Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616336303a3a2f34342d3438203d3e203230343733.roa
File: 326130613a363034343a616336303a3a2f34342d3438203d3e203230343733.roa (raw, json)
Hash identifier: AG4KmlrcB8SvMXPhUSEjJMaLVbiBnRFADAacXz6WFbs=
Subject key identifier: 5E:BE:6F:19:E6:20:D7:C6:9B:AF:2F:D8:26:2B:17:AF:C3:00:39:2E
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 4479B6D8493E2D6CAD053C779012F02327B81D84
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616336303a3a2f34342d3438203d3e203230343733.roa
Signing time: Wed 05 Jun 2024 07:09:46 +0000
ROA not before: Wed 05 Jun 2024 07:04:46 +0000
ROA not after: Wed 04 Jun 2025 07:09:46 +0000
asID: 20473
IP address blocks: 2a0a:6044:ac60::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:79:b6:d8:49:3e:2d:6c:ad:05:3c:77:90:12:f0:23:27:b8:1d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Jun 5 07:04:46 2024 GMT
Not After : Jun 4 07:09:46 2025 GMT
Subject: CN=5EBE6F19E620D7C69BAF2FD8262B17AFC300392E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:f6:27:f6:30:32:aa:29:67:e8:62:ec:f4:
90:e1:db:b2:47:16:f1:19:c6:72:85:90:fd:c5:a4:
cc:49:dd:8b:78:a2:ad:36:07:c3:71:4a:79:af:d9:
7e:c2:eb:87:48:23:86:4c:6e:a4:4a:69:ff:f6:95:
d8:fb:29:26:a2:39:6e:b5:27:ea:2e:bd:2d:c9:f9:
2c:22:af:80:5f:a7:9a:95:ef:e5:f6:14:d1:f8:85:
9e:c0:83:a7:f7:05:1d:55:08:dd:f3:09:f2:5f:54:
20:3c:e6:17:22:e1:ca:e9:d6:18:33:3d:69:a4:fe:
27:7a:68:c1:29:4e:df:92:7f:c1:34:fa:6d:69:e1:
1e:f9:0a:72:7e:55:23:2c:39:d1:b5:52:d9:20:10:
a4:c6:dc:64:1c:07:47:98:45:81:08:95:5f:ff:33:
98:5b:f6:10:f8:f2:84:cc:26:c3:6e:8b:ce:a0:e5:
77:a5:77:50:02:07:3d:72:19:3e:aa:28:4f:77:60:
31:95:6a:d1:5a:c9:1b:81:b1:ac:01:ab:27:e5:46:
62:16:4f:55:47:51:ee:9b:6e:54:f0:e5:1b:42:17:
d1:fd:54:c4:65:15:f2:9a:96:01:93:e4:a3:e8:99:
81:80:7b:9f:87:b9:5d:f4:61:f9:f0:71:45:4a:6a:
f2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BE:6F:19:E6:20:D7:C6:9B:AF:2F:D8:26:2B:17:AF:C3:00:39:2E
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616336303a3a2f34342d3438203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac60::/44
Signature Algorithm: sha256WithRSAEncryption
92:10:9b:69:87:05:45:4d:d5:12:c8:e8:32:91:8e:49:61:e9:
dc:9d:5a:df:e6:be:c1:35:55:6d:21:1a:9f:7a:28:d8:d3:6e:
6b:5d:f4:fd:6d:ad:c7:10:63:22:3b:9b:8e:89:95:ff:21:51:
6a:0b:ab:20:b1:b2:57:ac:8c:8b:b6:cd:88:e8:8a:2c:37:63:
a0:f8:aa:18:ab:c4:e7:15:52:ef:17:8f:79:8c:18:fb:3b:88:
65:af:8f:02:29:91:80:b2:97:2b:47:0e:90:1e:f1:6e:ea:63:
bc:0c:b2:d6:89:f9:99:be:f5:bc:45:84:5a:6f:e5:08:36:57:
99:c7:a7:b2:42:39:d5:37:ed:9c:07:4b:fd:56:10:a9:9b:12:
70:c8:32:4f:ad:8b:28:e0:fe:91:28:f9:31:7b:29:ef:89:45:
4e:4a:2a:4a:57:1a:45:89:6e:a9:58:7a:2f:70:37:4b:e2:02:
21:9b:53:81:d2:63:ef:39:54:2c:2d:f1:fb:6f:7e:a8:f2:07:
02:21:40:f5:58:b5:54:d3:fb:d7:a8:8b:fa:b4:18:fc:b0:78:
35:78:da:d2:40:2d:03:91:cd:71:a7:19:d0:fc:9e:bb:f6:bd:
06:d1:9f:49:d3:2f:e4:46:4a:08:c3:6b:5c:c6:c6:34:6b:cf:
d8:bd:8e:0a
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIURHm22Ek+LWytBTx3kBLwIye4HYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA2MDUwNzA0NDZaFw0yNTA2MDQwNzA5NDZaMDMxMTAvBgNV
BAMTKDVFQkU2RjE5RTYyMEQ3QzY5QkFGMkZEODI2MkIxN0FGQzMwMDM5MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCotfYn9jAyqiln6GLs9JDh27JH
FvEZxnKFkP3FpMxJ3Yt4oq02B8NxSnmv2X7C64dII4ZMbqRKaf/2ldj7KSaiOW61
J+ouvS3J+Swir4Bfp5qV7+X2FNH4hZ7Ag6f3BR1VCN3zCfJfVCA85hci4crp1hgz
PWmk/id6aMEpTt+Sf8E0+m1p4R75CnJ+VSMsOdG1UtkgEKTG3GQcB0eYRYEIlV//
M5hb9hD48oTMJsNui86g5Xeld1ACBz1yGT6qKE93YDGVatFayRuBsawBqyflRmIW
T1VHUe6bblTw5RtCF9H9VMRlFfKalgGT5KPomYGAe5+HuV30YfnwcUVKavJPAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUXr5vGeYg18abry/YJisXr8MAOS4wHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2E2MTYzMzYzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzAzNDM3MzMucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwQqCmBErGAwDQYJKoZIhvcNAQELBQADggEBAJIQm2mHBUVN1RLI6DKR
jklh6dydWt/mvsE1VW0hGp96KNjTbmtd9P1trccQYyI7m46Jlf8hUWoLqyCxsles
jIu2zYjoiiw3Y6D4qhirxOcVUu8Xj3mMGPs7iGWvjwIpkYCylytHDpAe8W7qY7wM
staJ+Zm+9bxFhFpv5Qg2V5nHp7JCOdU37ZwHS/1WEKmbEnDIMk+tiyjg/pEo+TF7
Ke+JRU5KKkpXGkWJbqlYei9wN0viAiGbU4HSY+85VCwt8ftvfqjyBwIhQPVYtVTT
+9eoi/q0GPyweDV42tJALQORzXGnGdD8nrv2vQbRn0nTL+RGSgjDa1zGxjRrz9i9
jgo=
-----END CERTIFICATE-----
Generated at Thu Aug 29 05:24:56 2024 by rpki-client on console-fra.rpki-client.org