Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/3139382e3133352e3136392e302f32342d3234203d3e203135333533.roa
File: 3139382e3133352e3136392e302f32342d3234203d3e203135333533.roa (raw, json)
Hash identifier: UY07kFL2Y/4VIwvI/47Q3Lcchaa84Q7oMnqgYgjquPY=
Subject key identifier: CE:77:73:3D:63:76:DB:C3:26:78:09:33:F8:44:34:BA:48:8F:D7:07
Certificate issuer: /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial: 67A0284E9BB8A9E6982A0308A86AB4B0B7D63986
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/3139382e3133352e3136392e302f32342d3234203d3e203135333533.roa
Signing time: Mon 06 Jan 2025 22:02:25 +0000
ROA not before: Mon 06 Jan 2025 21:57:25 +0000
ROA not after: Mon 05 Jan 2026 22:02:25 +0000
asID: 15353
IP address blocks: 198.135.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 04:31:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:a0:28:4e:9b:b8:a9:e6:98:2a:03:08:a8:6a:b4:b0:b7:d6:39:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Validity
Not Before: Jan 6 21:57:25 2025 GMT
Not After : Jan 5 22:02:25 2026 GMT
Subject: CN=CE77733D6376DBC326780933F84434BA488FD707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:80:9a:80:67:ee:c7:20:b8:f0:08:af:26:3e:
27:9c:ec:d1:56:b7:e5:16:0a:70:3a:97:f4:d6:bc:
df:65:93:ae:25:36:c0:01:de:c4:78:f2:3c:74:4d:
d7:f8:19:d4:a2:d2:96:80:18:0e:56:b6:35:91:67:
ae:f6:d3:b8:22:af:2b:6d:28:8f:c0:93:12:fe:33:
6d:5c:20:ea:97:3b:fc:e1:34:51:f3:89:7c:8a:4a:
32:ea:60:2a:d8:89:fd:5d:72:27:e6:23:bc:82:bb:
b9:b0:ed:fb:44:ac:2f:4e:8b:df:ff:6b:cd:15:be:
f0:7d:b2:79:10:cd:4a:d8:f1:4b:02:da:20:d7:8c:
21:9d:9e:7d:11:fa:e2:ef:c8:5e:31:20:fa:46:4f:
8d:cb:fb:60:b7:f4:97:00:93:16:60:ac:73:d8:f8:
ba:62:53:cc:87:32:25:bc:28:5f:de:0b:d6:0b:0d:
fd:1f:be:22:30:cb:ff:a4:03:68:49:87:ed:90:1f:
c2:27:36:c2:44:98:d2:c5:e7:a6:6f:85:97:77:9f:
2f:f0:cc:64:8b:5f:47:e9:62:2e:d5:7b:2a:ef:96:
5f:76:7c:65:c7:21:90:fa:f3:9e:df:1b:26:6e:49:
d4:92:f6:06:c7:97:f8:db:8b:b2:e4:7e:22:fc:8a:
4b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:77:73:3D:63:76:DB:C3:26:78:09:33:F8:44:34:BA:48:8F:D7:07
X509v3 Authority Key Identifier:
keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/3139382e3133352e3136392e302f32342d3234203d3e203135333533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.135.169.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ce:4c:3e:ce:4a:6d:82:7f:1e:2e:26:44:08:c2:8f:d1:eb:
8a:50:9b:04:0e:d4:03:cb:80:7c:bf:28:ce:0b:53:ef:80:ab:
ab:a8:ed:0d:f5:e4:9c:d9:69:b9:56:54:42:8f:79:98:a9:36:
90:70:ad:2d:cd:8c:b5:bb:7a:55:d0:f5:b1:ea:b5:81:c1:42:
8f:05:11:fe:a7:c0:91:e9:23:f0:1f:8d:d8:70:0a:4e:ec:b0:
85:78:f4:8a:0d:d2:2e:a9:bb:c4:a9:97:e0:17:f0:b6:5d:09:
e0:d7:bf:b2:63:9b:50:a2:15:d5:88:ca:b5:b0:4b:78:b0:3d:
e9:d5:e6:f7:7a:a1:1a:1f:d2:a9:5f:6b:3e:2e:e9:db:2f:ea:
02:58:36:89:76:14:b8:21:e8:0f:c6:44:78:6f:aa:e2:b8:3d:
28:5f:ab:83:91:3a:11:79:37:cf:be:f3:99:ca:16:26:c8:37:
e6:fb:1b:92:87:d3:64:4b:e2:58:83:e7:fe:c6:db:df:06:2a:
79:5d:c4:98:7e:c1:12:21:d8:ae:43:ed:d0:dc:6f:08:23:69:
13:2d:88:53:fd:03:7b:5f:47:4e:b0:47:7e:17:5f:3a:6b:0a:
91:96:2f:e0:59:5a:dd:a8:50:8d:af:1d:72:89:71:67:d6:db:
ea:61:39:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:03 2025 by rpki-client