Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616366303a3a2f34342d3434203d3e203437323732.roa
File: 326130613a363034343a616366303a3a2f34342d3434203d3e203437323732.roa (raw, json)
Hash identifier: qID9wVTDMEU5eopK5KjZ2gskZbnxJyKBVHmhvY0jZis=
Subject key identifier: 3C:19:1C:9D:D2:7B:0E:C2:4C:34:1B:22:2B:F5:65:61:B1:34:D2:DB
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 32C6EE3796A6C8772285B87E1EE08F48E77529AE
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616366303a3a2f34342d3434203d3e203437323732.roa
Signing time: Wed 21 Aug 2024 08:56:26 +0000
ROA not before: Wed 21 Aug 2024 08:51:26 +0000
ROA not after: Wed 20 Aug 2025 08:56:26 +0000
asID: 47272
IP address blocks: 2a0a:6044:acf0::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c6:ee:37:96:a6:c8:77:22:85:b8:7e:1e:e0:8f:48:e7:75:29:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Aug 21 08:51:26 2024 GMT
Not After : Aug 20 08:56:26 2025 GMT
Subject: CN=3C191C9DD27B0EC24C341B222BF56561B134D2DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3d:8e:9d:2b:dc:4e:51:e3:a5:9e:da:d2:3c:
59:be:d9:d5:38:e3:ff:eb:42:d9:fe:ea:84:aa:91:
92:f4:f5:22:7f:de:9e:7c:98:8b:dd:df:a9:6b:90:
e8:2e:6c:bf:92:b5:8e:5c:6b:b1:0f:41:ce:50:47:
9d:db:f0:3d:7a:bd:bb:07:f6:77:a1:34:bb:d4:c1:
52:34:9e:6d:c2:f8:24:9d:4a:79:22:43:be:b2:b7:
a7:e7:ca:4c:fa:2e:a0:ba:c0:6a:30:1d:8a:2b:7a:
34:4d:41:dc:c5:1a:dd:21:ce:df:80:ba:db:48:aa:
60:80:87:6c:8f:50:3c:32:60:66:a4:6e:6e:4d:e3:
c5:32:d2:4d:3c:25:ea:a1:c5:5e:a7:0c:06:86:5e:
4f:04:18:2b:c4:c7:d4:43:8c:28:22:60:1d:81:eb:
93:82:e6:6e:77:b5:1a:ce:d8:a0:a0:15:0f:d2:eb:
59:e1:e0:06:0c:49:ac:16:3a:9e:de:f5:ac:8b:2c:
25:1c:b2:9b:9b:94:96:6e:41:de:c3:b0:f6:ca:c4:
d0:86:16:09:bf:77:5f:be:c2:dd:62:80:2c:bd:5c:
2a:87:64:a0:83:fe:74:87:50:75:36:5f:ad:24:1b:
ca:bd:22:58:6d:84:de:b2:56:a8:35:b2:a9:b2:5c:
01:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:19:1C:9D:D2:7B:0E:C2:4C:34:1B:22:2B:F5:65:61:B1:34:D2:DB
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616366303a3a2f34342d3434203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:acf0::/44
Signature Algorithm: sha256WithRSAEncryption
a1:4c:2c:ab:a3:10:86:21:a7:00:bf:65:ab:39:23:9a:0b:a3:
61:1b:62:eb:f5:d5:f4:86:59:4a:08:94:73:6a:64:d5:ef:03:
5e:06:dd:4d:07:b7:15:4b:ed:c1:03:8b:c3:36:31:ab:ae:59:
6f:af:03:9a:96:b9:9a:92:5c:6e:b0:f6:81:55:4a:49:a2:2e:
87:aa:be:b2:1f:02:48:f4:41:98:d1:c5:6e:a9:ad:01:a5:f3:
f0:90:c6:4a:f6:5d:8e:84:3b:89:37:59:1b:b4:52:42:8f:11:
e7:a3:d8:c5:90:9a:62:80:21:22:ae:3d:a7:1d:0f:66:7c:33:
9e:d1:c1:7c:42:40:3f:53:7b:64:d5:c0:f2:a6:b9:25:85:cf:
da:c8:a9:54:5b:5d:cf:29:db:f5:6b:35:24:ce:70:ee:bf:d8:
f0:8e:15:01:a8:79:d2:aa:3e:32:06:39:b3:b6:3f:6e:8f:0a:
51:28:2f:7f:77:22:5e:6b:98:a4:26:b4:76:5c:ac:2a:49:6e:
83:a2:f7:0f:a3:c7:bc:99:be:0c:34:f0:96:02:dc:58:8f:60:
4b:1a:48:77:d9:81:f1:73:97:15:7e:a0:27:7e:b3:82:ac:71:
fe:89:65:f7:f2:f0:32:80:e9:97:10:f4:67:15:86:be:68:22:
95:83:68:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 05:24:56 2024 by rpki-client on console-fra.rpki-client.org