Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3130303a3a2f34342d3434203d3e203135333533.roa
File: 323630323a666131313a3130303a3a2f34342d3434203d3e203135333533.roa (raw, json)
Hash identifier: 1ZFjGQZ2jeH4KG7WYNU7NFY8tb3bUh9jeIplaVtecpo=
Subject key identifier: CC:48:9C:0F:30:70:64:F3:A6:69:A0:7D:24:20:69:F4:E0:75:15:C5
Certificate issuer: /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial: 070D1F749FE5E4EEE713E1724B0EE28CD5F3BA61
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3130303a3a2f34342d3434203d3e203135333533.roa
Signing time: Sat 01 Jun 2024 08:11:58 +0000
ROA not before: Sat 01 Jun 2024 08:06:58 +0000
ROA not after: Sat 31 May 2025 08:11:58 +0000
asID: 15353
IP address blocks: 2602:fa11:100::/44 maxlen: 44
Validation: Failed, certificate revoked on Tue 01 Apr 2025 21:22:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:0d:1f:74:9f:e5:e4:ee:e7:13:e1:72:4b:0e:e2:8c:d5:f3:ba:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Validity
Not Before: Jun 1 08:06:58 2024 GMT
Not After : May 31 08:11:58 2025 GMT
Subject: CN=CC489C0F307064F3A669A07D242069F4E07515C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fd:a7:c2:ac:64:98:62:c1:c6:e9:09:20:c4:
01:ac:52:aa:ed:87:58:9f:a8:29:d1:a9:c7:35:30:
2c:19:7d:ba:12:a4:a7:07:68:ec:f0:99:9f:8a:3c:
04:09:b2:90:70:94:7d:59:b1:28:58:8a:33:8e:e2:
52:40:85:a3:a9:cf:1b:f2:8b:67:e8:83:4d:79:4b:
e4:5d:e2:d0:95:09:0b:df:eb:b4:3e:24:e3:16:12:
35:38:a2:12:a7:94:de:42:26:1e:0d:28:db:55:cb:
f4:32:d5:91:d5:3c:3d:37:70:e8:51:c7:73:97:38:
f6:aa:a8:73:84:2a:70:97:d1:67:8e:7a:26:14:29:
70:cb:c7:92:eb:59:20:fe:9a:77:15:04:70:0d:d2:
ff:89:24:3b:32:8a:50:58:d2:4e:3f:dd:a6:f0:66:
93:10:19:c0:3a:f1:aa:2b:bf:52:51:f7:9d:33:b2:
08:24:d0:fa:76:f2:5d:4d:e4:07:17:fa:01:5e:fd:
a7:75:eb:97:c8:e7:45:4d:73:64:57:a5:e4:f6:17:
f8:ad:b9:e6:f3:4b:e0:d6:08:b6:24:3a:f1:75:fb:
3e:71:e5:33:d5:8a:31:10:46:bb:06:68:21:c1:98:
02:52:5d:89:88:35:2f:da:98:73:40:48:33:23:93:
aa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:48:9C:0F:30:70:64:F3:A6:69:A0:7D:24:20:69:F4:E0:75:15:C5
X509v3 Authority Key Identifier:
keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3130303a3a2f34342d3434203d3e203135333533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa11:100::/44
Signature Algorithm: sha256WithRSAEncryption
77:8d:ad:e2:a6:a4:df:9e:55:1d:4b:78:41:d2:31:7d:85:a6:
ec:3f:a4:a9:24:0b:4b:a3:ca:93:bf:c9:65:00:84:84:bc:aa:
ca:08:2f:e1:cb:a1:bd:20:c9:f6:1e:47:13:e6:d1:f4:28:ac:
4a:8c:73:20:df:a7:ea:5f:8d:23:02:e8:5a:6c:62:4b:07:cf:
22:3c:35:a6:b5:d3:6b:56:4e:f5:26:8a:95:8e:8d:11:e2:6a:
44:ae:b6:cd:ba:b2:12:76:a8:41:33:09:9d:19:a1:f8:76:6d:
32:2b:27:f7:22:df:c6:4b:62:be:f9:19:1a:f1:a3:f4:9c:95:
f9:ed:8e:85:78:50:0d:08:06:38:8b:e8:38:e1:1b:9a:f6:bb:
4f:4e:fe:2e:50:51:e6:a9:c5:9b:7e:74:98:2e:6d:4c:c2:1b:
df:2b:00:3c:31:a0:ab:f7:68:de:be:43:40:77:f4:95:4b:d7:
55:06:89:1d:59:06:93:29:bf:01:3f:a3:e8:01:25:cb:25:d2:
65:a8:54:10:47:97:7d:fc:9b:a4:86:4d:5a:03:d8:b1:4c:2b:
e2:d6:3b:43:5e:fa:b8:6c:6b:5d:40:22:40:4e:34:6b:a9:0e:
30:4a:a2:e9:c1:37:be:0a:1f:b8:0a:25:4d:d4:29:a2:e9:f6:
19:85:10:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:13 2025 by rpki-client