Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130643a643930363a3a2f33322d3332203d3e203437323732.roa
File: 326130643a643930363a3a2f33322d3332203d3e203437323732.roa (raw, json)
Hash identifier: fpL/bWuEQBsi2rgJXdTNU0+uc2sAACMmCUziWAy31ZI=
Subject key identifier: FD:3C:A5:88:A8:BF:B2:81:8C:0B:FA:76:10:D7:DA:A5:A0:37:5B:58
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 43F6B983DAA6C8A8AFF6C5B2B7B287780F8F3F9F
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130643a643930363a3a2f33322d3332203d3e203437323732.roa
Signing time: Fri 28 Jun 2024 20:49:49 +0000
ROA not before: Fri 28 Jun 2024 20:44:49 +0000
ROA not after: Fri 27 Jun 2025 20:49:49 +0000
asID: 47272
IP address blocks: 2a0d:d906::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 22 Jul 2024 11:20:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:f6:b9:83:da:a6:c8:a8:af:f6:c5:b2:b7:b2:87:78:0f:8f:3f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Jun 28 20:44:49 2024 GMT
Not After : Jun 27 20:49:49 2025 GMT
Subject: CN=FD3CA588A8BFB2818C0BFA7610D7DAA5A0375B58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:96:79:eb:e8:19:59:35:64:76:ae:29:01:
47:2d:2f:00:91:03:88:1b:b1:d9:59:68:f0:ec:0d:
45:72:7a:ec:12:52:6a:00:f4:d0:60:5f:a4:5f:a4:
0c:9b:ad:82:02:2c:d6:02:cf:22:6a:ea:45:61:c4:
a2:98:79:dd:17:2e:59:b7:7d:3f:b1:80:9d:11:a6:
bc:0b:75:6f:9a:96:93:bc:3e:de:44:0c:2f:27:12:
56:9f:5b:ad:eb:b0:b5:1e:a6:a3:d4:2c:a5:96:15:
c4:2b:20:08:e5:35:ac:16:de:f3:01:d1:f7:73:54:
05:de:1d:1c:60:a1:04:27:54:e5:66:53:f9:e6:5f:
17:82:54:c5:60:29:28:64:86:13:5e:e7:08:7c:00:
d9:c1:0d:80:a1:db:12:dc:f6:1d:11:ec:c9:74:91:
a8:1c:6e:f5:ab:29:de:6a:a4:62:6f:b4:9c:7a:8d:
49:5b:82:73:93:71:f9:b0:54:a3:cc:c0:c2:f9:6e:
38:ad:09:6f:47:3e:3c:66:40:12:b5:73:80:d2:77:
89:2d:51:12:89:00:34:f4:3e:36:a8:53:42:20:51:
57:54:82:77:8e:eb:3a:61:e4:2f:1f:f4:20:7a:5e:
54:42:fd:d4:33:24:9d:80:1f:89:a3:ad:4c:5b:7f:
ca:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3C:A5:88:A8:BF:B2:81:8C:0B:FA:76:10:D7:DA:A5:A0:37:5B:58
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130643a643930363a3a2f33322d3332203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d906::/32
Signature Algorithm: sha256WithRSAEncryption
18:b3:39:12:71:e7:d7:fd:84:60:95:1b:fe:80:d3:99:8a:b6:
74:9e:88:bc:55:f0:13:a4:5f:20:12:2b:de:6f:67:8a:d6:8f:
6c:5a:88:fd:b0:94:9f:39:cf:cd:31:14:a5:53:4b:c5:6f:9a:
e0:52:aa:86:8c:35:fe:d3:e4:ce:f0:23:50:63:71:1e:86:00:
ae:72:3c:91:a5:af:7c:12:a8:3c:a3:1a:0d:fd:f9:48:5c:41:
f7:99:be:75:9f:59:92:89:9e:d6:bd:79:9a:56:65:fd:43:b2:
58:f3:87:c4:72:a1:03:73:dd:2a:76:d0:ce:81:6d:c1:cd:d2:
37:a1:1c:f6:bf:7e:64:b7:84:bd:73:a4:39:1b:23:24:cd:2e:
55:49:ef:b4:4e:1b:5d:80:40:e4:20:98:81:31:64:24:a9:e1:
47:ba:07:65:61:9d:d8:a2:b4:c4:f5:f0:6a:9a:83:5d:e7:b3:
c9:00:9d:96:85:56:ed:9d:dc:83:88:3a:1b:90:bf:cc:6b:ef:
94:33:aa:2c:70:1a:75:f3:46:dc:5e:8c:17:c3:34:be:90:58:
74:39:81:43:0b:51:c6:b6:41:ad:15:77:89:a0:c9:f8:43:dd:
48:9b:e3:cc:f5:65:0f:48:9f:be:27:e6:69:74:50:2d:d2:ad:
91:58:b8:80
-----BEGIN CERTIFICATE-----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Generated at Mon Jul 22 14:12:11 2024 by rpki-client on console-ams.rpki-client.org