Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a613030303a3a2f33362d3336203d3e2030.roa
File: 326130393a353463363a613030303a3a2f33362d3336203d3e2030.roa (raw, json)
Hash identifier: y6ph5JBkomtD4KTTMB1Yc3c5AK1FmMXK3lAZqhUiXdY=
Subject key identifier: 01:6A:29:D8:70:8E:13:A5:E4:28:C5:CE:CB:EE:50:50:A5:CE:00:1F
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 72C0A995C1510A8A38257A9D772362137F2DC3A0
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a613030303a3a2f33362d3336203d3e2030.roa
Signing time: Thu 10 Apr 2025 18:02:49 +0000
ROA not before: Thu 10 Apr 2025 17:57:49 +0000
ROA not after: Thu 09 Apr 2026 18:02:49 +0000
asID: 0
IP address blocks: 2a09:54c6:a000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 10 Apr 2025 20:13:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:c0:a9:95:c1:51:0a:8a:38:25:7a:9d:77:23:62:13:7f:2d:c3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Apr 10 17:57:49 2025 GMT
Not After : Apr 9 18:02:49 2026 GMT
Subject: CN=016A29D8708E13A5E428C5CECBEE5050A5CE001F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:44:8f:aa:af:c7:bb:8a:6c:94:a5:03:30:6a:
ff:e7:0e:5b:56:ab:7f:9c:24:be:e7:d8:3d:42:62:
af:b6:f2:3e:ae:27:5f:88:31:9e:7c:ef:1b:6e:67:
97:20:31:ea:29:d5:71:71:57:81:48:41:28:0a:67:
6e:7c:61:89:4d:e8:70:07:eb:75:7c:83:51:25:ed:
62:36:de:b6:29:89:8f:8b:67:7e:15:56:52:d9:fb:
aa:68:56:c8:76:bd:c9:96:35:ad:2f:5f:e5:ae:81:
83:8c:ec:b3:45:bb:e4:2d:1b:74:d7:9a:ad:ae:6b:
2b:c1:f0:12:b6:99:69:77:a2:14:69:52:4a:e1:48:
c4:cf:22:e4:83:f7:82:33:6c:b5:37:42:55:fe:ad:
d0:ed:b1:00:7c:02:1b:a2:28:52:93:30:43:c6:6c:
9b:31:98:19:bb:3b:b1:c3:8e:41:86:16:be:a5:85:
98:d9:51:11:df:83:c7:63:81:1f:fe:b8:64:84:05:
6e:1b:ae:04:00:87:ab:f7:c5:c1:6d:c7:72:1f:75:
1a:a1:30:ab:cd:e5:02:58:c9:4f:67:17:d2:57:70:
66:81:54:80:74:9c:6d:8d:d3:27:39:82:6f:f6:fe:
48:e2:4a:66:a8:90:82:bf:64:cd:36:4d:77:0e:7d:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6A:29:D8:70:8E:13:A5:E4:28:C5:CE:CB:EE:50:50:A5:CE:00:1F
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a613030303a3a2f33362d3336203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:a000::/36
Signature Algorithm: sha256WithRSAEncryption
54:ba:dd:4c:ae:18:23:3c:22:04:63:aa:6a:e3:74:86:b5:ed:
21:70:7b:b6:bb:d1:dd:0d:a5:04:e8:38:f3:98:76:95:af:81:
e1:0d:94:62:0a:f4:d7:54:d6:0b:b0:9f:d5:c6:b9:64:17:10:
4c:34:13:2e:29:3c:ef:09:5d:1c:98:69:69:c6:8e:20:4f:7a:
ea:dd:b1:f5:07:31:00:c8:48:c7:85:d2:0d:bb:6e:a8:4f:c2:
b4:6c:00:56:1e:07:50:09:11:09:c3:f4:d1:8d:ad:49:87:1b:
12:fe:b7:77:aa:51:19:e1:1c:24:8b:0e:b9:fd:b4:35:57:47:
d2:d9:81:4f:d8:fd:bc:ae:16:b2:dd:fa:42:77:04:43:09:1b:
96:25:82:9a:38:ae:43:f7:ed:36:43:f5:e8:13:f6:4f:16:2f:
0c:3b:92:25:fd:ef:d5:5a:a0:d5:cd:7f:58:5e:6d:ea:07:ae:
2f:c4:c2:f2:89:42:7f:9a:54:10:2f:11:28:d3:a5:59:0a:57:
93:06:de:17:01:5b:70:32:2b:59:c3:8f:99:03:94:d3:ce:08:
fa:3c:ff:43:33:e2:c0:2c:a3:08:8e:0b:94:36:be:47:f7:8b:
ae:b8:08:59:ed:78:0b:05:8c:03:3e:10:a5:a9:f5:71:8b:e0:
eb:3b:26:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:40:16 2025 by rpki-client