Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a363030303a3a2f33362d3336203d3e20323135383230.roa
File: 326130363a313238313a363030303a3a2f33362d3336203d3e20323135383230.roa (raw, json)
Hash identifier: 3l7Ji37t6kqBMM0fFLzsLHeqSLXgOoTwNxETjfHOrVY=
Subject key identifier: 45:44:60:87:AC:85:92:FC:28:9E:EC:E9:3B:90:53:BA:33:40:59:87
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 69E7AADF953084AD1572FE1A7CEA018E51908FD6
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a363030303a3a2f33362d3336203d3e20323135383230.roa
Signing time: Fri 28 Jun 2024 21:28:47 +0000
ROA not before: Fri 28 Jun 2024 21:23:47 +0000
ROA not after: Fri 27 Jun 2025 21:28:47 +0000
asID: 215820
IP address blocks: 2a06:1281:6000::/36 maxlen: 36
Validation: Failed, certificate revoked on Sat 29 Jun 2024 09:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:e7:aa:df:95:30:84:ad:15:72:fe:1a:7c:ea:01:8e:51:90:8f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Jun 28 21:23:47 2024 GMT
Not After : Jun 27 21:28:47 2025 GMT
Subject: CN=45446087AC8592FC289EECE93B9053BA33405987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:b4:0a:52:7e:42:8a:81:95:22:1c:59:37:
e0:91:36:ac:c9:2a:b9:30:63:1f:1c:28:4d:c4:18:
83:fd:23:57:ba:2e:28:f9:ff:4b:2f:a5:fb:b5:f3:
8b:cb:23:80:61:62:f9:bc:5f:4b:df:2f:b3:eb:4c:
58:1e:d8:88:ab:b5:e0:92:9c:5f:a6:75:7a:2b:52:
7d:b4:19:9e:41:87:d8:29:46:69:cc:60:4f:07:da:
81:67:5a:80:ac:fb:ca:c0:72:2f:60:5e:6b:d0:0b:
df:35:3e:b8:90:87:4f:d4:46:9a:9e:62:10:2c:b5:
8c:70:8a:03:4c:02:ac:d7:0f:33:99:af:cf:2f:24:
4f:61:31:b2:ac:da:a1:a8:8b:44:0c:1e:89:4f:a9:
b2:45:9b:4f:2a:aa:cc:fe:bf:a6:89:a7:d5:4a:40:
c0:cc:06:b1:10:ff:da:de:07:77:0b:2f:4c:8a:1f:
b3:2b:ef:ae:50:f4:68:f4:7a:57:4b:c1:71:e8:35:
9e:fd:bb:58:32:a2:74:15:f6:a9:29:a4:ed:1f:ba:
21:b5:5b:7b:fd:4c:37:c6:91:be:65:23:aa:cc:2c:
00:6f:6b:4e:6b:3e:c4:80:9c:35:d0:27:4a:d4:4c:
90:22:35:dd:fa:1b:c5:fc:44:d9:c3:0e:5c:d0:1b:
42:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:44:60:87:AC:85:92:FC:28:9E:EC:E9:3B:90:53:BA:33:40:59:87
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a363030303a3a2f33362d3336203d3e20323135383230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:6000::/36
Signature Algorithm: sha256WithRSAEncryption
44:da:6c:2e:9f:84:c8:e2:c9:2e:5f:f1:b6:73:27:99:ef:a8:
ed:bc:8e:b4:4e:77:dd:63:d2:90:11:97:94:22:1f:2d:4c:c2:
44:e6:bf:6b:69:89:06:24:b1:c9:c8:f5:5b:ce:7a:b2:b2:94:
aa:d1:3c:38:19:84:dd:50:08:3b:fa:35:d2:79:75:c2:ff:4f:
dd:a8:58:4a:1e:e1:62:15:09:02:15:d2:4f:43:12:83:59:b2:
a7:ad:1d:25:61:d3:13:30:dd:5a:2e:ad:51:70:fa:d4:96:af:
8f:1f:ff:a0:6c:e9:d2:95:96:e9:65:9f:ee:93:6e:5c:54:9d:
af:19:25:c2:63:68:63:f1:7e:ea:b2:1d:18:f4:66:d1:c3:16:
84:69:48:0e:b9:3c:43:2a:b3:d2:b0:cf:e8:6f:88:59:a7:5a:
6c:ea:7e:f1:c5:5d:89:2e:35:e5:23:20:28:be:6c:c7:3e:ba:
41:84:f3:ba:e0:75:fa:ce:17:3b:45:19:45:6d:e1:2f:fb:3c:
02:7b:e0:ec:88:fd:2f:41:4e:1d:59:1d:cc:58:76:62:53:5d:
84:8c:7e:74:29:63:2f:46:c9:2b:57:f7:32:8c:65:18:e8:cf:
9e:ba:56:6b:a0:9d:db:f6:16:38:5a:58:01:97:b8:35:9b:aa:
d8:9b:85:ad
-----BEGIN CERTIFICATE-----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Generated at Sat Jun 29 10:59:26 2024 by rpki-client on console-ams.rpki-client.org