Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a643130303a3a2f34302d3430203d3e203537313130.roa
File: 326130613a363034343a643130303a3a2f34302d3430203d3e203537313130.roa (raw, json)
Hash identifier: o2suFawiZWqrVcUZQ3cGWELxp2tBKjPDrFnAj6padJM=
Subject key identifier: 0F:FA:38:49:C9:D6:D3:97:2E:15:0C:8D:98:CB:37:8C:F1:8E:6B:E1
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 06A5811E30EA5D80F8E92FAEB144155F5B2B2CF2
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a643130303a3a2f34302d3430203d3e203537313130.roa
Signing time: Tue 06 Aug 2024 16:49:42 +0000
ROA not before: Tue 06 Aug 2024 16:44:42 +0000
ROA not after: Tue 05 Aug 2025 16:49:42 +0000
asID: 57110
IP address blocks: 2a0a:6044:d100::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a5:81:1e:30:ea:5d:80:f8:e9:2f:ae:b1:44:15:5f:5b:2b:2c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Aug 6 16:44:42 2024 GMT
Not After : Aug 5 16:49:42 2025 GMT
Subject: CN=0FFA3849C9D6D3972E150C8D98CB378CF18E6BE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fe:90:54:a1:10:b7:6e:fe:b0:2d:d5:8b:37:
9a:09:d4:c9:5f:90:9e:f9:28:42:58:66:0f:6c:e7:
29:bd:a1:87:23:c0:50:3b:4f:cc:81:d4:53:ce:9f:
d4:55:ec:e6:e8:07:de:43:b9:9d:21:33:22:55:d5:
89:4c:0f:92:a9:44:8a:47:c1:75:44:71:ca:76:84:
9c:91:f0:c9:d1:ef:e8:fb:fd:ae:cf:12:ad:f9:ca:
c0:5d:69:1e:57:31:c0:5e:93:34:27:de:9b:80:d5:
64:84:1d:35:fb:0a:dd:52:38:7b:5b:a0:24:d0:77:
79:a8:62:c8:08:32:0a:6b:6a:10:59:4c:76:1b:85:
16:a9:c6:c8:f2:4e:26:51:73:17:ee:7e:66:9c:1f:
64:f4:39:2d:ec:f4:c9:3d:a2:9b:f9:bc:95:27:b6:
05:20:a1:4e:5b:9d:4c:0b:e8:57:b0:df:d5:b4:d5:
32:e4:78:86:0a:cb:af:25:59:c4:57:54:0b:03:90:
7c:7f:8c:28:80:eb:17:22:e4:2f:fd:6f:04:a3:d1:
29:60:39:d6:77:05:a9:b9:f8:63:ee:11:ca:f7:24:
59:25:59:a6:31:57:48:79:49:01:19:e2:cf:6d:ef:
de:89:f4:e8:58:37:63:58:b6:3e:be:02:f4:b3:44:
36:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FA:38:49:C9:D6:D3:97:2E:15:0C:8D:98:CB:37:8C:F1:8E:6B:E1
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a643130303a3a2f34302d3430203d3e203537313130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:d100::/40
Signature Algorithm: sha256WithRSAEncryption
93:db:c9:e0:4a:43:d9:fc:c8:52:aa:11:f4:50:b3:97:e3:d4:
ae:e8:f9:a7:8e:90:64:39:72:cd:e7:eb:6a:06:68:d6:8c:35:
24:96:7a:2a:ee:20:b2:7a:92:b0:90:7e:09:0c:25:66:66:70:
b8:03:9e:55:03:33:5d:62:1e:4f:4b:b6:45:0f:e7:cb:94:a7:
f2:36:df:ad:48:ca:bb:b5:c0:e1:60:a2:cb:43:fa:48:82:9a:
a1:e3:bf:22:9f:de:c5:67:4e:06:fd:5d:70:8e:5b:b6:0d:cc:
c9:38:04:56:08:f7:d5:0f:db:9c:6e:be:00:b5:76:25:d4:9f:
94:50:0e:a8:3a:3c:c5:fb:02:70:07:18:82:2c:58:ae:2c:e6:
11:bf:a2:5b:ce:c3:d2:38:be:af:3e:43:20:ba:4b:4e:5f:a6:
5f:60:ae:d6:e6:1d:aa:04:80:98:65:a8:1a:55:51:07:81:c8:
ef:a2:c2:1e:b7:4d:9e:42:03:da:c6:7e:1a:07:4d:06:e4:d0:
37:39:3e:a6:d2:3a:1a:7c:10:1a:d9:ed:0f:b1:d9:93:ba:fb:
d7:76:dc:04:6f:c2:80:68:27:2d:6c:d9:66:5c:61:68:55:c0:
bc:fc:34:65:ea:ca:b0:82:41:0a:ab:c2:9c:98:c7:2c:17:2c:
88:a4:b5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 06:12:38 2024 by rpki-client on console-ams.rpki-client.org