Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616336303a3a2f34342d3532203d3e203230343733.roa
File: 326130613a363034343a616336303a3a2f34342d3532203d3e203230343733.roa (raw, json)
Hash identifier: XMMjsdyWfJaDUREROoYN+rqmaYSHAzcG39cBlVF1yWE=
Subject key identifier: 7C:6B:E5:E6:EE:8F:FE:89:DC:A9:15:EC:23:42:07:34:30:D4:78:1D
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 49BA76115AE96D444FE15D94270299F4C6458DA3
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616336303a3a2f34342d3532203d3e203230343733.roa
Signing time: Fri 07 Feb 2025 18:39:42 +0000
ROA not before: Fri 07 Feb 2025 18:34:42 +0000
ROA not after: Fri 06 Feb 2026 18:39:42 +0000
asID: 20473
IP address blocks: 2a0a:6044:ac60::/44 maxlen: 52
Validation: Failed, certificate revoked on Fri 07 Feb 2025 21:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:ba:76:11:5a:e9:6d:44:4f:e1:5d:94:27:02:99:f4:c6:45:8d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 7 18:34:42 2025 GMT
Not After : Feb 6 18:39:42 2026 GMT
Subject: CN=7C6BE5E6EE8FFE89DCA915EC2342073430D4781D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:cf:ae:00:98:8a:01:21:84:4d:22:b2:a8:66:
df:56:85:b5:52:38:7e:c4:cb:02:71:e2:f2:b5:23:
b9:90:20:34:47:8e:f3:33:24:f6:2a:96:da:99:88:
bd:f4:4d:52:4d:dc:a4:46:06:25:a2:16:9b:a5:bc:
a0:a9:9e:af:98:23:ac:e0:19:87:49:30:ec:70:42:
36:ee:d4:91:24:6b:17:1f:6c:e6:1c:c4:c5:0f:53:
96:2d:06:0e:d0:5f:d3:f0:95:0b:e2:bf:6a:c4:99:
de:53:82:8b:87:ce:14:e2:54:e4:97:34:ca:23:26:
ec:1b:04:f4:40:21:de:66:32:56:e0:9b:97:a4:ae:
02:21:1f:54:a0:ab:15:ce:9c:d6:55:b1:c7:c7:23:
5d:a2:7f:e0:07:2b:6d:99:a7:e1:ea:a5:99:81:54:
b5:66:7d:52:24:66:6e:07:cb:6a:fc:36:c1:d0:d0:
11:c7:87:30:6c:df:6a:52:1b:f7:4f:30:af:37:75:
2c:5e:46:1a:4d:85:cb:b0:ef:2d:e2:f3:df:64:83:
37:50:ae:3b:3c:98:0f:cd:86:48:2a:5f:dc:3f:e2:
39:74:e7:d9:c3:cc:2d:85:84:4c:b5:4f:b3:9c:3f:
c3:69:61:56:14:08:9a:72:c6:12:be:a5:c5:dd:14:
b3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6B:E5:E6:EE:8F:FE:89:DC:A9:15:EC:23:42:07:34:30:D4:78:1D
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616336303a3a2f34342d3532203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac60::/44
Signature Algorithm: sha256WithRSAEncryption
1f:91:9b:47:9f:3b:87:63:4c:6c:29:3f:38:20:af:6d:49:b8:
d8:e2:b6:9c:12:05:e6:10:da:4c:42:a5:39:c2:1e:39:26:5b:
6d:83:d1:13:a2:02:62:fb:4c:20:5e:79:99:d8:7a:70:8e:9d:
f6:22:0a:42:fe:91:da:62:99:eb:c0:ba:d2:6c:1f:65:ed:ff:
da:2d:ac:72:63:04:6f:12:91:9e:d7:88:54:cf:0b:f5:f8:85:
ad:d9:5e:fb:4e:26:92:5f:10:71:f8:9a:73:89:46:8d:cd:94:
96:16:5d:aa:e8:46:4e:4b:e6:e8:93:7b:25:24:41:f1:c3:5b:
94:1f:d9:8f:3c:06:9b:b1:f2:ce:31:0e:99:94:c9:6b:95:42:
bb:33:7a:2c:ff:b3:fb:1f:a7:b9:79:74:7c:a4:a3:dd:35:f8:
d2:4e:d8:35:a9:ab:6e:b6:e1:ec:2e:d0:e4:8c:20:4f:4f:a3:
47:da:a5:1c:47:14:e6:ef:c9:9c:01:47:f4:63:e1:69:f1:ac:
63:be:f7:35:dd:12:fe:de:d1:21:f2:bc:cf:98:11:4d:5e:78:
e4:3a:03:fc:0b:50:40:b5:4a:bc:ea:7e:e4:92:b6:c0:11:c6:
53:a7:2b:61:6c:95:90:4e:5b:7a:6e:29:9b:6a:b9:17:bb:21:
42:a5:68:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:34:29 2025 by rpki-client