Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/326130363a396634343a663030313a3a2f34382d3438203d3e20313530323439.roa
File: 326130363a396634343a663030313a3a2f34382d3438203d3e20313530323439.roa (raw, json)
Hash identifier: 7X8BdkGlRbfDNwlENbGtjNiECbJZjgvdLuwanz6cvno=
Subject key identifier: C4:82:AA:21:7E:A9:DB:52:58:6F:58:84:9B:BC:5A:99:BA:84:55:2E
Certificate issuer: /CN=B9542CF5B0923A9011033E2F7CA543D6A25A48C1
Certificate serial: 74D292FBED8339C17D9F5FEA3F8616B69FC52141
Authority key identifier: B9:54:2C:F5:B0:92:3A:90:11:03:3E:2F:7C:A5:43:D6:A2:5A:48:C1
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/326130363a396634343a663030313a3a2f34382d3438203d3e20313530323439.roa
Signing time: Mon 11 Dec 2023 03:07:52 +0000
ROA not before: Mon 11 Dec 2023 03:02:52 +0000
ROA not after: Mon 09 Dec 2024 03:07:52 +0000
asID: 150249
IP address blocks: 2a06:9f44:f001::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 26 Jan 2024 10:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:d2:92:fb:ed:83:39:c1:7d:9f:5f:ea:3f:86:16:b6:9f:c5:21:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9542CF5B0923A9011033E2F7CA543D6A25A48C1
Validity
Not Before: Dec 11 03:02:52 2023 GMT
Not After : Dec 9 03:07:52 2024 GMT
Subject: CN=C482AA217EA9DB52586F58849BBC5A99BA84552E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e4:26:86:b3:44:6a:e5:d6:4d:b0:6f:7f:ca:
8b:04:ee:d6:14:bb:70:06:07:d2:30:53:fa:0a:c4:
4a:eb:1b:57:3b:73:fe:f2:5c:87:07:54:c9:ab:f6:
8a:7b:f0:88:9b:b1:9a:b5:d1:df:09:7a:f8:dc:c1:
1d:12:5c:ca:48:92:11:7d:6c:b2:f1:36:ee:a5:23:
60:08:31:f0:59:81:eb:a9:bb:80:3c:74:0a:fd:eb:
d2:41:7e:45:c5:4e:cd:42:33:46:c0:71:76:df:dd:
94:62:23:ef:46:62:8e:79:6d:80:49:1a:91:7a:1b:
ac:7d:ed:9d:e0:17:e9:f5:c3:fa:40:bc:7f:a4:d4:
80:be:45:01:4c:98:f5:9c:be:d7:07:61:64:95:09:
57:9b:5c:c2:ad:88:a0:74:86:ba:22:3f:e8:56:ac:
23:30:50:ab:b5:dd:c6:ab:df:1f:58:83:b1:cd:50:
9c:50:8b:2b:56:97:fb:a8:39:87:ea:dd:f4:94:fd:
96:75:e5:61:4b:a6:3b:fc:03:4c:34:55:e0:95:ff:
3a:fe:d2:38:86:9d:ee:a0:a7:55:23:f9:98:96:60:
44:84:a7:d8:da:81:84:23:90:63:a5:d9:0e:60:df:
ba:73:9e:46:95:3f:bd:1b:65:83:96:69:f7:a5:3a:
e4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:82:AA:21:7E:A9:DB:52:58:6F:58:84:9B:BC:5A:99:BA:84:55:2E
X509v3 Authority Key Identifier:
keyid:B9:54:2C:F5:B0:92:3A:90:11:03:3E:2F:7C:A5:43:D6:A2:5A:48:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/326130363a396634343a663030313a3a2f34382d3438203d3e20313530323439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f44:f001::/48
Signature Algorithm: sha256WithRSAEncryption
cb:53:35:b8:cc:45:5e:bc:ba:0b:bb:80:81:24:8d:d3:27:79:
a4:6d:b6:ce:9a:55:1f:7f:9b:11:6e:57:a7:41:c9:e0:f4:28:
6c:34:9e:a6:ed:7e:c4:46:30:74:58:15:62:51:77:dd:f0:f4:
98:b1:53:9b:5c:25:4c:ef:1e:24:6b:db:3b:98:1f:93:40:ef:
47:d8:2a:e1:1b:2a:62:63:14:1c:2e:16:cc:d5:2a:82:44:93:
61:24:9f:cd:ec:64:fd:0d:76:9f:e6:2c:2f:ee:ae:0f:ab:08:
dc:52:7a:bd:ed:c5:fa:5a:a5:3b:0a:33:78:20:6b:f6:83:9d:
42:1c:a6:2d:62:c9:8d:d5:ac:0d:98:ab:30:ea:80:64:84:d7:
7f:9b:9b:c6:c0:ed:09:cb:5f:e7:f0:a8:39:3c:61:00:76:95:
77:d5:dd:47:ac:3e:29:89:c7:a0:64:09:c0:7f:b7:97:7e:51:
c2:29:51:15:1d:05:6e:31:e8:42:f7:42:45:f0:d9:f5:d7:57:
38:72:f9:58:43:1c:c8:db:78:03:05:aa:6d:40:59:4a:93:02:
02:6f:73:05:66:bd:ba:6f:35:ed:05:d6:3f:29:4a:74:5b:7e:
7e:bf:77:77:f2:25:2f:d2:b2:94:9b:9c:30:5d:fa:b8:ae:c4:
9a:d3:c2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:56 2024 by rpki-client on console-ams.rpki-client.org