Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a36303a3a2f34342d3434203d3e20323134383632.roa
File: 323630323a666136653a36303a3a2f34342d3434203d3e20323134383632.roa (raw, json)
Hash identifier: jR+mAHPOYwiS3oxkHKADCgDIkaeURTbcGOhGT5PCPpw=
Subject key identifier: DD:39:39:2D:72:E3:27:62:7D:62:E2:5E:51:E2:30:BB:A8:F8:3E:F2
Certificate issuer: /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial: 37B26B693F98D6799CADD1EC016AA74C1C80B57F
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a36303a3a2f34342d3434203d3e20323134383632.roa
Signing time: Fri 31 May 2024 22:21:18 +0000
ROA not before: Fri 31 May 2024 22:16:18 +0000
ROA not after: Fri 30 May 2025 22:21:18 +0000
asID: 214862
IP address blocks: 2602:fa6e:60::/44 maxlen: 44
Validation: Failed, certificate revoked on Tue 01 Apr 2025 21:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:b2:6b:69:3f:98:d6:79:9c:ad:d1:ec:01:6a:a7:4c:1c:80:b5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Validity
Not Before: May 31 22:16:18 2024 GMT
Not After : May 30 22:21:18 2025 GMT
Subject: CN=DD39392D72E327627D62E25E51E230BBA8F83EF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:27:33:d6:03:0c:79:8a:41:d2:13:3f:6b:2a:
b7:54:6d:db:dd:3a:81:f4:12:26:76:ed:fc:bb:0c:
c7:17:4a:0b:9a:fd:d9:cf:ee:18:de:a6:28:42:fc:
4c:2c:0a:ca:2e:1b:bd:99:bb:89:98:50:02:46:5b:
fc:e4:8b:1b:03:20:3e:bf:04:d6:c0:08:09:ed:4e:
7c:61:41:9c:c8:46:e9:d8:85:db:63:fb:3a:f7:00:
de:d1:46:37:ca:08:9f:ed:f2:72:a1:f4:52:e4:ac:
38:08:46:07:49:ee:ca:ee:5a:a4:b5:d9:46:65:4c:
2d:67:3f:01:a8:46:1e:88:e3:18:d2:99:a6:d6:b7:
76:1f:d5:18:67:3a:c5:78:82:09:66:d6:e4:fc:0d:
ab:48:73:d9:bc:53:b8:ec:72:12:41:92:90:28:d4:
84:b3:58:21:fc:0d:14:f7:a1:69:aa:99:81:78:13:
99:f8:8a:da:40:a1:96:a1:9b:da:a6:d6:72:1b:7d:
91:ff:6d:7f:a4:9f:c9:78:f9:2b:f7:b2:13:37:74:
f5:eb:47:07:4e:c2:43:c0:da:1f:c8:5e:07:e7:c4:
cf:e7:21:ef:6c:9e:d0:2c:85:8e:9d:b7:b2:1b:a3:
4c:32:2c:83:71:97:d0:e8:d3:d1:42:17:f4:6d:bf:
7b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:39:39:2D:72:E3:27:62:7D:62:E2:5E:51:E2:30:BB:A8:F8:3E:F2
X509v3 Authority Key Identifier:
keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a36303a3a2f34342d3434203d3e20323134383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa6e:60::/44
Signature Algorithm: sha256WithRSAEncryption
4b:50:54:e8:41:ed:ae:12:95:95:1c:c9:68:2e:b2:d9:32:02:
f3:f3:51:bb:6a:ce:94:f0:4d:05:75:e2:ad:41:10:43:be:88:
b4:ba:b1:1b:64:c7:85:dd:d2:83:b0:ee:f6:51:6e:97:d6:6b:
8a:5e:0c:ee:5e:53:39:ab:30:43:9a:c8:9c:79:13:4e:80:f1:
25:36:0a:77:04:23:be:02:66:4e:03:54:3a:8d:d0:a2:49:ec:
00:ae:c9:ea:1d:af:97:3a:88:b6:71:98:8d:00:3b:2e:c4:f7:
8e:f5:78:04:12:32:b2:55:ed:1c:e5:b7:5a:02:7a:06:d5:d3:
6e:7c:03:2a:f0:ba:61:52:f6:d2:e5:ec:61:80:f3:74:21:f9:
cc:71:8e:c1:ab:9d:7c:91:0f:5a:67:15:7f:03:8f:f2:d0:d2:
f9:9c:a0:21:e3:42:82:de:7f:3a:8f:73:e2:80:0e:44:12:b8:
c1:0a:f1:44:22:ce:dc:c1:39:0a:c6:20:0c:28:77:30:98:eb:
29:1f:75:ba:4f:8d:6f:c5:28:5b:f4:91:51:cd:a1:f0:e8:65:
44:8f:38:26:fd:22:21:e3:58:2d:b0:ff:1e:0a:5f:9a:2a:bd:
22:86:5e:ec:21:f2:0f:6a:42:19:e8:f6:78:1c:fc:e8:0e:4c:
d0:bb:85:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:12 2025 by rpki-client