Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a343030303a3a2f33352d3335203d3e203437323732.roa
File: 326130613a363034343a343030303a3a2f33352d3335203d3e203437323732.roa (raw, json)
Hash identifier: aW3xHFmnkrJ7q15uQgPme4+xaE3qSczDzGaNudY7sqw=
Subject key identifier: 1F:20:E6:40:A9:C4:AE:E6:44:93:4C:BF:22:28:80:69:81:5A:FD:F8
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 78BCCD4993F878E667037EE06F50E16018A1D97C
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a343030303a3a2f33352d3335203d3e203437323732.roa
Signing time: Sun 03 Mar 2024 06:51:51 +0000
ROA not before: Sun 03 Mar 2024 06:46:51 +0000
ROA not after: Sun 02 Mar 2025 06:51:51 +0000
asID: 47272
IP address blocks: 2a0a:6044:4000::/35 maxlen: 35
Validation: Failed, certificate revoked on Thu 11 Apr 2024 17:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:bc:cd:49:93:f8:78:e6:67:03:7e:e0:6f:50:e1:60:18:a1:d9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Mar 3 06:46:51 2024 GMT
Not After : Mar 2 06:51:51 2025 GMT
Subject: CN=1F20E640A9C4AEE644934CBF22288069815AFDF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:0c:11:54:6c:12:8c:6d:89:6b:68:b5:c1:
e0:5f:5d:90:91:3f:87:a1:29:8b:7b:ca:39:0c:89:
ee:06:9a:dc:9f:7e:eb:78:4f:88:72:49:4e:d4:59:
36:08:1b:34:0c:44:09:01:09:ed:e8:15:01:be:e8:
38:f5:65:da:f7:44:c6:d0:06:76:da:28:f2:9d:9f:
85:72:e2:3c:09:44:b3:4f:f3:0c:71:b7:4a:91:52:
ac:6c:f4:e2:e3:4f:01:72:40:26:2c:eb:4f:2f:6f:
67:3d:f2:18:db:e2:54:92:de:92:12:84:e7:4d:99:
2e:db:8c:2d:1f:d3:5c:c8:ed:ea:ec:f9:a8:9a:51:
29:b7:ed:d5:d8:77:cf:26:ff:4b:e1:0b:26:23:70:
bf:df:66:48:09:16:29:43:1a:3b:68:62:3e:2e:6d:
81:98:e2:67:44:e4:53:94:c1:45:08:65:27:d2:cd:
a3:6f:35:63:f1:80:18:01:c2:5a:9e:2f:86:f4:f8:
13:39:54:2b:b7:f9:26:23:2a:5c:79:8e:27:54:85:
ed:4e:77:4e:8c:7b:a2:48:78:2b:07:9a:71:66:6c:
9f:ec:ae:5e:74:d5:5e:32:08:c4:88:7b:f6:d9:00:
cb:d4:ec:dc:4f:f0:dd:0d:a2:44:17:ad:ab:d1:7f:
9e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:20:E6:40:A9:C4:AE:E6:44:93:4C:BF:22:28:80:69:81:5A:FD:F8
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a343030303a3a2f33352d3335203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:4000::/35
Signature Algorithm: sha256WithRSAEncryption
b3:8c:87:80:10:e3:e8:dd:1a:35:66:f2:41:1d:6e:f9:65:bd:
a2:b0:8b:87:6c:67:89:49:33:af:8e:39:a9:c4:1e:33:30:d5:
d2:5b:c9:99:8c:12:8e:d2:42:ea:b3:07:85:bc:dd:f9:04:3b:
61:ee:e9:21:ab:be:78:bd:87:28:b8:60:05:55:1e:bd:a4:4b:
3f:8e:98:46:25:c7:d4:ff:92:4b:e2:5f:08:cc:bf:94:e1:c9:
e3:23:1b:c2:29:41:99:9b:7e:1b:09:4e:32:6d:ff:44:2d:b1:
76:57:3f:57:a7:99:b8:54:76:7d:78:4f:e2:dc:4c:7f:e9:7f:
40:da:69:c9:65:9a:f8:c0:c8:11:eb:ad:56:94:8f:56:ed:b4:
77:db:62:62:cf:b9:25:0a:8d:2e:e8:54:80:ef:9a:07:d7:ad:
62:57:eb:01:ab:a0:1c:87:55:57:dd:ac:8b:c6:aa:e0:52:81:
2e:a2:76:06:41:36:99:dc:47:5c:6c:aa:e3:dc:30:b0:22:ed:
ea:3c:db:ec:00:89:04:e8:d8:11:68:dc:84:ff:14:da:76:9d:
ac:e9:74:3b:2a:3f:bf:b2:bb:e7:d6:59:f9:09:a4:cb:68:e9:
bd:f0:c3:4f:b4:0b:92:ee:ee:20:fe:f3:fd:10:cf:e9:01:21:
ac:f1:db:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:58 2024 by rpki-client on console-ams.rpki-client.org