Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386230303a3a2f34302d3438203d3e203439353831.roa
File: 326130363a313238333a386230303a3a2f34302d3438203d3e203439353831.roa (raw, json)
Hash identifier: ZZHKzu7U47wWkzKCw0YWl/V9OGDXEe019Cy47FHxVQk=
Subject key identifier: 5B:E1:A0:CA:02:D0:78:54:24:D7:C5:BA:67:67:8D:AA:0E:12:55:9A
Certificate issuer: /CN=B6366F3DD14AC5399103961C30642E6779892C6C
Certificate serial: 331D230043B8A808E7CF13D4628AFADBFBD4CF13
Authority key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386230303a3a2f34302d3438203d3e203439353831.roa
Signing time: Thu 13 Feb 2025 21:38:56 +0000
ROA not before: Thu 13 Feb 2025 21:33:56 +0000
ROA not after: Thu 12 Feb 2026 21:38:56 +0000
asID: 49581
IP address blocks: 2a06:1283:8b00::/40 maxlen: 48
Validation: Failed, certificate revoked on Sun 30 Mar 2025 11:22:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:1d:23:00:43:b8:a8:08:e7:cf:13:d4:62:8a:fa:db:fb:d4:cf:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6366F3DD14AC5399103961C30642E6779892C6C
Validity
Not Before: Feb 13 21:33:56 2025 GMT
Not After : Feb 12 21:38:56 2026 GMT
Subject: CN=5BE1A0CA02D0785424D7C5BA67678DAA0E12559A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a0:37:fc:04:60:2a:bd:6d:73:be:64:3e:4b:
ea:ae:bd:8c:39:c7:2d:25:06:99:b0:0f:2d:59:6e:
85:f2:9f:b9:5c:f1:8d:ae:12:ad:76:57:88:94:65:
76:2f:1a:4c:fa:86:56:82:e8:0f:75:71:14:79:71:
47:1f:34:8a:c6:b7:7c:ee:17:e6:1e:25:a1:72:db:
8d:55:54:5c:72:78:9d:72:ec:01:dc:7e:0a:e0:24:
0d:05:6a:0e:d3:c4:2c:c1:8c:90:ad:7d:55:2e:6c:
2a:ad:b3:28:a5:5a:57:fe:66:d1:bc:a7:81:31:48:
71:1f:e2:b7:e6:f6:4a:2f:fe:e8:0b:9c:2e:8f:f2:
b0:36:ab:68:d4:20:3f:ae:38:b2:f3:cc:c5:a6:12:
92:eb:8d:71:fb:82:50:a9:e1:f3:83:4c:d5:c3:34:
41:63:2e:ca:88:a7:3c:9b:9d:7f:14:2f:a7:09:9f:
99:0a:4d:06:99:3d:0d:51:f9:56:24:d0:93:a3:0f:
8e:4d:50:d1:7c:93:74:0d:e6:16:d8:ed:56:25:3f:
61:75:ad:a5:5c:b6:dd:4c:97:06:c9:53:4e:2d:7e:
be:f7:c9:09:c9:3d:3a:d1:7b:9f:04:ee:92:6f:ec:
10:a1:a5:66:09:06:e1:dd:c6:9e:c7:86:79:bd:0a:
77:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E1:A0:CA:02:D0:78:54:24:D7:C5:BA:67:67:8D:AA:0E:12:55:9A
X509v3 Authority Key Identifier:
keyid:B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386230303a3a2f34302d3438203d3e203439353831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:8b00::/40
Signature Algorithm: sha256WithRSAEncryption
45:4f:c9:78:6e:90:f7:2c:c3:90:3f:e6:a1:12:4f:58:67:33:
91:1f:b0:9e:33:d2:cd:a3:e4:78:f2:5f:56:30:7d:8e:16:6f:
48:fa:94:6c:09:83:35:7d:17:b3:d4:02:31:aa:9d:83:21:31:
84:94:1d:e0:86:98:23:20:2b:ed:b2:59:53:ec:65:02:b2:4f:
88:5f:5d:a2:9d:ff:cb:0c:d1:4f:47:21:24:fa:50:05:dd:08:
1e:db:81:4a:34:4e:b5:6b:94:c3:b7:47:f3:67:61:22:99:a0:
68:a2:e6:0f:57:a3:6f:2c:5e:6c:da:4d:ab:ce:3e:c3:37:f5:
6b:93:50:23:ed:35:4b:96:aa:a2:49:73:fe:db:92:9a:9f:02:
00:f3:ac:f0:9f:4e:91:d2:fd:12:61:47:04:0d:6b:69:f9:56:
84:2e:41:a8:e4:e1:f8:91:ef:f1:ef:e4:e8:36:ba:bf:e6:c0:
7b:3e:08:6d:48:06:1f:5c:db:9a:5d:5a:d0:e9:c9:e5:1b:61:
ac:f7:b6:a5:ae:2e:5c:15:7e:65:43:16:ae:de:05:31:f6:ba:
d9:11:48:8c:e8:71:bf:e3:ca:e5:75:31:b2:ea:06:c5:68:2f:
57:dd:4d:e2:95:3a:ef:d4:dd:b8:14:0e:20:2e:ec:a0:6f:71:
1f:c6:96:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:13 2025 by rpki-client