Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a323030303a3a2f33352d3335203d3e203437323732.roa
File: 326130613a363034343a323030303a3a2f33352d3335203d3e203437323732.roa (raw, json)
Hash identifier: B2fXppmLYkJXB7H+qM97u1MN7ZIK0iqZ/FfhkvU9Elc=
Subject key identifier: 1A:A6:76:18:0A:90:55:9B:37:19:0C:9A:BB:A6:02:06:C8:0A:6D:05
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 345BB7CB35D007342547461C7AB527BBAC934BAB
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a323030303a3a2f33352d3335203d3e203437323732.roa
Signing time: Sun 03 Mar 2024 10:40:01 +0000
ROA not before: Sun 03 Mar 2024 10:35:01 +0000
ROA not after: Sun 02 Mar 2025 10:40:01 +0000
asID: 47272
IP address blocks: 2a0a:6044:2000::/35 maxlen: 35
Validation: Failed, certificate revoked on Thu 11 Apr 2024 17:55:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:5b:b7:cb:35:d0:07:34:25:47:46:1c:7a:b5:27:bb:ac:93:4b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Mar 3 10:35:01 2024 GMT
Not After : Mar 2 10:40:01 2025 GMT
Subject: CN=1AA676180A90559B37190C9ABBA60206C80A6D05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:01:16:23:b9:68:a1:94:e2:df:44:7b:46:
41:56:79:52:90:a7:1d:ad:86:74:9e:7a:b8:7b:0a:
9a:3e:63:cb:d5:38:2e:2c:2c:db:8d:b2:0a:f7:bf:
bb:8c:4a:5b:5d:68:56:96:4e:bb:95:a7:7e:ab:4d:
3f:96:f1:f4:9c:e3:eb:5e:70:ca:93:1f:6b:fb:46:
13:d3:91:e0:b2:3c:db:6c:7f:95:3e:78:5a:de:ac:
70:f3:4b:9b:28:a3:49:29:1d:7d:57:0b:0d:f0:2a:
78:e1:39:86:bb:a4:f3:ce:a5:5c:20:ba:2a:76:31:
d5:b4:30:c5:ff:59:c1:03:ea:85:4c:6a:37:78:74:
30:6d:ee:7c:6e:91:30:e7:6c:7d:72:32:7f:0c:73:
45:0d:c5:35:7e:57:01:f8:52:2e:e8:09:94:bb:78:
59:56:a8:36:80:3b:a3:29:5d:48:fa:79:ff:0b:28:
39:c8:c2:38:13:2e:d9:97:d2:62:51:7e:25:05:90:
c7:b4:c4:ff:6e:b2:94:99:5a:3c:59:da:7a:b1:40:
69:a4:b1:d7:e3:2d:42:36:b7:0f:c1:62:7c:84:b5:
1e:47:ba:29:04:1d:bd:58:fe:e1:ba:91:85:74:c7:
50:90:ca:19:49:df:d2:14:03:6e:a9:56:b6:1c:ae:
5e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A6:76:18:0A:90:55:9B:37:19:0C:9A:BB:A6:02:06:C8:0A:6D:05
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a323030303a3a2f33352d3335203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:2000::/35
Signature Algorithm: sha256WithRSAEncryption
10:c4:55:26:21:2d:5c:dd:4e:ba:40:ae:10:0e:5f:11:39:a6:
db:e5:7c:ed:66:23:77:09:b4:c3:90:3c:9f:66:46:da:c7:5e:
d0:95:3b:2d:b0:f1:f2:3e:25:56:0a:ba:22:8d:db:80:54:c9:
da:28:f6:9e:51:df:0a:be:01:30:18:f6:cd:94:34:09:76:aa:
21:66:bf:cd:50:f4:02:05:3b:21:ce:d6:fa:77:7f:e3:99:f1:
e5:40:b1:dd:c0:ca:09:34:ee:7f:11:6d:7f:f1:ac:d4:56:1f:
93:e0:73:c5:e7:cf:ce:4d:aa:65:cc:2c:56:ed:1b:0f:3b:01:
cc:a8:3d:ad:45:c9:eb:67:51:e1:ad:3a:74:a1:e5:25:4e:3c:
19:cb:da:09:71:52:73:5b:0b:ae:21:4f:2f:12:1c:3c:89:ac:
98:94:29:2a:7d:77:cb:de:e2:a3:7d:95:7c:53:6b:12:77:60:
c0:09:a2:52:e8:c4:df:1e:af:2c:13:b4:fa:05:49:5f:ee:ac:
12:93:e3:9c:2d:ef:85:31:c4:1e:23:5c:7f:cb:ea:26:0f:d4:
ad:92:ed:8a:73:bb:9c:46:8d:90:65:15:eb:70:ec:0d:c1:db:
ea:f4:e0:76:4b:5b:3f:c1:0e:2c:b2:3a:71:e0:0b:08:51:af:
69:79:e9:60
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUNFu3yzXQBzQlR0YcerUnu6yTS6swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDAzMDMxMDM1MDFaFw0yNTAzMDIxMDQwMDFaMDMxMTAvBgNV
BAMTKDFBQTY3NjE4MEE5MDU1OUIzNzE5MEM5QUJCQTYwMjA2QzgwQTZEMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLjAEWI7looZTi30R7RkFWeVKQ
px2thnSeerh7Cpo+Y8vVOC4sLNuNsgr3v7uMSltdaFaWTruVp36rTT+W8fSc4+te
cMqTH2v7RhPTkeCyPNtsf5U+eFrerHDzS5soo0kpHX1XCw3wKnjhOYa7pPPOpVwg
uip2MdW0MMX/WcED6oVMajd4dDBt7nxukTDnbH1yMn8Mc0UNxTV+VwH4Ui7oCZS7
eFlWqDaAO6MpXUj6ef8LKDnIwjgTLtmX0mJRfiUFkMe0xP9uspSZWjxZ2nqxQGmk
sdfjLUI2tw/BYnyEtR5HuikEHb1Y/uG6kYV0x1CQyhlJ39IUA26pVrYcrl7bAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUGqZ2GAqQVZs3GQyau6YCBsgKbQUwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2EzMjMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNkM2UyMDM0MzczMjM3MzIucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgUqCmBEIDANBgkqhkiG9w0BAQsFAAOCAQEAEMRVJiEtXN1OukCuEA5f
ETmm2+V87WYjdwm0w5A8n2ZG2sde0JU7LbDx8j4lVgq6Io3bgFTJ2ij2nlHfCr4B
MBj2zZQ0CXaqIWa/zVD0AgU7Ic7W+nd/45nx5UCx3cDKCTTufxFtf/Gs1FYfk+Bz
xefPzk2qZcwsVu0bDzsBzKg9rUXJ62dR4a06dKHlJU48GcvaCXFSc1sLriFPLxIc
PImsmJQpKn13y97io32VfFNrEndgwAmiUujE3x6vLBO0+gVJX+6sEpPjnC3vhTHE
HiNcf8vqJg/UrZLtinO7nEaNkGUV63DsDcHb6vTgdktbP8EOLLI6ceALCFGvaXnp
YA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:11 2024 by rpki-client on console-fra.rpki-client.org