Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/326130623a346530373a6130313a3a2f34382d3438203d3e20323134333639.roa
File: 326130623a346530373a6130313a3a2f34382d3438203d3e20323134333639.roa (raw, json)
Hash identifier: PwXt5uwXIgzGhaOap+68QJ8Jq50H7C3izRUtTAOJxJs=
Subject key identifier: 4A:F5:D5:0E:29:02:77:AA:AC:55:84:D3:93:C1:22:83:74:D8:8C:24
Certificate issuer: /CN=966427869FCAD15ECBE4F1C77A3FB3C68BD1F917
Certificate serial: 2DFC53FC671F4F67A4F3ACD540E4EE9C81298FA1
Authority key identifier: 96:64:27:86:9F:CA:D1:5E:CB:E4:F1:C7:7A:3F:B3:C6:8B:D1:F9:17
Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/326130623a346530373a6130313a3a2f34382d3438203d3e20323134333639.roa
Signing time: Wed 16 Jul 2025 09:28:21 +0000
ROA not before: Wed 16 Jul 2025 09:23:21 +0000
ROA not after: Wed 15 Jul 2026 09:28:21 +0000
asID: 214369
IP address blocks: 2a0b:4e07:a01::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 16 Jul 2025 12:52:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:fc:53:fc:67:1f:4f:67:a4:f3:ac:d5:40:e4:ee:9c:81:29:8f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966427869FCAD15ECBE4F1C77A3FB3C68BD1F917
Validity
Not Before: Jul 16 09:23:21 2025 GMT
Not After : Jul 15 09:28:21 2026 GMT
Subject: CN=4AF5D50E290277AAAC5584D393C1228374D88C24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1f:ce:7f:f3:85:42:42:63:99:8e:15:6a:25:
ea:f3:33:32:6d:fa:51:4e:db:18:0f:3b:30:24:20:
8a:be:dc:f4:ad:34:5f:f1:f3:40:f0:d6:0d:0d:da:
c6:14:57:51:4e:cd:8f:8b:3b:91:ce:09:be:62:83:
1b:35:2f:f2:15:9c:68:34:ea:ea:3a:ed:05:b5:5a:
36:f8:9a:59:ed:96:b6:e2:a0:e3:ca:95:34:1e:89:
b4:b9:c4:09:a0:de:e8:9e:40:9a:39:4e:52:3e:d0:
72:5f:1e:f2:6e:73:4c:5e:14:48:99:b3:80:48:4e:
10:50:c1:73:5c:87:ac:b2:24:1a:68:d6:3d:7b:54:
5c:5f:07:ca:80:5f:a1:8c:fb:86:d6:48:82:13:f2:
cb:7c:a5:f7:94:41:a9:5c:06:b8:54:f1:8d:21:82:
28:49:5d:3d:3d:47:8a:0f:1c:b4:da:19:74:3e:a8:
ce:f9:8e:3e:f7:7e:7f:40:73:42:65:30:82:d0:fe:
20:6d:df:da:d8:2c:59:e1:5c:59:d4:dc:e5:4b:d4:
5d:9f:00:38:42:22:11:ec:6a:ae:5a:72:bd:83:27:
98:da:3e:c6:8d:ed:fe:7e:27:22:a0:2a:aa:2a:ba:
3d:44:cb:eb:3a:e6:4a:4d:67:a0:2f:51:5f:02:2a:
12:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F5:D5:0E:29:02:77:AA:AC:55:84:D3:93:C1:22:83:74:D8:8C:24
X509v3 Authority Key Identifier:
keyid:96:64:27:86:9F:CA:D1:5E:CB:E4:F1:C7:7A:3F:B3:C6:8B:D1:F9:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/326130623a346530373a6130313a3a2f34382d3438203d3e20323134333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:a01::/48
Signature Algorithm: sha256WithRSAEncryption
94:2f:7a:29:14:70:9a:ac:a7:27:a5:25:9f:eb:43:bd:76:fb:
5f:e6:c1:83:1b:d3:18:fb:cb:37:c5:25:d5:64:90:15:87:90:
6c:3f:db:b1:1c:c7:55:6a:fb:e0:69:4b:bf:ef:21:79:fa:c7:
a5:86:5f:83:97:c8:4e:5b:c9:b7:40:19:15:a5:f1:2a:8e:9d:
8c:0e:c1:27:24:cf:ac:29:f6:2f:86:1e:72:7f:f2:b0:37:d0:
15:d4:a0:0f:28:14:39:07:3a:66:7f:88:75:a7:42:c3:eb:18:
0f:0a:32:db:d0:45:ca:c2:3e:91:c6:eb:94:0a:7a:13:f5:b0:
77:b1:1c:ca:a1:d4:db:07:10:77:9c:0e:de:df:21:84:52:5b:
07:91:62:87:9b:0b:08:64:b5:e2:a8:27:67:2e:48:9f:de:23:
60:b3:47:38:3f:ac:cd:2f:4d:05:7a:79:98:18:d0:5c:31:76:
56:eb:08:8b:11:87:56:aa:3c:5d:c0:50:56:80:e8:af:34:a2:
cb:25:7f:29:4a:a5:46:77:5e:5c:fd:24:0b:c5:14:d8:e4:dc:
62:2c:4d:20:8b:12:94:d7:2b:c3:2c:2b:9d:83:c5:64:6d:ad:
e7:83:6e:88:2a:b7:67:79:ae:a0:9c:53:0a:20:ca:64:f2:9c:
d2:43:5c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:34:25 2025 by rpki-client