Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626630303a3a2f34302d3438203d3e20323135343732.roa
File: 326130613a363034343a626630303a3a2f34302d3438203d3e20323135343732.roa (raw, json)
Hash identifier: mLDhmQ3v3DEMPhwV8EKXBFycTGUBmBr4CeGqBYn64vg=
Subject key identifier: 43:4C:CE:DA:FC:48:32:0C:19:B7:7D:EE:8C:F4:A4:CC:AF:92:08:9B
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 367A2C62984766D414CC38736524B84C9764FEEE
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626630303a3a2f34302d3438203d3e20323135343732.roa
Signing time: Fri 02 Aug 2024 12:03:55 +0000
ROA not before: Fri 02 Aug 2024 11:58:55 +0000
ROA not after: Fri 01 Aug 2025 12:03:55 +0000
asID: 215472
IP address blocks: 2a0a:6044:bf00::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:7a:2c:62:98:47:66:d4:14:cc:38:73:65:24:b8:4c:97:64:fe:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Aug 2 11:58:55 2024 GMT
Not After : Aug 1 12:03:55 2025 GMT
Subject: CN=434CCEDAFC48320C19B77DEE8CF4A4CCAF92089B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fd:59:a8:f2:a8:c9:cc:5b:96:7a:5f:89:ef:
ce:86:08:de:8f:58:6a:45:32:77:8d:34:fa:98:50:
4a:d7:56:db:37:24:5c:90:e4:08:c8:f6:d7:a4:6c:
aa:38:a7:67:7e:66:8a:d1:7d:3d:e3:a9:c9:18:09:
0c:3c:7f:fe:5a:c4:72:50:69:6a:2c:21:29:b4:53:
96:54:5d:c2:e9:aa:1d:bb:5d:64:8d:f5:87:ab:a2:
c3:11:d4:e5:46:a1:3b:0e:76:e0:ea:56:62:a0:0c:
c7:27:48:d0:7b:33:a3:d1:9d:27:24:25:88:56:a6:
33:0d:f9:f7:b1:97:fe:b8:d2:c7:79:ef:54:a1:45:
77:00:1a:8e:9f:46:29:d8:b6:3b:67:e6:74:42:63:
0c:a6:9d:37:08:8a:1a:5c:88:ee:cb:c7:fe:b9:50:
e5:20:36:23:9c:3b:8f:4a:9e:bd:d4:58:e5:84:d9:
de:0a:46:67:a9:4d:96:e2:32:0c:55:43:ae:ff:b9:
14:3b:e4:bd:4b:16:81:55:64:6e:dd:61:a5:0d:cf:
c6:fc:84:6c:61:27:a5:fa:56:2c:90:d7:d5:51:3f:
32:a9:fd:b6:4c:31:7b:df:a0:a1:c7:e7:4b:68:65:
2e:38:d6:fe:81:12:09:8b:a1:db:99:11:92:a7:d4:
bc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4C:CE:DA:FC:48:32:0C:19:B7:7D:EE:8C:F4:A4:CC:AF:92:08:9B
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a626630303a3a2f34302d3438203d3e20323135343732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:bf00::/40
Signature Algorithm: sha256WithRSAEncryption
34:39:a3:0f:cf:e4:10:5e:02:c2:be:6f:9b:1a:52:6f:ae:0a:
ee:12:94:70:b2:08:b7:90:7b:7e:2d:5c:5c:b0:54:92:b1:eb:
b3:0d:91:e8:72:b5:c3:b4:65:f6:03:d1:f5:83:39:36:4f:0e:
75:89:88:88:dd:19:d5:5b:ca:98:82:9e:d1:a4:04:46:b2:48:
be:69:52:3c:10:40:f6:b7:88:00:2f:c7:59:07:ea:79:a2:2f:
bb:60:59:de:9d:92:99:18:17:01:e9:97:01:b3:ef:19:9a:9b:
cf:66:87:43:99:e3:b1:42:59:6e:d5:6d:20:df:9e:0e:8f:59:
1a:a6:72:67:0a:e1:fc:5c:00:eb:2a:f4:f2:8d:0b:ec:c4:76:
a6:98:c0:a4:df:c6:20:aa:73:ff:66:21:76:fe:ef:72:77:f0:
c3:94:4a:60:6a:3c:22:3b:2e:11:fa:5a:b5:64:f8:14:53:ca:
30:58:1e:47:f8:c3:ba:76:75:9e:da:40:80:fe:d7:b0:bb:58:
1f:43:58:ab:8b:41:b4:fa:ae:c4:3c:83:00:d3:7e:74:dc:12:
e9:92:a0:a9:e8:d7:3b:f7:2b:c8:00:22:86:f7:3d:ca:f9:5d:
08:ee:a4:c1:3b:90:1a:17:c4:61:22:98:1a:95:fe:48:73:31:
6d:a6:08:f7
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIUNnosYphHZtQUzDhzZSS4TJdk/u4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA4MDIxMTU4NTVaFw0yNTA4MDExMjAzNTVaMDMxMTAvBgNV
BAMTKDQzNENDRURBRkM0ODMyMEMxOUI3N0RFRThDRjRBNENDQUY5MjA4OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL/Vmo8qjJzFuWel+J786GCN6P
WGpFMneNNPqYUErXVts3JFyQ5AjI9tekbKo4p2d+ZorRfT3jqckYCQw8f/5axHJQ
aWosISm0U5ZUXcLpqh27XWSN9YerosMR1OVGoTsOduDqVmKgDMcnSNB7M6PRnSck
JYhWpjMN+fexl/640sd571ShRXcAGo6fRinYtjtn5nRCYwymnTcIihpciO7Lx/65
UOUgNiOcO49Knr3UWOWE2d4KRmepTZbiMgxVQ67/uRQ75L1LFoFVZG7dYaUNz8b8
hGxhJ6X6ViyQ19VRPzKp/bZMMXvfoKHH50toZS441v6BEgmLoduZEZKn1LwpAgMB
AAGjggJ5MIICdTAdBgNVHQ4EFgQUQ0zO2vxIMgwZt33ujPSkzK+SCJswHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2E2MjY2MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzNTM0MzczMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoKYES/MA0GCSqGSIb3DQEBCwUAA4IBAQA0OaMPz+QQXgLCvm+b
GlJvrgruEpRwsgi3kHt+LVxcsFSSseuzDZHocrXDtGX2A9H1gzk2Tw51iYiI3RnV
W8qYgp7RpARGski+aVI8EED2t4gAL8dZB+p5oi+7YFnenZKZGBcB6ZcBs+8ZmpvP
ZodDmeOxQllu1W0g354Oj1kapnJnCuH8XADrKvTyjQvsxHammMCk38YgqnP/ZiF2
/u9yd/DDlEpgajwiOy4R+lq1ZPgUU8owWB5H+MO6dnWe2kCA/tewu1gfQ1iri0G0
+q7EPIMA03503BLpkqCp6Nc79yvIACKG9z3K+V0I7qTBO5AaF8RhIpgalf5IczFt
pgj3
-----END CERTIFICATE-----
Generated at Thu Aug 29 05:24:56 2024 by rpki-client on console-fra.rpki-client.org