Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20313938393233.roa
File: 326130613a363034343a623030623a3a2f34382d3438203d3e20313938393233.roa (raw, json)
Hash identifier: 4Jp0n3GS4Z8kq2rFSYbDTwAIn9yFMZ8t/v9IWToUNdQ=
Subject key identifier: 4C:7B:E7:D8:6E:BB:77:19:B6:1C:42:ED:8C:98:D3:12:6F:2B:DB:5C
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 342B955ED9A2B53E3129F180C4281E2939F6F621
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20313938393233.roa
Signing time: Sat 02 Dec 2023 10:52:57 +0000
ROA not before: Sat 02 Dec 2023 10:47:57 +0000
ROA not after: Sat 30 Nov 2024 10:52:57 +0000
asID: 198923
IP address blocks: 2a0a:6044:b00b::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 18 Dec 2023 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:2b:95:5e:d9:a2:b5:3e:31:29:f1:80:c4:28:1e:29:39:f6:f6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Dec 2 10:47:57 2023 GMT
Not After : Nov 30 10:52:57 2024 GMT
Subject: CN=4C7BE7D86EBB7719B61C42ED8C98D3126F2BDB5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5e:bb:03:f1:f8:a8:51:41:4e:61:e7:9b:27:
51:8d:f0:3d:5e:9f:57:09:f2:33:49:ef:e6:fe:66:
31:65:9b:d6:fa:c6:35:fa:4f:d7:36:95:f4:8c:3d:
8d:23:c9:20:22:24:31:5d:42:ee:ad:a0:63:32:cb:
fd:11:e0:cf:c1:e7:25:0d:f9:b5:b4:9d:a8:95:4d:
ff:26:2e:c7:2a:88:5e:a6:43:d1:e6:07:79:bd:42:
81:7c:9d:ac:02:fc:ac:17:ae:11:78:46:ea:7f:17:
82:bf:54:96:82:56:1e:4f:11:e0:9e:2f:94:4e:1b:
9d:dc:68:5f:28:3b:e9:bb:19:a6:9b:58:22:30:c1:
12:fe:01:30:87:72:dd:48:1e:69:4a:b8:01:a5:3b:
c4:21:97:4a:fc:2f:c4:81:17:26:7b:44:12:67:0e:
42:c7:9b:72:5e:77:65:47:47:df:9e:e4:58:30:5c:
98:46:00:d1:70:f9:e4:11:4a:b6:9c:02:58:88:b4:
1d:c3:9d:00:f4:82:34:e5:81:5a:87:5a:f5:8c:02:
49:8a:65:dd:d9:bc:73:ac:5b:9e:23:d9:ad:38:27:
f1:ac:53:e0:5b:73:d1:8c:2f:8e:e9:13:20:9b:b3:
d5:fa:15:b8:44:15:a0:8b:51:74:92:69:48:42:67:
b0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7B:E7:D8:6E:BB:77:19:B6:1C:42:ED:8C:98:D3:12:6F:2B:DB:5C
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a623030623a3a2f34382d3438203d3e20313938393233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
be:8f:6e:11:ca:fd:80:3d:6f:33:c2:c2:e5:ed:2f:86:59:40:
76:1a:e6:7f:85:ef:91:d4:98:89:8b:52:2a:d1:94:8c:b2:44:
b0:c5:30:b2:39:41:0b:29:1b:bf:9c:1e:de:02:73:a3:54:c1:
5e:7e:28:f8:c9:78:89:aa:e0:ec:90:93:d1:41:b2:5b:5e:36:
72:9b:db:6b:50:a0:ad:96:0b:87:df:c7:c1:81:28:9a:4a:65:
98:72:65:8f:cb:fc:ca:da:f8:2d:62:69:81:0f:e5:ff:21:87:
bc:70:07:5d:07:2f:03:72:aa:f6:10:6f:e7:80:94:b4:18:2d:
e8:26:e0:b8:24:c0:ad:75:3d:90:35:46:1e:04:38:e8:54:71:
08:9b:5d:15:d9:c4:3d:5a:c1:fd:ee:dd:1d:0f:da:bb:86:e0:
78:9c:47:91:97:30:88:ae:33:be:c2:d8:9d:78:0e:45:8b:27:
3f:e1:61:5a:36:51:03:0e:33:ab:52:d4:6e:a9:d0:3c:f7:ce:
4e:c0:87:44:e2:cb:a8:1a:36:43:49:6d:57:35:39:a9:50:e7:
21:ca:7e:c9:15:1f:c9:ae:e2:62:1d:2b:20:9a:dc:0d:86:a8:
bf:20:99:f3:56:0b:42:82:d3:27:c4:1a:bf:57:52:6e:fb:14:
ed:65:e8:45
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUNCuVXtmitT4xKfGAxCgeKTn29iEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yMzEyMDIxMDQ3NTdaFw0yNDExMzAxMDUyNTdaMDMxMTAvBgNV
BAMTKDRDN0JFN0Q4NkVCQjc3MTlCNjFDNDJFRDhDOThEMzEyNkYyQkRCNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0XrsD8fioUUFOYeebJ1GN8D1e
n1cJ8jNJ7+b+ZjFlm9b6xjX6T9c2lfSMPY0jySAiJDFdQu6toGMyy/0R4M/B5yUN
+bW0naiVTf8mLscqiF6mQ9HmB3m9QoF8nawC/KwXrhF4Rup/F4K/VJaCVh5PEeCe
L5ROG53caF8oO+m7GaabWCIwwRL+ATCHct1IHmlKuAGlO8Qhl0r8L8SBFyZ7RBJn
DkLHm3Jed2VHR9+e5FgwXJhGANFw+eQRSracAliItB3DnQD0gjTlgVqHWvWMAkmK
Zd3ZvHOsW54j2a04J/GsU+Bbc9GML47pEyCbs9X6FbhEFaCLUXSSaUhCZ7CFAgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQUTHvn2G67dxm2HELtjJjTEm8r21wwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzkzODM5MzIzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoKYESwCzANBgkqhkiG9w0BAQsFAAOCAQEAvo9uEcr9gD1vM8LC
5e0vhllAdhrmf4XvkdSYiYtSKtGUjLJEsMUwsjlBCykbv5we3gJzo1TBXn4o+Ml4
iarg7JCT0UGyW142cpvba1CgrZYLh9/HwYEomkplmHJlj8v8ytr4LWJpgQ/l/yGH
vHAHXQcvA3Kq9hBv54CUtBgt6CbguCTArXU9kDVGHgQ46FRxCJtdFdnEPVrB/e7d
HQ/au4bgeJxHkZcwiK4zvsLYnXgORYsnP+FhWjZRAw4zq1LUbqnQPPfOTsCHROLL
qBo2Q0ltVzU5qVDnIcp+yRUfya7iYh0rIJrcDYaovyCZ81YLQoLTJ8Qav1dSbvsU
7WXoRQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:58 2024 by rpki-client on console-ams.rpki-client.org