Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a31303a3a2f34342d3434203d3e203133363436.roa
File: 323630323a666131313a31303a3a2f34342d3434203d3e203133363436.roa (raw, json)
Hash identifier: QWVMHTJKkhxFmzNhaVmFY7poov+2dHrNM34M6YwjDDE=
Subject key identifier: E5:43:98:79:77:7C:5F:BE:6C:BF:05:1B:AF:E4:11:F7:1D:57:C0:C2
Certificate issuer: /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial: 2B8100E9E23E20E61F4066A4E23409075C2BBDA1
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a31303a3a2f34342d3434203d3e203133363436.roa
Signing time: Mon 17 Mar 2025 23:32:33 +0000
ROA not before: Mon 17 Mar 2025 23:27:33 +0000
ROA not after: Mon 16 Mar 2026 23:32:33 +0000
asID: 13646
IP address blocks: 2602:fa11:10::/44 maxlen: 44
Validation: Failed, certificate revoked on Tue 01 Apr 2025 21:19:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:81:00:e9:e2:3e:20:e6:1f:40:66:a4:e2:34:09:07:5c:2b:bd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Validity
Not Before: Mar 17 23:27:33 2025 GMT
Not After : Mar 16 23:32:33 2026 GMT
Subject: CN=E5439879777C5FBE6CBF051BAFE411F71D57C0C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:27:d6:58:b1:35:d3:91:78:e5:e6:7d:67:
c6:69:4f:3d:ca:e7:3a:d3:f9:07:a9:08:d5:36:6c:
45:5b:13:e7:5e:85:34:c3:89:38:3f:b6:25:8c:fd:
e8:ff:fd:02:87:7b:24:63:a4:2c:22:f3:7c:03:4f:
2a:f0:ef:10:f7:8f:eb:77:8a:01:7f:96:fa:c6:99:
d4:28:e6:27:bc:a6:fa:9c:9f:6f:68:28:ba:df:66:
d7:ad:d4:d4:6e:b0:d5:d2:1b:8a:93:2f:e9:4a:fc:
ed:a6:83:dd:06:a1:2b:4a:9b:78:b7:60:a8:48:8c:
46:4f:10:a1:c2:dc:26:b7:5d:88:2b:01:23:90:e2:
3f:84:70:8f:5e:f2:21:eb:b9:9f:9c:6d:ef:b1:67:
9a:76:12:15:87:cc:0a:21:ee:6e:a6:59:e6:07:ee:
be:75:ef:c1:80:b9:82:df:2f:6d:ab:cc:a8:4e:b2:
37:be:88:a8:57:0a:d1:aa:16:f6:7e:30:56:c2:c8:
c9:27:f8:c1:92:5a:62:2c:1e:b5:dc:b7:f9:26:44:
85:89:a0:a1:c8:24:57:f6:ae:b5:44:df:bc:58:ac:
66:96:69:c0:bf:d1:b4:6c:1f:cf:05:60:72:c8:c6:
33:81:42:d9:ae:70:60:84:d9:5c:e1:b7:da:5a:06:
1e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:43:98:79:77:7C:5F:BE:6C:BF:05:1B:AF:E4:11:F7:1D:57:C0:C2
X509v3 Authority Key Identifier:
keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a31303a3a2f34342d3434203d3e203133363436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa11:10::/44
Signature Algorithm: sha256WithRSAEncryption
4d:7a:e5:1d:a8:dc:4d:b2:fa:bf:0a:4e:72:cd:a8:86:50:9c:
b8:25:dd:d9:c7:9e:96:31:1c:31:e2:b4:7c:c6:e1:0a:43:25:
e8:1d:78:46:f5:2d:54:64:5b:39:cd:7e:ea:47:09:66:5c:30:
ce:19:b0:6b:5b:9d:ff:95:af:3c:7b:eb:6a:83:98:ab:28:b1:
54:b3:47:76:80:08:cb:0c:eb:4f:c7:59:c7:3e:9e:5c:94:7e:
13:db:26:7c:67:84:79:d9:17:38:39:9f:55:3f:44:6d:b3:0b:
cb:d9:5a:c3:f4:a2:69:fa:29:37:5b:7f:6b:3c:25:97:5e:91:
76:7a:5f:97:82:9d:35:63:fd:e5:46:ad:8e:17:ec:1e:42:ec:
b0:af:14:4a:be:0c:70:f3:13:e7:3e:f7:7a:0f:66:7a:ea:b3:
c6:32:d6:f0:5c:13:d8:ab:b7:66:a5:3c:1d:9c:90:b7:18:03:
1e:4d:28:dd:47:02:f4:b8:3d:9f:f6:77:14:72:9c:33:8e:23:
a5:93:82:ca:eb:f4:fa:2c:2e:ef:fc:af:6a:0a:cf:ce:56:a8:
07:d2:06:cb:54:a0:02:dc:46:90:20:53:a7:cd:4d:ca:9c:50:
76:fc:07:14:35:3f:13:4f:52:22:53:23:16:ff:0b:19:bb:a1:
1e:83:ec:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:41 2025 by rpki-client