Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/326130623a346530373a6130303a3a2f34312d3438203d3e20323036363034.roa
File: 326130623a346530373a6130303a3a2f34312d3438203d3e20323036363034.roa (raw, json)
Hash identifier: eHB6gK1i38NWV3ca794Ti45H7Tx6cPerjf0bXagP2Lo=
Subject key identifier: 08:CA:DB:8B:FC:0A:C3:CC:CD:7C:C1:2A:42:6D:FB:E1:F5:70:9C:A9
Certificate issuer: /CN=966427869FCAD15ECBE4F1C77A3FB3C68BD1F917
Certificate serial: 2F0BEE1CD0E3AF7E2D67E924BABF0FDBFF75C29D
Authority key identifier: 96:64:27:86:9F:CA:D1:5E:CB:E4:F1:C7:7A:3F:B3:C6:8B:D1:F9:17
Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/326130623a346530373a6130303a3a2f34312d3438203d3e20323036363034.roa
Signing time: Wed 16 Jul 2025 14:04:19 +0000
ROA not before: Wed 16 Jul 2025 13:59:19 +0000
ROA not after: Wed 15 Jul 2026 14:04:19 +0000
asID: 206604
IP address blocks: 2a0b:4e07:a00::/41 maxlen: 48
Validation: Failed, certificate revoked on Sun 20 Jul 2025 11:32:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:0b:ee:1c:d0:e3:af:7e:2d:67:e9:24:ba:bf:0f:db:ff:75:c2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966427869FCAD15ECBE4F1C77A3FB3C68BD1F917
Validity
Not Before: Jul 16 13:59:19 2025 GMT
Not After : Jul 15 14:04:19 2026 GMT
Subject: CN=08CADB8BFC0AC3CCCD7CC12A426DFBE1F5709CA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5c:59:16:56:88:2f:87:62:0e:39:88:1d:5a:
eb:b5:7a:87:e9:49:fd:08:d6:db:20:d6:c0:2f:8c:
b0:b9:0c:74:b2:ad:8f:b8:6d:30:19:4d:4e:1f:56:
69:87:b6:bb:2a:7a:af:b5:66:68:4f:2a:fe:d9:28:
7c:8d:2b:c6:59:cd:00:90:20:aa:0f:74:28:93:90:
cd:30:4e:e8:44:06:4e:fb:5c:b3:e0:30:ad:f2:a6:
07:49:06:94:b9:af:88:7b:2d:f2:66:1e:31:d9:6b:
09:1b:6b:29:fd:51:e6:20:ae:85:0d:d4:7f:26:36:
2c:27:0b:12:ca:e7:e5:ae:9b:44:3f:a1:bd:7c:0c:
a1:54:97:c9:b7:44:60:c9:b7:f2:82:0f:9e:a2:fe:
f3:f0:5d:c8:a6:f2:a6:ba:1a:f6:63:1f:66:e9:4a:
8c:32:f2:f6:a7:90:24:5d:44:e1:77:00:22:03:08:
f6:98:be:15:8c:cd:ed:a1:65:bf:06:6f:3e:5e:4a:
2b:4a:44:27:b4:a2:03:72:67:d2:cb:a8:e1:81:b9:
68:ed:d9:4c:f9:58:67:f6:41:fa:28:81:f8:0d:5d:
34:e4:da:27:f2:cb:f7:da:70:a7:7d:98:f1:6e:b4:
1c:19:20:4b:51:dd:16:ec:65:ee:2d:ac:0c:cf:d2:
5a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CA:DB:8B:FC:0A:C3:CC:CD:7C:C1:2A:42:6D:FB:E1:F5:70:9C:A9
X509v3 Authority Key Identifier:
keyid:96:64:27:86:9F:CA:D1:5E:CB:E4:F1:C7:7A:3F:B3:C6:8B:D1:F9:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/326130623a346530373a6130303a3a2f34312d3438203d3e20323036363034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:a00::/41
Signature Algorithm: sha256WithRSAEncryption
70:33:0c:c3:a7:a4:6f:0d:4d:51:7a:6a:10:ac:29:d6:39:e0:
6e:9d:6e:40:d3:be:6e:5a:f3:ff:ea:c9:d9:ae:b1:07:3b:af:
d3:a2:e1:ae:57:0f:33:b5:42:fe:e3:cc:ec:ff:1f:ac:de:4e:
42:74:b5:09:77:09:28:7b:38:97:dc:50:65:14:27:48:a7:75:
50:fe:08:a0:7f:45:30:54:53:2a:a8:78:50:63:62:bd:48:41:
de:b7:8d:4f:98:e7:be:4f:62:87:26:74:de:e7:17:70:f7:8a:
2c:8d:5a:85:7e:2d:7f:99:97:e5:13:06:38:5a:51:a5:2e:0f:
c6:c7:54:fb:4b:f6:46:01:19:14:c9:24:de:41:2a:5c:6c:c3:
57:3c:e0:b2:93:d6:96:be:0a:47:fe:86:54:9a:99:44:d6:f4:
38:01:23:bb:8e:58:69:2a:db:6d:f2:10:ec:e9:e5:e6:56:ca:
d7:ef:2d:ec:a2:03:be:7a:fc:d2:05:c8:e8:da:4d:58:91:53:
0c:11:b8:d8:37:4e:ff:0e:f7:3e:2a:21:74:84:f4:84:14:96:
b9:2d:d2:08:dd:54:a0:e4:ba:84:fe:38:94:0d:0d:3f:8d:05:
f9:30:c6:83:16:77:14:9a:5e:57:77:b7:a2:fa:5c:4f:c5:72:
6b:6c:a5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:39:54 2025 by rpki-client