Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a613030303a3a2f33362d3438203d3e20323134353439.roa
File: 326130363a313238313a613030303a3a2f33362d3438203d3e20323134353439.roa (raw, json)
Hash identifier: /O2vak5zD2A8B8iPQ+jZOTwj2bXDl1qtzD0eAFwdW7E=
Subject key identifier: 3F:B4:26:E9:68:3F:45:A8:35:2E:AE:6C:5C:BB:F1:03:20:AD:5A:AC
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 4E6BB92116A7833FCD9958E1466F75633ACBE705
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a613030303a3a2f33362d3438203d3e20323134353439.roa
Signing time: Thu 01 Aug 2024 14:41:01 +0000
ROA not before: Thu 01 Aug 2024 14:36:01 +0000
ROA not after: Thu 31 Jul 2025 14:41:01 +0000
asID: 214549
IP address blocks: 2a06:1281:a000::/36 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:6b:b9:21:16:a7:83:3f:cd:99:58:e1:46:6f:75:63:3a:cb:e7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Aug 1 14:36:01 2024 GMT
Not After : Jul 31 14:41:01 2025 GMT
Subject: CN=3FB426E9683F45A8352EAE6C5CBBF10320AD5AAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:71:0d:01:6c:e9:e9:83:86:24:fa:62:44:33:
22:63:68:f4:11:25:7c:82:47:6c:11:98:cf:95:06:
de:9c:0f:10:3f:7f:ea:4f:44:ce:5d:54:57:8f:ea:
d7:7f:0b:fe:ba:d2:ed:6e:3b:9f:98:2a:8c:68:b0:
40:92:b7:a0:9a:5d:d8:03:e9:4e:b3:55:46:35:fe:
d5:18:98:50:7a:dc:71:57:6a:6a:49:39:fe:fc:15:
bc:9e:d5:9a:6c:c3:ad:07:ea:97:64:1d:3b:df:10:
5b:0c:fe:63:1e:ff:ac:d1:f2:a4:f9:9f:85:16:f0:
48:4f:3d:c7:70:53:dc:80:2f:34:6e:40:99:9a:22:
36:c3:71:5c:f8:91:70:e7:fc:9e:30:68:15:30:25:
6a:38:82:bc:ce:0c:f7:fe:59:6c:eb:b0:1f:ee:a1:
a7:ea:73:ee:5a:99:c6:b0:21:92:35:ea:85:ac:b3:
45:e6:a7:ca:26:ad:69:40:60:01:4f:fd:cc:a5:7b:
fc:35:ac:53:eb:66:61:b2:e7:0d:cd:0d:db:9f:ef:
bb:78:ca:09:f3:d6:f7:5d:6f:fd:a3:cc:1d:47:e5:
b7:d5:30:51:b8:b2:3d:71:3b:cf:14:40:9d:4e:62:
52:a7:18:6c:66:2b:eb:b7:09:59:16:ab:fa:2a:5e:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B4:26:E9:68:3F:45:A8:35:2E:AE:6C:5C:BB:F1:03:20:AD:5A:AC
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130363a313238313a613030303a3a2f33362d3438203d3e20323134353439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:a000::/36
Signature Algorithm: sha256WithRSAEncryption
a9:d5:97:05:25:2d:a6:29:ab:22:1d:73:00:9e:11:4a:80:d3:
a6:a2:c3:15:ce:09:c5:32:31:1f:a3:7e:90:24:45:b2:ff:96:
0d:d0:e1:c3:13:4f:75:f2:87:44:7b:c3:3c:ef:23:77:ee:6d:
66:89:28:36:43:c5:f8:eb:c4:3c:cc:03:04:bc:ac:b1:4f:e9:
3a:9f:72:b4:f4:a9:2f:a3:24:2b:d7:15:47:2f:ac:c5:c7:3e:
8d:fd:40:69:fb:b2:01:12:04:bb:cc:ce:38:43:31:ea:58:cd:
57:27:ac:8c:06:ef:ff:ce:82:94:f6:43:fa:30:3e:29:de:f1:
f8:b2:b0:dc:31:39:eb:22:ae:e4:46:e7:49:bc:e6:01:3b:84:
46:84:66:b7:b2:0b:ef:27:c5:d1:8a:d8:bb:d8:48:ca:a2:9c:
75:e2:ec:1c:7d:5d:8a:ac:b8:8f:32:bb:8d:21:06:48:48:bb:
21:08:28:6c:9b:fa:86:49:59:e9:00:9f:b9:9b:ef:ec:a2:d1:
a2:f2:6d:ae:ec:81:34:26:c7:66:cc:6c:6d:9d:2c:c8:65:31:
26:09:e8:34:ca:6b:86:76:fd:70:9c:94:86:cd:4e:c7:ef:6a:
5e:e8:04:96:21:6d:3e:c9:f2:46:c2:86:5a:19:74:dd:98:45:
f0:22:8e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 06:12:37 2024 by rpki-client on console-ams.rpki-client.org