Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a363030303a3a2f33362d3336203d3e20323135323134.roa
File: 326130613a363034343a363030303a3a2f33362d3336203d3e20323135323134.roa (raw, json)
Hash identifier: lJBBGGY6KeJDc/vhfFPmARt4Bq7LOvlHeiYz9YTPdjU=
Subject key identifier: 83:6F:9B:03:8A:D9:41:BD:DD:2A:40:37:6A:F6:86:2A:FF:6C:32:64
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 36ABEDFBDF4587501D2A18FF0C82771C887314BD
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a363030303a3a2f33362d3336203d3e20323135323134.roa
Signing time: Tue 09 Apr 2024 14:00:41 +0000
ROA not before: Tue 09 Apr 2024 13:55:41 +0000
ROA not after: Tue 08 Apr 2025 14:00:41 +0000
asID: 215214
IP address blocks: 2a0a:6044:6000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 09 May 2024 20:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ab:ed:fb:df:45:87:50:1d:2a:18:ff:0c:82:77:1c:88:73:14:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Apr 9 13:55:41 2024 GMT
Not After : Apr 8 14:00:41 2025 GMT
Subject: CN=836F9B038AD941BDDD2A40376AF6862AFF6C3264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a7:e0:5d:e2:48:ad:8a:3d:4a:72:a0:f0:d0:
ef:da:68:15:f8:a2:72:a7:1a:43:63:6d:07:62:23:
6a:1c:31:36:ae:3c:50:9b:94:b8:54:aa:f2:cb:73:
7d:d6:94:d4:ab:1b:c6:4d:ae:80:0e:c1:08:be:62:
37:49:22:ab:75:46:01:2f:27:7b:9a:c2:b3:94:9c:
16:0c:d3:fa:1f:e2:41:51:1e:a6:d0:5e:b9:e6:fa:
9f:d3:70:b5:65:29:0b:09:6f:2c:40:b3:a8:f3:51:
cc:76:b3:2c:ec:29:6a:15:d6:cd:0d:ec:52:7e:ab:
97:74:e9:11:b1:ca:5d:94:e5:fc:45:18:72:99:7a:
4c:42:2d:ec:b9:5a:47:b8:93:30:97:d6:62:57:c4:
c5:bd:3d:ea:dd:1a:cb:24:6d:57:8a:ea:cf:b9:29:
ce:5d:da:0a:ca:12:6b:ca:59:f5:5c:84:48:c3:de:
f9:25:36:80:8c:79:5c:da:91:c6:e6:8c:56:30:40:
fd:b9:a2:6a:0b:4e:d7:23:99:62:4b:e0:c8:f5:67:
0f:04:b5:d6:9b:4f:3e:4c:44:e5:b8:4a:3c:70:ae:
4d:98:15:2a:bc:1a:83:08:9f:56:bd:be:5d:7f:39:
13:85:67:25:2c:d7:24:39:61:9a:e4:19:c5:2f:ba:
92:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6F:9B:03:8A:D9:41:BD:DD:2A:40:37:6A:F6:86:2A:FF:6C:32:64
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a363030303a3a2f33362d3336203d3e20323135323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:6000::/36
Signature Algorithm: sha256WithRSAEncryption
37:a4:f9:b7:85:ad:40:5b:d7:29:58:6c:7c:f7:e5:b5:71:e8:
a1:ee:38:9f:80:57:5f:d9:55:50:15:68:cc:c2:f4:60:1a:c1:
c8:1d:58:82:41:35:94:06:f7:d8:f9:50:e0:24:98:a0:bf:b2:
6c:b6:90:6d:51:09:8a:2a:aa:d3:f3:5d:5d:db:d8:06:71:45:
7e:be:ea:b7:30:01:eb:e4:76:9c:ab:88:16:c6:cb:6c:df:6c:
8f:c2:b3:23:c3:f4:b4:a6:a9:2c:f2:6f:2a:75:1e:c0:08:a8:
86:ab:d3:9c:19:6c:05:93:25:c2:10:1c:cd:27:60:4b:e2:81:
1d:b1:cb:66:30:4f:ec:32:1b:f7:16:11:dd:55:53:a9:f2:0c:
1c:30:b9:cd:ef:08:2b:6b:cb:b1:d2:39:4a:73:3e:94:85:b7:
4b:57:b8:ff:f6:24:33:91:de:8c:8c:49:31:b7:41:a9:90:5b:
73:31:7c:6f:eb:dd:df:aa:6b:38:f7:a1:6a:a9:7a:15:53:9b:
3e:77:c9:7c:f1:d6:23:a1:e2:98:8d:21:7e:54:8a:d8:f6:a2:
48:bc:4b:cd:e8:2f:de:59:3e:60:7f:c6:2d:5d:30:ac:8f:80:
62:e1:5e:59:25:0b:61:63:2f:b2:f1:be:ba:a7:a8:56:4f:0d:
09:87:3e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:58 2024 by rpki-client on console-ams.rpki-client.org