Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a643230303a3a2f34302d3430203d3e203537313130.roa
File: 326130613a363034343a643230303a3a2f34302d3430203d3e203537313130.roa (raw, json)
Hash identifier: T7TQCqB6smLgd8O3bdHG3Ew+A5fOs2Zn5nFowUR0bVQ=
Subject key identifier: C3:8A:0C:89:B2:38:9C:8C:9D:7F:71:D0:71:36:CB:CA:BC:87:77:58
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 6016F597B7CCAC2531E703FDE916CFCD2AA0CD46
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a643230303a3a2f34302d3430203d3e203537313130.roa
Signing time: Tue 06 Aug 2024 18:20:06 +0000
ROA not before: Tue 06 Aug 2024 18:15:06 +0000
ROA not after: Tue 05 Aug 2025 18:20:06 +0000
asID: 57110
IP address blocks: 2a0a:6044:d200::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:16:f5:97:b7:cc:ac:25:31:e7:03:fd:e9:16:cf:cd:2a:a0:cd:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Aug 6 18:15:06 2024 GMT
Not After : Aug 5 18:20:06 2025 GMT
Subject: CN=C38A0C89B2389C8C9D7F71D07136CBCABC877758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9b:a3:55:af:68:76:5a:14:2a:99:e7:d5:ac:
e2:e0:89:a9:96:88:51:d2:43:0a:87:4b:d7:3b:e1:
da:ca:bf:7b:09:82:01:11:81:5b:94:dd:a6:2b:96:
3a:58:06:3d:bd:f0:12:f0:4c:86:68:ae:4a:2b:9f:
13:85:9b:21:18:c4:69:33:44:9e:16:6b:36:87:d9:
22:37:ce:95:79:af:90:27:90:fd:be:2f:64:21:db:
3d:46:13:b5:12:82:40:dd:fa:b1:cc:5c:ae:88:9d:
2e:96:0f:a6:c8:a6:14:74:a0:e5:1d:54:95:de:7c:
7f:9c:fc:9a:09:5c:9a:17:06:8a:38:c2:6f:44:f8:
53:97:7b:1b:76:3a:28:37:bd:64:96:c4:fd:93:d8:
d6:a4:f6:e9:04:52:94:f4:2c:32:f4:df:56:0c:a0:
88:26:be:1d:b5:39:7f:27:08:f3:66:f3:4e:19:48:
79:30:0c:61:81:cd:6e:f9:77:cb:18:fd:59:64:3d:
b9:44:a1:6b:fc:ec:d8:55:b2:04:65:7f:71:be:58:
57:e5:61:7a:4e:18:bf:56:27:6c:1a:32:7b:a0:9e:
b0:5a:eb:c2:a8:a2:22:c2:d8:a0:ce:57:5d:e8:24:
09:17:66:1b:9e:e2:25:c5:a2:d4:63:fe:8b:72:93:
8b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8A:0C:89:B2:38:9C:8C:9D:7F:71:D0:71:36:CB:CA:BC:87:77:58
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a643230303a3a2f34302d3430203d3e203537313130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:d200::/40
Signature Algorithm: sha256WithRSAEncryption
5c:b6:94:1a:ee:12:0d:83:a8:8a:a4:57:b7:54:8e:f0:26:52:
39:82:c2:e3:2e:38:65:88:de:d1:81:59:af:c3:4e:4c:39:47:
09:1f:47:9b:76:d2:6c:6c:db:af:86:05:b3:39:ed:bf:18:bf:
e3:28:50:0c:b4:b9:4b:42:91:7d:ff:cc:db:6a:28:7d:3c:b6:
e2:df:c2:21:a1:8f:af:71:49:13:c0:b0:5d:cd:a6:83:eb:b0:
62:4c:ff:0c:0e:a3:0a:69:f7:38:c3:ed:61:47:f7:e0:dd:9b:
3a:e7:7e:d9:0e:e5:57:fc:11:73:36:7f:72:84:10:8c:e3:77:
4f:b4:16:9f:57:f0:bf:0a:4d:ac:e7:95:db:66:da:23:3a:97:
5a:17:bd:e8:16:58:7a:ba:07:e8:b9:3c:87:4b:67:e1:2b:83:
0a:04:02:e2:b4:02:57:3e:a0:75:46:71:5c:5a:ef:49:67:6c:
1f:4a:b7:25:b8:18:59:cf:7d:08:c6:a6:35:1c:5e:5c:52:e0:
0d:f2:b8:1b:77:de:42:64:c3:6c:94:85:5e:14:d0:31:a7:70:
89:ff:41:7b:d8:e6:d3:06:9a:b1:8c:ed:82:71:5f:c2:60:6b:
14:55:81:2a:8c:56:3a:fa:30:51:6a:72:4a:58:5b:2c:f1:44:
7e:3b:29:4f
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUYBb1l7fMrCUx5wP96RbPzSqgzUYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA4MDYxODE1MDZaFw0yNTA4MDUxODIwMDZaMDMxMTAvBgNV
BAMTKEMzOEEwQzg5QjIzODlDOEM5RDdGNzFEMDcxMzZDQkNBQkM4Nzc3NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpm6NVr2h2WhQqmefVrOLgiamW
iFHSQwqHS9c74drKv3sJggERgVuU3aYrljpYBj298BLwTIZorkornxOFmyEYxGkz
RJ4WazaH2SI3zpV5r5AnkP2+L2Qh2z1GE7USgkDd+rHMXK6InS6WD6bIphR0oOUd
VJXefH+c/JoJXJoXBoo4wm9E+FOXext2Oig3vWSWxP2T2Nak9ukEUpT0LDL031YM
oIgmvh21OX8nCPNm804ZSHkwDGGBzW75d8sY/VlkPblEoWv87NhVsgRlf3G+WFfl
YXpOGL9WJ2waMnugnrBa68KooiLC2KDOV13oJAkXZhue4iXFotRj/otyk4sPAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUw4oMibI4nIydf3HQcTbLyryHd1gwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2E2NDMyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM1MzczMTMxMzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAqCmBE0jANBgkqhkiG9w0BAQsFAAOCAQEAXLaUGu4SDYOoiqRXt1SO
8CZSOYLC4y44ZYje0YFZr8NOTDlHCR9Hm3bSbGzbr4YFszntvxi/4yhQDLS5S0KR
ff/M22oofTy24t/CIaGPr3FJE8CwXc2mg+uwYkz/DA6jCmn3OMPtYUf34N2bOud+
2Q7lV/wRczZ/coQQjON3T7QWn1fwvwpNrOeV22baIzqXWhe96BZYeroH6Lk8h0tn
4SuDCgQC4rQCVz6gdUZxXFrvSWdsH0q3JbgYWc99CMamNRxeXFLgDfK4G3feQmTD
bJSFXhTQMadwif9Be9jm0waasYztgnFfwmBrFFWBKoxWOvowUWpySlhbLPFEfjsp
Tw==
-----END CERTIFICATE-----
Generated at Thu Aug 29 05:24:56 2024 by rpki-client on console-fra.rpki-client.org