Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616337303a3a2f34342d3434203d3e20323134373537.roa
File: 326130613a363034343a616337303a3a2f34342d3434203d3e20323134373537.roa (raw, json)
Hash identifier: jQ0AEKaZ1BdPXnee1DN4nQIl24RPBDCDMEudcJwXgek=
Subject key identifier: 74:EE:32:15:DE:F4:C0:52:01:06:1A:CC:A8:BE:96:91:95:37:40:E6
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 44B13F455A3C5C3B2C976191850E051E21D526EB
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616337303a3a2f34342d3434203d3e20323134373537.roa
Signing time: Sat 08 Jun 2024 08:10:48 +0000
ROA not before: Sat 08 Jun 2024 08:05:48 +0000
ROA not after: Sat 07 Jun 2025 08:10:48 +0000
asID: 214757
IP address blocks: 2a0a:6044:ac70::/44 maxlen: 44
Validation: Failed, certificate revoked on Sat 08 Jun 2024 08:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:b1:3f:45:5a:3c:5c:3b:2c:97:61:91:85:0e:05:1e:21:d5:26:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Jun 8 08:05:48 2024 GMT
Not After : Jun 7 08:10:48 2025 GMT
Subject: CN=74EE3215DEF4C05201061ACCA8BE9691953740E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:4c:bc:c5:c1:50:f7:45:7c:7c:cc:31:35:
f7:89:34:68:09:a3:07:b4:d9:d2:7c:7d:3f:ad:3f:
59:e8:d0:b8:d9:d4:d6:d2:39:d8:9a:3e:b2:ed:21:
7b:ee:1e:c5:d6:e5:da:34:78:e9:ce:77:46:ec:93:
c7:8f:51:4d:ba:b6:aa:16:92:a9:c8:3e:b7:48:35:
17:7b:96:53:d8:e1:d5:46:9e:30:65:1e:d5:0a:31:
d0:ab:78:9d:3c:58:d4:16:09:c7:f1:2d:62:2e:5f:
17:9a:a2:68:e4:72:be:f3:93:d2:00:38:75:29:f3:
4a:b4:61:64:6b:e0:07:48:35:98:c5:17:8f:0e:38:
f2:13:b9:bc:3b:d1:14:54:b6:d1:f2:8d:ff:fd:7c:
c5:20:e7:7f:5f:6d:20:08:ac:54:dd:c8:1f:45:ea:
cb:58:00:71:32:89:52:95:b0:0a:bc:9d:8b:8a:46:
f4:52:91:ba:01:90:51:16:15:47:a9:b3:62:e6:42:
f3:e7:37:6d:a1:31:60:aa:a8:ac:a6:01:b0:60:02:
3d:b2:67:e1:0b:a4:60:46:f0:21:32:05:3e:2f:0d:
d2:18:a0:32:6c:7e:53:9b:e7:84:af:2f:9f:99:f0:
c6:17:6f:7a:6e:3d:41:f7:55:04:f1:c6:ef:48:b6:
94:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EE:32:15:DE:F4:C0:52:01:06:1A:CC:A8:BE:96:91:95:37:40:E6
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616337303a3a2f34342d3434203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac70::/44
Signature Algorithm: sha256WithRSAEncryption
53:bc:7a:f6:44:6e:1b:fe:c8:f8:3a:dc:36:93:1f:cd:06:7b:
48:89:06:82:7c:87:ab:a4:07:31:cd:15:05:95:c3:ea:28:a1:
02:38:f4:e2:04:97:43:26:a8:31:e4:a5:3b:f8:39:73:2c:c8:
f5:a2:4c:d7:b0:ad:43:82:8a:7a:f2:eb:9c:03:3a:bb:d9:31:
42:b7:79:e6:35:e5:25:68:77:5f:19:1e:d3:e7:2e:08:dc:bc:
50:57:3e:42:be:c3:d8:3c:b9:35:5e:14:0f:9d:2d:23:2a:5b:
ac:bb:47:2a:01:d6:b9:ff:d3:9a:b6:6b:ea:56:b8:32:dd:f2:
24:4b:49:76:73:2c:b1:d7:b6:f2:6b:7a:58:c2:d7:58:f4:06:
f8:7e:21:f1:79:9b:7f:70:74:1b:cf:f0:27:fc:4b:d8:c2:0a:
64:06:d2:42:fa:b8:ad:57:31:47:7a:48:4a:80:3c:c8:d5:5a:
b4:d1:cf:32:8f:49:9a:be:c6:32:8b:39:3d:92:a9:8e:46:c0:
3d:aa:b4:32:5d:27:c9:3e:31:df:35:67:eb:97:2d:d7:40:35:
fc:6a:71:44:6c:6d:4e:17:c7:95:65:97:39:f0:b1:53:c9:f1:
2c:5b:70:7b:79:1c:3a:b6:f7:4c:ee:41:04:53:0b:90:58:de:
9b:9d:54:dc
-----BEGIN CERTIFICATE-----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Generated at Sat Jun 8 12:49:13 2024 by rpki-client on console-fra.rpki-client.org