Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663333333a3a2f34382d3438203d3e20323135343730.roa
File: 326131343a373538303a663333333a3a2f34382d3438203d3e20323135343730.roa (raw, json)
Hash identifier: NEF9WGabcr5tvgZ0fRprsA/uSNAAl+u5DlbX0w5lpqw=
Subject key identifier: 60:58:23:A0:35:60:A5:7E:0A:4B:E8:F8:9D:DC:2B:E8:03:6B:87:A2
Certificate issuer: /CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4
Certificate serial: 78541C6965A162C02A34A84F0C828FA83FE5E70A
Authority key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663333333a3a2f34382d3438203d3e20323135343730.roa
Signing time: Thu 27 Feb 2025 06:18:26 +0000
ROA not before: Thu 27 Feb 2025 06:13:26 +0000
ROA not after: Thu 26 Feb 2026 06:18:26 +0000
asID: 215470
IP address blocks: 2a14:7580:f333::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 27 Feb 2025 07:11:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:54:1c:69:65:a1:62:c0:2a:34:a8:4f:0c:82:8f:a8:3f:e5:e7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4
Validity
Not Before: Feb 27 06:13:26 2025 GMT
Not After : Feb 26 06:18:26 2026 GMT
Subject: CN=605823A03560A57E0A4BE8F89DDC2BE8036B87A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:17:40:b7:ef:95:d4:ea:30:b2:9c:4b:ae:40:
54:7a:30:f8:ac:32:38:12:fd:16:f0:6e:0c:7d:09:
95:50:08:07:5d:e8:1b:bf:78:6a:57:fb:44:35:0c:
41:72:4f:7b:3d:0b:5f:92:02:4a:35:58:8e:ba:ac:
44:1f:53:6b:83:67:cf:b4:3c:3e:10:be:13:26:5c:
c6:bc:dd:24:c2:b6:0d:cc:b5:d5:91:64:52:7c:93:
e0:e7:ec:ff:8e:60:c0:f8:9e:9e:57:3f:d9:3d:85:
81:e0:23:fd:ce:38:ac:10:50:85:8e:a0:30:ec:96:
df:71:05:c5:b2:b0:1c:87:20:20:36:b3:10:9e:89:
82:f6:d4:9d:f3:c1:6e:44:83:7d:a1:9f:90:36:6d:
73:d0:0f:67:39:23:0b:f8:20:4d:a6:96:41:3f:3e:
78:c7:7d:a9:4b:1f:c4:2d:f8:83:3c:84:8b:b5:77:
8b:97:eb:b2:bd:05:af:ae:6c:04:29:18:c5:11:db:
2a:37:0e:04:f4:03:3a:ee:ae:02:7c:b8:6e:31:06:
43:c4:d3:94:d9:2c:cc:3a:94:89:61:4d:1e:4b:22:
fa:0d:73:df:16:a3:7a:b7:2b:28:d9:57:62:62:c2:
5a:cd:04:c3:e9:c6:6b:eb:e2:71:90:2a:bb:36:78:
52:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:58:23:A0:35:60:A5:7E:0A:4B:E8:F8:9D:DC:2B:E8:03:6B:87:A2
X509v3 Authority Key Identifier:
keyid:F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663333333a3a2f34382d3438203d3e20323135343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:f333::/48
Signature Algorithm: sha256WithRSAEncryption
87:db:33:af:58:bd:32:85:8b:ab:1e:e1:48:fb:0f:5f:86:c3:
73:a5:46:f0:7b:86:47:a6:17:80:06:41:7f:4a:4e:e3:17:64:
ee:47:95:ef:6f:55:d5:6e:f9:c0:8e:f1:68:e4:85:32:6f:ae:
c5:8d:d1:30:62:8f:9b:3b:98:b2:4b:e9:43:99:d3:8a:87:7f:
03:cf:ca:2c:37:74:40:b6:a8:d1:e3:6b:c6:b4:d0:cf:d8:c3:
28:08:60:2c:27:fb:d5:63:6c:ff:45:8b:b6:66:ca:31:a2:ce:
bd:92:be:80:d9:0b:32:c8:9a:69:69:5f:ce:1c:69:46:13:3c:
28:41:c7:0a:5a:6d:e5:45:f4:f5:d0:ce:f7:c4:b6:e1:b0:45:
d6:d8:60:8d:c3:97:e7:64:bb:28:36:49:65:84:1f:59:dc:ba:
90:85:1e:1f:57:e6:94:15:97:73:6a:48:f8:e6:9f:08:68:60:
d3:1d:cc:a5:f3:45:27:6a:f8:37:1d:00:87:cf:bc:c8:28:64:
84:7a:ee:85:6a:64:15:e0:7b:ed:bb:09:6a:7e:ae:28:ca:37:
ca:08:b3:8e:d9:6d:61:39:52:f8:8e:f6:99:cf:f8:86:0d:d6:
13:7f:81:7c:a6:03:fe:3f:01:f0:8a:47:86:dd:14:c6:59:75:
62:ee:11:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:45 2025 by rpki-client