Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/323630323a663736313a31303a3a2f34342d3434203d3e20333937373330.roa
File: 323630323a663736313a31303a3a2f34342d3434203d3e20333937373330.roa (raw, json)
Hash identifier: l15a8ShPQ6II/OrBE4mhBjjJpYHVmfZ+VMqfMfncxJM=
Subject key identifier: 95:C4:01:51:AF:C9:E2:72:D0:E2:35:3D:8B:49:5E:6F:DB:74:27:CC
Certificate issuer: /CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80
Certificate serial: 1A6F5B68B5D276293C4F05139D2A4528C15CAC0D
Authority key identifier: FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/323630323a663736313a31303a3a2f34342d3434203d3e20333937373330.roa
Signing time: Thu 16 Jan 2025 13:28:50 +0000
ROA not before: Thu 16 Jan 2025 13:23:50 +0000
ROA not after: Thu 15 Jan 2026 13:28:50 +0000
asID: 397730
IP address blocks: 2602:f761:10::/44 maxlen: 44
Validation: Failed, certificate revoked on Tue 28 Jan 2025 19:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:6f:5b:68:b5:d2:76:29:3c:4f:05:13:9d:2a:45:28:c1:5c:ac:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80
Validity
Not Before: Jan 16 13:23:50 2025 GMT
Not After : Jan 15 13:28:50 2026 GMT
Subject: CN=95C40151AFC9E272D0E2353D8B495E6FDB7427CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b7:85:c9:a8:28:12:39:19:75:7b:bd:87:11:
16:e0:9e:06:21:5a:9b:40:d0:93:c9:47:25:a6:57:
b3:77:b7:6d:c5:1c:71:33:f0:41:ea:03:b0:01:ef:
64:cc:58:6d:99:40:71:5a:e8:4e:12:9f:a8:f1:a8:
ce:6f:d7:37:44:48:c6:9b:8c:83:e6:44:44:86:cb:
69:ec:ca:9e:bf:7c:7d:93:d4:89:93:3b:4a:1e:43:
62:70:8b:ea:c9:ec:2f:d5:eb:34:36:4d:07:62:d1:
cb:74:65:14:91:3e:6c:22:9f:18:e1:80:58:70:f9:
47:90:ac:c5:3f:79:dc:05:1a:37:7e:d9:d9:48:60:
ba:c2:58:e1:9a:96:7a:50:fe:a7:5b:47:be:49:46:
35:80:0f:d8:6c:07:69:01:8a:8b:5b:f3:cd:ca:88:
31:1a:3c:e4:09:0a:d6:1d:57:02:11:50:ec:2e:6d:
dc:8d:75:35:f4:5c:0f:b4:0f:35:44:7d:2e:8c:46:
0d:94:9f:fe:82:ed:c0:9e:c5:35:08:9e:4d:0f:ef:
9c:74:7f:dc:91:e2:23:12:f5:2b:dd:6c:69:00:45:
fc:8f:07:72:9d:3e:76:97:00:72:3d:cf:dc:e3:24:
29:93:e2:5b:dc:53:a3:92:0b:79:cf:b7:da:2e:3b:
59:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C4:01:51:AF:C9:E2:72:D0:E2:35:3D:8B:49:5E:6F:DB:74:27:CC
X509v3 Authority Key Identifier:
keyid:FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/323630323a663736313a31303a3a2f34342d3434203d3e20333937373330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f761:10::/44
Signature Algorithm: sha256WithRSAEncryption
07:88:41:25:ba:b5:7d:b1:34:bf:93:21:42:5a:9c:d5:4e:76:
cc:58:6a:1b:c5:88:88:e2:2b:39:7b:f4:50:7e:43:6d:de:5a:
36:88:75:ed:77:85:56:17:41:c5:e5:f6:f5:d9:37:f2:7c:59:
de:dc:24:47:8a:b9:f6:30:e3:de:c7:97:67:f4:b9:86:bc:67:
e7:cd:65:d8:14:7c:1d:6f:c1:cd:38:fa:a4:f1:5e:cd:85:96:
f0:51:57:f9:2a:e3:98:ab:9f:f9:e8:86:a1:53:38:fb:c5:09:
85:21:a5:5a:09:cf:3c:6c:ab:c3:ac:c7:fb:62:80:0d:3c:e7:
a5:b8:19:f6:a0:f4:a4:c7:7c:b1:f2:4a:e5:6b:48:09:8b:73:
c8:f1:7d:95:87:bf:ab:a6:ca:32:1a:2f:94:46:cb:04:b9:c3:
20:d3:a4:9b:32:d7:e4:f7:2d:6e:68:26:c2:c1:3e:80:af:4c:
ac:f4:4d:42:dd:0d:e8:2b:ea:bc:3e:41:2e:0b:94:3e:3c:63:
f1:c6:f5:b6:16:cc:8e:ec:57:bd:ec:91:68:5f:5e:12:c7:a9:
3a:90:02:2d:0c:1a:34:c4:ee:e7:27:80:ed:85:84:ea:d4:d8:
8c:0c:ae:3f:0b:65:62:3b:3d:36:75:eb:92:0b:f8:ce:2b:3d:
be:77:eb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:29 2025 by rpki-client