Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a383030303a3a2f33362d3336203d3e2030.roa
File: 326130613a363034343a383030303a3a2f33362d3336203d3e2030.roa (raw, json)
Hash identifier: zzvCtRhwQwS3FDq3ePHXQql8z1zQViDQKDkfcJl2TvQ=
Subject key identifier: 90:D8:DD:BC:56:67:CF:DA:30:FE:0E:69:21:68:DA:8C:FA:C6:BB:04
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 3B9E4F32C68499D383976C5F47A8C780C01FDB55
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a383030303a3a2f33362d3336203d3e2030.roa
Signing time: Sun 07 Jul 2024 20:32:27 +0000
ROA not before: Sun 07 Jul 2024 20:27:27 +0000
ROA not after: Sun 06 Jul 2025 20:32:27 +0000
asID: 0
IP address blocks: 2a0a:6044:8000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 08 Jul 2024 20:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:9e:4f:32:c6:84:99:d3:83:97:6c:5f:47:a8:c7:80:c0:1f:db:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Jul 7 20:27:27 2024 GMT
Not After : Jul 6 20:32:27 2025 GMT
Subject: CN=90D8DDBC5667CFDA30FE0E692168DA8CFAC6BB04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4f:b9:00:0d:d7:66:a3:4a:0a:f2:98:6c:e0:
68:6c:fc:dd:5c:03:da:fa:a7:51:b3:85:af:08:cd:
1b:37:be:09:af:01:3d:bc:cd:9e:79:2e:9e:0f:5e:
58:ce:52:83:04:95:2c:3b:c0:1e:76:d7:18:28:f2:
61:1d:ee:0f:fb:ec:ad:b6:fa:22:57:8c:92:c1:11:
21:0a:56:fd:ed:f9:4a:9d:9d:6e:b2:5e:0e:d6:a2:
98:7f:cd:7c:2b:49:c2:74:96:3c:f6:23:23:f4:e9:
82:23:9e:a6:30:28:66:81:ec:50:fd:db:f4:c5:a1:
c2:a1:bf:59:a3:88:3d:3a:76:20:54:e4:d4:27:88:
8d:ad:4a:0d:ae:1c:43:8f:90:5c:5e:b8:2a:e2:73:
03:b8:f8:54:84:39:6d:6c:e9:9c:7b:0f:e1:54:87:
1c:08:c4:67:8f:54:99:af:c1:fc:cb:ce:a6:56:54:
c5:39:70:34:a2:01:04:a7:15:89:55:d8:75:d4:c3:
5c:07:2a:d6:fc:64:8a:cd:a4:5d:49:f4:3b:46:bb:
95:3a:ef:a6:3a:bd:35:9e:ff:7b:cd:46:af:20:bf:
79:59:45:88:0a:b7:06:33:58:34:52:93:59:af:d6:
ad:73:64:5e:25:cd:00:fa:3f:e8:d8:8b:6b:62:0f:
fa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D8:DD:BC:56:67:CF:DA:30:FE:0E:69:21:68:DA:8C:FA:C6:BB:04
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a383030303a3a2f33362d3336203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:8000::/36
Signature Algorithm: sha256WithRSAEncryption
a8:da:a8:09:a6:58:e4:e3:87:cd:01:17:3b:dc:90:c3:8e:44:
f9:0b:39:87:83:26:fe:a6:88:5f:8f:cc:2a:8c:02:7c:a9:4c:
be:2d:96:ce:9c:96:05:6d:ef:83:bc:b2:28:d5:fc:3d:1d:ec:
4f:8e:fe:bf:30:05:22:98:1c:29:b6:e6:7d:eb:ba:89:1b:7e:
f6:ac:7a:27:1f:d7:ab:48:37:bf:24:1e:b3:8b:ac:ec:54:32:
60:99:a9:a6:ef:a5:81:5c:ec:09:68:41:1e:2f:c0:eb:12:9b:
0b:c1:93:30:24:03:f5:33:9a:64:b3:11:af:dc:fc:10:4c:ed:
fc:b7:d7:7b:e1:e1:54:84:26:fd:fa:26:82:7d:32:63:8c:57:
2c:7a:eb:4b:16:83:00:75:86:64:a9:3d:b0:e7:f0:1d:5f:c7:
1d:03:b6:53:e1:5f:c3:bf:f6:87:e7:94:a5:9c:68:c4:bb:5f:
bc:d5:17:e9:cd:d3:71:33:da:1b:7e:f5:c2:af:08:1c:fe:e7:
14:a0:b5:83:6d:af:27:79:8b:56:b8:1d:56:5b:5a:23:8b:99:
d5:cd:30:64:6d:7e:ab:ed:c3:05:b9:a5:0e:35:3a:82:04:91:
e4:3a:28:40:10:ca:53:63:0c:ab:d7:fa:69:33:c6:67:fe:9e:
bd:b5:1e:27
-----BEGIN CERTIFICATE-----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Generated at Mon Jul 8 21:54:38 2024 by rpki-client on console-ams.rpki-client.org