Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a313030303a3a2f33362d3336203d3e2030.roa
File: 326130393a353463363a313030303a3a2f33362d3336203d3e2030.roa (raw, json)
Hash identifier: gzaTuB0HGsDjj4ltBA7KS6xdbRbcogOIhfGYVC/BOVk=
Subject key identifier: F3:E6:1F:8B:38:92:B8:F1:1C:F9:DC:44:F5:5B:17:97:06:68:DB:1F
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 0FE2880B6E0DA278DAE00BD9211F8763A0B8B366
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a313030303a3a2f33362d3336203d3e2030.roa
Signing time: Thu 10 Apr 2025 18:05:42 +0000
ROA not before: Thu 10 Apr 2025 18:00:42 +0000
ROA not after: Thu 09 Apr 2026 18:05:42 +0000
asID: 0
IP address blocks: 2a09:54c6:1000::/36 maxlen: 36
Validation: Failed, certificate revoked on Fri 11 Apr 2025 04:38:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:e2:88:0b:6e:0d:a2:78:da:e0:0b:d9:21:1f:87:63:a0:b8:b3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Apr 10 18:00:42 2025 GMT
Not After : Apr 9 18:05:42 2026 GMT
Subject: CN=F3E61F8B3892B8F11CF9DC44F55B17970668DB1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bb:ab:35:29:56:b6:23:cc:23:a9:2d:c3:ea:
91:e8:81:1e:e8:ac:32:15:f5:31:24:68:b0:1d:ca:
e4:22:de:54:15:3c:43:ec:03:8d:f4:53:13:8e:0e:
99:38:58:21:46:4f:19:5e:ff:1a:ce:92:dd:7b:6a:
85:a8:db:85:91:33:bd:e7:37:04:c2:58:10:35:a4:
3b:9d:d7:06:fb:db:73:56:e9:62:9b:e1:f8:dd:f3:
ec:f0:17:84:8e:da:86:ad:45:0d:7b:4d:bf:60:82:
23:64:6d:05:c8:68:66:fc:c9:38:29:5f:17:da:70:
75:93:c3:3d:d3:f9:75:66:1f:e9:68:9e:58:4e:56:
cc:7f:ee:71:74:3c:d0:51:ee:53:99:29:da:a7:27:
c8:82:64:53:d1:9e:1a:b0:74:f3:14:30:06:52:7b:
44:0f:68:5c:31:29:cc:40:26:83:00:b4:56:9f:33:
d6:39:51:18:66:01:3e:18:0c:68:cf:22:83:3b:51:
a6:67:f2:11:cc:53:75:78:45:aa:ef:ba:aa:16:4e:
cd:eb:b8:71:29:4c:0e:02:f3:71:e9:05:32:85:15:
a0:1f:29:22:15:1c:5a:6c:63:d8:ee:e7:3f:8d:10:
f1:90:7a:b1:3a:09:d8:b6:36:71:f2:c5:cc:51:56:
b5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E6:1F:8B:38:92:B8:F1:1C:F9:DC:44:F5:5B:17:97:06:68:DB:1F
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a313030303a3a2f33362d3336203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:1000::/36
Signature Algorithm: sha256WithRSAEncryption
41:a0:40:76:d1:bc:ba:b1:30:f1:c1:ea:86:3d:aa:3a:9e:88:
6e:f6:26:d6:ed:19:ec:7b:1c:6e:a0:63:e2:39:5d:a1:75:a8:
d2:69:e2:56:cb:58:09:ee:87:6b:2b:ea:8d:33:c8:a5:6a:4b:
d0:fc:4a:d2:cf:3e:69:5a:79:db:ec:87:12:56:8c:5d:8d:de:
76:b1:b2:c3:7d:ef:b7:9f:e1:d2:b6:35:3d:b8:aa:a0:cb:94:
7a:20:74:33:a0:8d:6d:b6:42:8b:16:fb:8f:b3:cd:48:c8:98:
61:56:46:af:46:9c:8a:1a:5e:77:28:94:13:df:e4:32:ad:61:
87:c5:39:54:4a:7e:d5:1b:96:07:f6:b1:b6:77:f4:67:57:98:
55:75:9c:26:74:4e:40:6e:0e:45:09:8e:ba:ea:e2:5c:ee:99:
28:dc:79:ae:35:32:63:43:c7:5e:35:0f:37:ae:32:1e:24:19:
2e:a8:1a:83:c0:64:4c:3a:73:8f:aa:48:06:ab:0b:e3:8c:0b:
7f:0e:37:16:1b:4d:14:01:dd:ea:c0:3c:a0:b9:0e:86:5d:7f:
20:b3:80:37:2f:1f:65:45:9e:aa:27:68:b9:76:18:c7:9f:d5:
1e:f2:b6:b1:a7:b2:53:c6:73:d8:fe:97:8a:07:df:de:8d:7a:
bf:cd:76:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:47:09 2025 by rpki-client