Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a373830303a3a2f34302d3438203d3e20313939363832.roa
File: 326130613a363034343a373830303a3a2f34302d3438203d3e20313939363832.roa (raw, json)
Hash identifier: YjFChnmXRPJRz7xKByKpK8ABzsxFFEFnYB8SyGHQgwY=
Subject key identifier: 4E:35:D3:A3:8B:29:E0:93:27:90:79:77:57:AF:E1:A2:86:AC:B3:01
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 1F0B819272A1C651C9BB304816122548A492A2A9
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a373830303a3a2f34302d3438203d3e20313939363832.roa
Signing time: Fri 02 Feb 2024 16:14:35 +0000
ROA not before: Fri 02 Feb 2024 16:09:35 +0000
ROA not after: Fri 31 Jan 2025 16:14:35 +0000
asID: 199682
IP address blocks: 2a0a:6044:7800::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:0b:81:92:72:a1:c6:51:c9:bb:30:48:16:12:25:48:a4:92:a2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Feb 2 16:09:35 2024 GMT
Not After : Jan 31 16:14:35 2025 GMT
Subject: CN=4E35D3A38B29E0932790797757AFE1A286ACB301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:73:2b:e7:75:a2:8f:e9:d7:89:90:93:1a:
0a:cb:16:6a:ac:ae:9a:e1:44:e2:1c:f8:7c:66:9c:
8e:53:e6:5e:06:6b:85:f9:0d:4d:db:27:c6:be:23:
f5:d5:12:5d:f4:44:f9:bb:de:48:f3:33:57:c1:74:
c4:8a:3e:7a:78:41:6a:cf:1b:43:3c:70:28:23:37:
1e:f0:8c:02:40:25:03:8e:39:12:cf:a7:63:ee:3b:
8c:6d:46:c1:1f:80:ce:87:9d:e6:6f:ef:01:d1:4e:
00:97:8e:7c:5a:5a:74:9d:0a:75:12:95:c3:b5:f1:
0a:79:23:bf:5a:fb:c5:68:06:eb:73:ec:74:c0:ab:
66:98:85:e4:49:46:1a:93:5f:e7:2d:50:2d:a6:18:
9c:52:46:82:64:ea:b3:69:0e:15:cb:24:35:ce:e9:
97:c0:e2:19:37:39:95:a5:49:41:8a:cb:f6:97:97:
82:54:32:e5:51:57:4e:d1:0f:9d:f2:5c:c9:f9:46:
93:d2:b5:77:8c:c6:d1:da:8f:d7:dd:c1:87:17:a3:
21:ba:6c:16:96:e5:3a:0d:a4:6f:a3:9b:90:ad:d2:
aa:f7:59:d2:a1:75:5e:2f:ef:7b:cf:94:93:0d:51:
84:1a:a7:66:2a:fa:06:08:9f:a5:31:9d:bc:94:9d:
b8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:35:D3:A3:8B:29:E0:93:27:90:79:77:57:AF:E1:A2:86:AC:B3:01
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a373830303a3a2f34302d3438203d3e20313939363832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7800::/40
Signature Algorithm: sha256WithRSAEncryption
bd:95:ac:73:a6:bd:2f:59:e6:79:c2:d8:2a:b5:a0:41:46:d2:
e8:e8:c2:12:a1:d9:d0:0a:90:fe:7e:0b:3a:b0:9e:f5:e6:66:
fd:4e:7c:1b:e8:9d:d5:f4:e9:69:0f:af:0e:43:dc:ed:f3:cb:
20:e2:50:69:0e:40:4c:f5:4a:f0:a5:69:3a:73:31:e8:89:71:
43:15:f1:9b:68:47:4f:bf:66:d0:c5:79:a9:29:41:0a:d2:b7:
83:18:9d:99:c4:ed:87:f5:49:2c:fd:43:1d:54:8c:b2:ac:56:
87:2c:6b:fa:db:02:e0:d2:dc:dd:59:c7:4d:73:3d:20:ac:57:
dc:e6:cd:cc:95:3e:5b:a6:b7:e1:33:b4:59:b4:c4:30:06:11:
38:6f:68:48:38:30:1a:df:da:31:23:7f:40:b6:f4:30:66:89:
90:2c:1b:ed:b0:2d:e2:67:ac:c9:7d:99:b6:5f:2b:d3:51:4e:
a2:97:4e:d2:52:55:12:e4:72:09:36:ab:04:90:df:5a:32:cd:
15:b6:74:54:6b:09:de:08:f1:30:db:8e:fb:0b:a1:73:a2:3d:
e9:05:2d:3e:91:7c:ee:cf:d9:27:b2:b1:45:5e:f9:d0:4e:08:
dc:d5:26:fd:62:ff:0c:2e:03:3f:0d:e9:e6:49:f6:9a:80:90:
e6:d5:aa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 05:24:56 2024 by rpki-client on console-fra.rpki-client.org