9:b8:90:fa:a9:97:
38:21:51:7a:fe:bf:d4:32:b6:cc:3d:d6:cd:73:fe:
c2:56:c0:4d:94:93:a7:58:9a:f2:93:43:49:75:b3:
05:89:c9:2c:d3:1c:df:9e:ad:9d:2f:f3:3f:ee:60:
cf:6c:eb:9e:77:8b:01:5c:47:5f:82:88:82:4c:48:
a7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:86:13:18:CC:30:F1:A1:84:E1:97:2E:E3:D0:9D:95:D6:1A:0B:B1
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238343a3a2f34382d3438203d3e203537313130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1284::/48
Signature Algorithm: sha256WithRSAEncryption
6c:94:e9:3e:18:1f:f8:33:ed:23:8e:5d:0d:cb:67:c8:c5:6b:
a5:f8:a9:16:35:05:3f:14:0f:21:a8:95:7b:29:d0:05:50:e0:
0f:4c:87:ef:2b:fc:27:15:7f:bf:15:28:5e:99:5b:c2:7d:80:
8e:29:24:f2:31:da:d3:73:09:0d:0f:b2:d4:5b:18:ec:41:9d:
f5:56:a7:12:dd:ea:e1:9c:e5:3d:26:1d:38:f8:c5:bf:20:46:
86:b3:55:08:50:8e:68:cc:7c:06:11:61:ce:ca:1e:cf:ad:cf:
d2:86:b4:67:a9:12:81:3b:46:26:2d:a0:e5:8f:ab:00:14:8f:
99:82:66:8a:32:ec:59:ea:e9:aa:2a:d2:8e:be:95:b6:65:3d:
4b:06:b9:f7:f1:d4:15:be:29:52:82:0b:9e:7d:0e:81:9c:ea:
c6:ff:81:b6:f8:e6:0e:d6:1c:e4:de:7f:0c:f7:1d:c1:8f:e0:
c7:ea:33:e0:5f:42:59:31:7f:e6:4c:56:00:6d:72:5b:b7:51:
2f:f9:e3:1c:ed:31:1c:44:ef:29:24:70:63:24:b1:fd:82:2c:
82:a6:d5:1f:28:1d:a3:aa:a2:d8:02:bd:60:a3:1c:37:77:97:
c6:a2:bf:a9:84:1d:b6:52:92:4d:1b:bb:5a:2b:02:5b:0b:b6:
ba:1f:cd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:42:57 2025 by rpki-client