Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a333a3a2f34382d3438203d3e203437323732.roa
File: 326130613a363034343a333a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier: sJDqrkvsC1iphRWJF6t5qbKNY2gaTCFuoyEvpXLyqHs=
Subject key identifier: 1B:C3:A2:04:AB:32:42:53:D8:2E:53:C8:5E:0C:64:31:2D:3E:AD:36
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 4AEAD8064B3B18ECB859D0789CEDACD1AF44DF36
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a333a3a2f34382d3438203d3e203437323732.roa
Signing time: Wed 29 May 2024 02:48:57 +0000
ROA not before: Wed 29 May 2024 02:43:57 +0000
ROA not after: Wed 28 May 2025 02:48:57 +0000
asID: 47272
IP address blocks: 2a0a:6044:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ea:d8:06:4b:3b:18:ec:b8:59:d0:78:9c:ed:ac:d1:af:44:df:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: May 29 02:43:57 2024 GMT
Not After : May 28 02:48:57 2025 GMT
Subject: CN=1BC3A204AB324253D82E53C85E0C64312D3EAD36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:d6:c0:3d:0d:cf:3c:88:ef:97:fd:b9:ee:
d1:08:97:fd:4f:64:a3:87:d8:bc:9f:32:6a:57:0b:
16:f1:36:77:7c:4d:ad:f2:a4:a9:bb:84:de:63:0a:
8d:d3:d9:fd:93:a4:17:75:4d:5a:aa:c0:ab:f9:8e:
2d:34:59:3c:df:1e:0f:4f:1f:37:af:e0:60:e8:c4:
51:2f:45:31:cf:4d:2d:a0:4f:38:9e:ed:5b:fd:f2:
5c:cc:65:79:6e:d0:74:b8:72:89:96:de:33:88:5c:
7a:55:aa:ad:4c:1d:9a:b2:f0:f1:67:e5:4c:cf:b7:
53:c3:3d:fe:26:59:6b:8b:d1:46:e6:b6:fa:5f:eb:
07:b2:23:ac:46:b8:d9:c2:0f:b5:7d:9b:37:b7:6f:
7b:fa:ec:90:44:3b:ab:6d:e7:45:28:a5:9c:2a:3d:
40:6e:40:28:5b:fc:8c:a8:d6:87:11:b7:52:74:b1:
c9:00:bf:e3:b3:69:26:dc:48:be:ee:16:9a:bc:45:
18:6e:55:8c:64:e8:e9:a1:ef:ba:66:9f:8c:ef:31:
33:a5:28:88:e1:bf:d8:67:8a:bc:c4:2d:50:5d:99:
88:86:ad:88:b6:a3:dd:9e:f6:c1:de:51:a5:d1:d3:
cb:ba:f0:21:9d:ae:65:63:a7:c0:9b:c2:af:63:e7:
39:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C3:A2:04:AB:32:42:53:D8:2E:53:C8:5E:0C:64:31:2D:3E:AD:36
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a333a3a2f34382d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:3::/48
Signature Algorithm: sha256WithRSAEncryption
5f:d3:97:f0:33:88:96:40:d7:de:92:3a:0f:19:26:40:6e:a3:
48:03:da:be:19:63:4a:b5:db:96:31:0a:76:60:83:f9:01:7e:
6e:03:02:b4:da:15:bb:29:bd:9c:07:24:bd:ba:17:57:da:8a:
2d:1e:25:d3:39:8a:04:ea:e2:fb:fd:1e:37:79:a2:f5:be:fe:
dc:dc:0d:6e:0b:63:96:17:b1:d5:a3:54:94:f6:fc:7c:24:ea:
61:4e:df:97:8a:24:1a:06:03:e9:9b:40:15:10:b6:3f:14:7a:
bd:50:db:48:a3:ea:3c:26:f3:4a:38:20:8b:5f:ee:58:71:32:
15:7b:7d:0d:c3:42:ad:ca:a1:c7:bf:1c:41:8b:05:c5:ff:50:
ec:8f:90:e8:3c:cc:3d:16:95:2f:a1:f0:36:09:e6:41:50:e7:
ec:aa:ec:63:4f:44:47:b5:66:c5:61:e6:e7:ab:17:71:66:5c:
ef:23:a3:54:04:a5:fa:43:9e:67:bf:3b:b9:5e:0f:43:4c:73:
94:02:f7:6c:cf:e1:1f:36:0a:ec:9f:03:e8:2b:a7:61:b6:94:
01:06:1e:73:2c:3d:2e:7f:dd:3c:a3:f5:bf:36:c8:40:10:e8:
3a:3a:25:79:38:c4:98:4b:b6:e0:74:15:77:8a:e7:bf:c8:c0:
73:c3:34:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 06:12:37 2024 by rpki-client on console-ams.rpki-client.org