Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a3a2f33342d3334203d3e2030.roa
File: 326130363a313238333a3a2f33342d3334203d3e2030.roa (raw, json)
Hash identifier: 3Y2M+T2N0idKfObjfPRzvDNH97Loiza4cX5rmBOC6ls=
Subject key identifier: F2:00:38:38:44:20:C3:AC:D7:4B:15:84:FB:85:00:05:07:34:50:CD
Certificate issuer: /CN=20595BDBAD09C7D604202305854D1DF14F190959
Certificate serial: 046C7C8744671FDB079B199A3C7808C0B09F60D2
Authority key identifier: 20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a3a2f33342d3334203d3e2030.roa
Signing time: Mon 10 Mar 2025 09:32:58 +0000
ROA not before: Mon 10 Mar 2025 09:27:58 +0000
ROA not after: Mon 09 Mar 2026 09:32:58 +0000
asID: 0
IP address blocks: 2a06:1283::/34 maxlen: 34
Validation: Failed, certificate revoked on Fri 14 Mar 2025 20:14:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:6c:7c:87:44:67:1f:db:07:9b:19:9a:3c:78:08:c0:b0:9f:60:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20595BDBAD09C7D604202305854D1DF14F190959
Validity
Not Before: Mar 10 09:27:58 2025 GMT
Not After : Mar 9 09:32:58 2026 GMT
Subject: CN=F20038384420C3ACD74B1584FB850005073450CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:48:b2:20:fc:fd:3b:ae:df:3d:ce:9f:fa:
86:ec:aa:3f:51:8b:3f:79:13:cb:05:ee:e4:aa:1e:
d9:a1:c3:20:54:92:d9:9d:31:e7:89:a3:44:d6:e0:
3c:b9:ac:35:04:d3:6a:1c:7a:b8:56:a2:5f:bd:9e:
04:96:ee:c2:25:86:80:c2:6d:f2:81:99:01:ea:b0:
34:36:37:88:69:37:0b:90:fc:1f:b3:62:c6:55:ae:
18:d5:a1:72:63:9a:52:ee:a7:f4:2d:49:4e:60:27:
70:3d:82:0b:dd:5e:3d:c3:d1:d5:ca:48:b5:e3:d4:
d1:df:01:67:0a:cb:9c:d0:d1:03:99:cd:0a:59:ba:
2e:19:34:8a:e4:81:c6:4a:30:a6:59:bc:f7:a5:e1:
bb:a3:5e:aa:3a:48:96:bb:ef:93:83:ae:fe:ae:bc:
d2:f0:db:73:5c:d2:a5:a4:03:f7:54:14:be:4c:94:
5a:1f:db:d4:10:41:f6:c4:10:0f:4f:c3:cc:f4:75:
c4:ab:42:d5:6f:fd:b9:0f:ce:cc:d5:9b:5d:b9:56:
3c:75:fd:da:ab:c3:b7:f9:46:1c:90:24:0a:b3:b4:
e2:cc:62:b4:c7:8b:8f:63:8d:dc:8a:bf:0e:2c:0d:
31:b3:5c:ed:7a:d9:50:ac:c1:8d:51:7e:5d:75:f7:
94:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:00:38:38:44:20:C3:AC:D7:4B:15:84:FB:85:00:05:07:34:50:CD
X509v3 Authority Key Identifier:
keyid:20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a3a2f33342d3334203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283::/34
Signature Algorithm: sha256WithRSAEncryption
b1:dd:43:5f:5f:67:18:7b:a1:ad:ad:a1:82:62:a5:95:f0:d5:
db:0c:47:06:2e:85:22:7f:4a:1b:a6:e5:eb:43:79:b5:ca:59:
dd:f7:92:dc:e2:7b:c2:6c:89:72:df:1a:80:4d:59:18:9d:83:
45:ba:23:a8:f0:24:db:88:10:72:68:5f:2f:aa:56:4f:73:13:
7a:12:15:65:d7:17:8e:37:fc:ba:3c:62:fa:4e:83:9c:ce:a5:
09:9a:7f:42:4f:75:97:4c:ec:d4:5c:7d:c0:cc:6b:d9:d8:a7:
80:5b:94:ce:ea:2d:f7:f8:77:05:ea:20:82:0e:d5:65:67:e2:
06:1c:bf:a4:66:75:b6:d6:64:c7:70:3d:6b:4b:1b:30:2a:85:
21:d8:d2:a9:df:7d:0e:74:14:59:5f:d1:5f:4f:3e:72:78:47:
2d:aa:6f:89:38:24:50:ca:33:b6:9e:27:bf:73:91:fc:d8:4a:
ec:95:d6:b8:fa:ed:07:ad:8d:50:58:1d:5d:b4:07:cd:3f:4b:
2e:22:63:3b:cf:a1:0b:2e:e4:99:b5:c2:7b:2a:1d:dc:18:bb:
ba:98:f3:31:1d:81:c8:4f:24:90:be:c9:4d:20:72:62:65:bf:
b3:94:fd:64:38:f0:f8:80:db:4b:76:65:ce:87:dc:79:0a:c1:
1b:73:57:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:05 2025 by rpki-client