Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3a2f34342d3434203d3e203438353831.roa
File: 323630323a666131313a3a2f34342d3434203d3e203438353831.roa (raw, json)
Hash identifier: VJSmsO9phvtu+8msY9R5WkGBceXfuVv8w8d4yo6j2PQ=
Subject key identifier: 90:B6:80:6F:C1:7D:B6:B7:78:56:9E:7A:F2:33:27:5F:83:A5:5A:BB
Certificate issuer: /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial: 12E307E5963B26BD5F087E19E716230ACAD34157
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3a2f34342d3434203d3e203438353831.roa
Signing time: Tue 20 Feb 2024 07:01:20 +0000
ROA not before: Tue 20 Feb 2024 06:56:20 +0000
ROA not after: Tue 18 Feb 2025 07:01:20 +0000
asID: 48581
IP address blocks: 2602:fa11::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 26 Jun 2024 10:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:e3:07:e5:96:3b:26:bd:5f:08:7e:19:e7:16:23:0a:ca:d3:41:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Validity
Not Before: Feb 20 06:56:20 2024 GMT
Not After : Feb 18 07:01:20 2025 GMT
Subject: CN=90B6806FC17DB6B778569E7AF233275F83A55ABB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:0f:15:4e:7e:29:70:2f:c3:c6:3b:ab:7b:
37:f9:61:5f:2d:7b:06:10:75:e3:e2:3c:3a:38:10:
84:da:1e:e7:46:73:66:cf:9c:b1:9e:27:29:e8:91:
7d:1e:96:c2:52:92:6f:5b:d9:40:ba:71:6a:ed:1c:
63:ac:ac:2d:6e:dc:22:38:5c:f5:fc:16:bd:e9:1e:
0b:1b:37:0b:5e:3a:23:96:ee:05:dd:7a:e7:87:e5:
d6:ad:b6:f7:6e:c3:fe:41:37:d0:c1:a3:b3:71:49:
00:30:c2:c6:08:f0:7a:1c:cc:70:3b:05:5a:58:b6:
61:8a:8f:d5:61:e2:04:2c:c6:60:1a:31:96:44:ef:
e3:71:15:bb:93:c9:7e:f7:85:8d:9e:e5:62:13:b5:
c6:65:60:c4:8c:e0:9f:d0:e1:78:16:dc:75:df:a0:
83:04:59:48:36:6c:f1:9a:90:88:c4:99:7a:d8:1d:
58:09:af:78:b0:27:ff:f3:5b:41:49:b9:97:95:d3:
02:d1:57:6d:ce:d1:ca:ae:24:81:4e:97:1a:2d:4a:
b4:40:64:04:59:6e:60:89:38:01:a8:f6:76:a6:9a:
91:74:ba:cc:f0:ef:9e:da:10:d6:6d:be:02:ff:ba:
6c:0a:0a:ee:c6:79:77:9a:3d:07:d7:f4:ca:2c:79:
e0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B6:80:6F:C1:7D:B6:B7:78:56:9E:7A:F2:33:27:5F:83:A5:5A:BB
X509v3 Authority Key Identifier:
keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3a2f34342d3434203d3e203438353831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa11::/44
Signature Algorithm: sha256WithRSAEncryption
05:91:5a:f3:cc:ff:a8:3e:f2:b3:fd:fd:84:a0:61:ac:64:8a:
c7:8d:ec:c2:40:a6:02:dc:5f:24:2c:8c:97:8b:e1:ed:2e:0d:
29:28:d6:2a:04:35:7c:e3:35:27:fd:d6:53:52:6e:78:42:da:
2d:04:5c:19:f0:dd:22:a7:08:49:cc:b5:6e:c6:aa:0a:72:45:
f2:bc:85:69:72:19:fd:be:cb:38:09:09:fa:cd:99:d1:62:35:
34:0f:59:5a:5f:70:2d:15:fd:d3:c0:73:95:d2:17:19:95:37:
95:6c:c4:2a:78:e2:b6:45:32:78:59:de:cd:c3:3e:82:40:2a:
05:e2:51:19:51:25:71:9b:2d:5d:65:8a:59:d0:16:f7:08:48:
a8:5d:44:d7:b7:43:4a:0b:03:ae:23:56:de:35:e0:5a:bd:f4:
94:23:d6:f3:87:c2:00:9c:c7:c0:33:0b:50:a0:3b:f6:ff:f6:
43:0f:69:28:23:e1:0a:86:c3:a1:3c:42:6e:b6:c8:db:b2:f3:
28:41:21:82:03:3a:2a:31:b9:e5:f3:12:57:17:a6:58:c2:77:
f9:22:8b:69:b9:bc:91:bf:9b:9c:fc:34:b1:b6:26:f5:7b:f2:
66:80:b0:f8:bf:47:17:f2:85:f9:40:6c:bd:fb:90:fc:a7:f3:
31:93:01:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:52 2025 by rpki-client