Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616331303a3a2f34342d3434203d3e20343030313735.roa
File: 326130613a363034343a616331303a3a2f34342d3434203d3e20343030313735.roa (raw, json)
Hash identifier: cXPbHh+V+6f/E+5bX6Ai8o1AXN7AgCV/0u3qWvQu8nA=
Subject key identifier: 54:21:F0:8F:2A:DC:E1:64:BF:49:2E:D0:44:9C:E9:9C:FB:41:BA:9A
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 729D1520AC12F6363184E36AAAE2BAA584C3BEBC
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616331303a3a2f34342d3434203d3e20343030313735.roa
Signing time: Fri 08 Mar 2024 06:13:23 +0000
ROA not before: Fri 08 Mar 2024 06:08:23 +0000
ROA not after: Fri 07 Mar 2025 06:13:23 +0000
asID: 400175
IP address blocks: 2a0a:6044:ac10::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:9d:15:20:ac:12:f6:36:31:84:e3:6a:aa:e2:ba:a5:84:c3:be:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Mar 8 06:08:23 2024 GMT
Not After : Mar 7 06:13:23 2025 GMT
Subject: CN=5421F08F2ADCE164BF492ED0449CE99CFB41BA9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c4:8f:28:55:5c:cb:f6:b3:3c:58:37:b0:ce:
b0:cf:e8:6b:3a:ed:94:1e:5a:41:04:18:1f:4d:01:
1a:b5:af:f7:51:63:9a:46:7d:9e:3c:41:eb:fb:a0:
71:39:03:6a:ef:4f:36:e3:05:c4:39:28:6c:0e:d4:
54:19:30:30:c4:7e:cf:cf:b8:3d:37:6a:3b:d8:bd:
f7:d2:37:07:9b:2f:0a:d5:cd:b2:53:93:b8:f7:a5:
90:75:0b:e9:6e:9b:0c:60:55:7f:50:61:55:d2:9d:
b1:01:c3:e4:a2:ff:8d:2f:40:ca:6c:ac:21:e2:88:
47:41:57:4d:ac:ea:97:4d:ac:32:ea:b7:f7:40:11:
b5:18:4d:a5:75:0f:88:45:41:62:39:8f:98:18:bf:
61:11:8b:59:ec:d0:9c:94:c3:5d:e8:28:6b:91:f7:
ab:62:8b:28:41:67:fa:86:08:ca:4a:02:a2:66:0b:
1d:ae:c0:2a:ab:16:41:dd:05:8a:fd:fd:f9:d1:ac:
87:63:c4:fb:02:f8:95:e0:17:62:c7:72:f2:ec:21:
b7:86:20:2c:40:c6:ba:8c:03:c1:49:5f:7f:3f:7c:
48:21:e2:1f:90:ea:7b:f0:65:ed:0a:93:7d:bd:ff:
f9:bc:5c:e6:1a:2e:89:bb:30:c4:81:ab:24:48:39:
78:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:21:F0:8F:2A:DC:E1:64:BF:49:2E:D0:44:9C:E9:9C:FB:41:BA:9A
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616331303a3a2f34342d3434203d3e20343030313735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac10::/44
Signature Algorithm: sha256WithRSAEncryption
b4:58:b1:06:ce:c5:e4:c6:6f:31:e9:31:85:9a:81:ce:2c:8e:
c8:68:5e:ab:79:fb:f9:69:19:70:67:47:d4:e9:46:7c:09:29:
1d:f8:8a:69:c1:af:84:e0:24:ef:20:73:2c:4c:2a:eb:19:27:
ef:11:15:5f:b4:22:84:7b:51:2a:53:63:7d:e4:d7:1c:a3:07:
2d:77:2c:0c:f1:9b:9c:cf:dd:2e:5f:44:64:2b:f3:30:b2:cc:
98:60:43:76:81:7a:ef:9f:5c:0c:c5:9d:c9:97:8b:75:2b:f5:
8d:de:1d:87:80:1b:63:73:50:17:1e:20:34:48:7f:e1:03:07:
7e:20:90:e5:2e:68:05:46:69:c0:1a:fd:a7:41:0a:4c:1b:70:
a8:af:17:e6:ca:d3:d7:fe:80:b4:b7:e8:a4:5d:e2:c6:71:64:
17:7b:7f:e2:70:c1:cd:08:82:45:96:61:36:82:1e:7b:30:39:
9b:a3:8c:0f:2c:33:63:cc:f7:9c:c6:c3:37:6a:54:b5:0c:d8:
56:1e:97:03:a8:ce:1c:a9:d3:d3:6e:4d:44:1e:a6:d2:84:52:
4f:61:8e:e0:3f:3e:f0:65:ba:c8:1b:fe:52:01:6f:e7:9a:66:
05:10:1a:1b:27:01:93:e8:52:ac:d5:58:c9:9e:60:15:20:3c:
62:af:8c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 06:12:38 2024 by rpki-client on console-ams.rpki-client.org