Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: V2D8XjuvZyQdj72tydypDVoQvzG4krHFtuyAfd/rQsk=
Subject key identifier: 92:AD:84:50:7A:F0:DB:3F:6C:A4:B4:2D:F8:AC:92:5C:5C:55:3F:F3
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 725A748EEE383B90FFB1E322F8DB9D35CEC2CB79
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS0.roa
Signing time: Mon 28 Oct 2024 13:03:27 +0000
ROA not before: Mon 28 Oct 2024 12:58:27 +0000
ROA not after: Mon 27 Oct 2025 13:03:27 +0000
asID: 0
IP address blocks: 2a09:54c6:6000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 28 Oct 2024 15:13:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:5a:74:8e:ee:38:3b:90:ff:b1:e3:22:f8:db:9d:35:ce:c2:cb:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Oct 28 12:58:27 2024 GMT
Not After : Oct 27 13:03:27 2025 GMT
Subject: CN=92AD84507AF0DB3F6CA4B42DF8AC925C5C553FF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:10:9b:30:74:3d:58:73:3b:2f:d1:fa:d7:8a:
ee:ea:a6:27:d1:ab:24:64:8a:9c:90:42:df:0b:69:
4a:8d:dc:9e:ef:d5:9e:a7:33:48:0e:70:bd:73:28:
ad:7e:1c:32:67:e7:e2:83:6d:52:9f:ab:bd:d2:ba:
c3:17:f6:35:01:88:ed:a6:19:59:b9:7b:e4:1b:06:
ac:c4:ff:24:3a:58:b8:3d:9c:18:75:d3:9d:ec:c5:
68:62:76:75:fd:66:10:be:fc:59:5f:01:a3:c0:87:
6e:52:8c:31:f2:08:cb:ee:77:1e:44:f5:e2:ff:4b:
aa:af:29:af:05:81:90:25:84:47:fb:b1:ed:e8:60:
bd:e2:6d:ec:be:23:d4:a3:59:fe:a1:b6:1d:c7:48:
d4:9b:f9:5f:76:b3:b6:65:f4:c6:f1:4b:fa:61:96:
0c:d9:f0:69:09:e7:f0:ff:b9:66:6f:49:57:67:8e:
04:05:c0:b9:b6:d0:44:db:2b:2b:f6:b3:f7:7b:71:
78:c7:3a:2f:db:88:c3:46:61:df:c6:6c:b2:9f:bb:
d7:61:44:1a:b5:d1:e3:84:8c:07:70:82:07:84:18:
83:22:64:df:eb:df:1b:9b:3d:51:38:d3:ad:d6:2d:
1c:3c:f9:5c:ec:99:ea:bd:73:05:85:5b:d2:68:d6:
27:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AD:84:50:7A:F0:DB:3F:6C:A4:B4:2D:F8:AC:92:5C:5C:55:3F:F3
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:6000::/36
Signature Algorithm: sha256WithRSAEncryption
9a:64:1e:f1:df:39:08:fb:c9:1a:0e:f1:60:9d:54:62:99:97:
ce:2f:7b:fb:4e:7a:d0:7f:9d:29:65:98:01:7d:55:60:07:90:
d4:48:27:8a:73:43:5f:c3:3f:6c:b6:41:79:69:f0:ce:bf:69:
a3:a9:55:e1:90:05:2b:3c:eb:5f:7e:c7:eb:8f:67:de:1d:bd:
93:21:04:cc:34:3e:60:b9:a1:af:51:66:c3:73:2d:53:83:b3:
e8:db:51:96:28:61:2f:87:7d:15:f6:0c:f4:b4:cd:63:0a:4c:
c9:9d:b8:47:47:c1:85:de:ba:b2:81:97:09:71:1f:42:4c:5a:
b7:83:78:33:cd:76:75:f1:8d:c8:00:cf:8c:3a:63:64:6e:83:
7d:b9:52:b1:d6:16:94:26:e0:00:8c:5d:2d:97:b6:5f:e1:15:
7c:b0:17:5b:9b:30:3f:fe:02:16:d8:55:07:91:77:46:ba:52:
f4:b5:37:de:77:b1:c1:ea:fe:76:21:f0:c0:f6:fc:0d:ae:36:
00:33:4a:71:8f:9d:64:8f:cf:51:70:b1:e1:77:ea:3d:a3:94:
55:36:e8:48:20:1c:f4:a3:c0:8b:67:bd:56:f9:07:f1:2e:69:
ab:75:7b:25:02:9a:9e:4e:84:c5:85:5e:23:5d:e8:97:66:5e:
85:84:59:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 18:24:31 2024 by rpki-client on console-fra.rpki-client.org