Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a3a2f33322d3332203d3e203438373030.roa
File: 326130363a313238333a3a2f33322d3332203d3e203438373030.roa (raw, json)
Hash identifier: tORBkObkMqAc0Z6Qz4bZargiQS3B7mumXj6Ac3C8nnU=
Subject key identifier: F9:41:92:D5:21:CC:88:67:73:A8:7F:48:86:F4:DE:BE:DC:0E:2F:34
Certificate issuer: /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial: 68058F5D0E4CD7884BC084A382D8859F8CDFBEF5
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a3a2f33322d3332203d3e203438373030.roa
Signing time: Mon 11 Dec 2023 14:11:12 +0000
ROA not before: Mon 11 Dec 2023 14:06:12 +0000
ROA not after: Mon 09 Dec 2024 14:11:12 +0000
asID: 48700
IP address blocks: 2a06:1283::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 28 Apr 2024 20:42:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:05:8f:5d:0e:4c:d7:88:4b:c0:84:a3:82:d8:85:9f:8c:df:be:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
Validity
Not Before: Dec 11 14:06:12 2023 GMT
Not After : Dec 9 14:11:12 2024 GMT
Subject: CN=F94192D521CC886773A87F4886F4DEBEDC0E2F34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0a:d4:4e:cb:33:ec:31:d0:a8:2b:36:c7:78:
d3:e7:7b:c9:50:b2:db:c8:d1:9d:7f:aa:21:cf:30:
21:3e:00:60:5d:14:90:60:6d:c7:4c:dd:5a:aa:ae:
91:65:ef:1c:3e:a1:49:fb:90:ea:26:50:e7:94:f2:
69:99:52:60:9f:d8:45:2f:f1:0b:fb:7d:76:46:b6:
1b:56:2e:6a:64:b6:74:2b:16:e4:e0:5f:3e:2f:f3:
02:89:35:de:da:db:30:28:57:cf:8c:82:0d:9e:9d:
f7:df:79:b8:ab:07:14:e5:af:5e:f5:a5:ce:f0:91:
a2:0f:ee:a7:3d:aa:b6:33:6a:00:eb:c4:ac:30:35:
a7:40:cb:a6:ef:2f:8a:bd:24:ea:b1:24:d9:3d:61:
fb:3a:ad:1d:eb:74:40:86:df:c8:19:d4:ab:ce:e4:
05:23:59:29:6f:22:30:ec:4a:ee:ea:6f:6f:4a:5d:
46:8e:8b:70:09:9f:f4:f3:b0:c7:0f:78:2f:29:90:
54:bf:aa:02:99:81:ae:9e:c1:b3:cf:54:4c:0d:be:
4a:f2:9b:12:f8:5d:9e:bb:91:03:57:18:71:a4:48:
b6:f5:20:bd:66:f3:20:f1:45:44:a5:a4:69:68:7b:
55:2f:31:e5:3a:fc:c5:c8:7b:d4:05:19:72:e7:62:
c4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:41:92:D5:21:CC:88:67:73:A8:7F:48:86:F4:DE:BE:DC:0E:2F:34
X509v3 Authority Key Identifier:
keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a3a2f33322d3332203d3e203438373030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283::/32
Signature Algorithm: sha256WithRSAEncryption
77:a4:8a:a4:9a:e3:87:b5:f5:57:70:58:3c:87:47:35:f7:b3:
db:2a:bd:32:98:e7:c9:f7:89:06:9f:73:c2:89:9d:d9:29:de:
15:f4:8f:fe:94:da:9f:f6:45:42:19:0f:14:d7:cc:b1:d2:df:
f7:30:38:85:ac:dd:95:43:6f:61:01:1f:77:b2:9f:32:12:01:
97:f3:62:9c:a6:03:48:4f:b4:ca:6b:86:3f:7e:55:cb:9f:cf:
fb:67:6b:25:ba:6a:b1:31:40:05:7e:93:07:77:24:85:64:3c:
36:12:55:71:d0:5e:f7:68:70:db:b3:18:52:ef:9e:b9:2f:42:
e6:13:7d:78:45:bb:f7:3c:44:6a:f4:d7:3e:31:57:32:43:b3:
aa:5f:eb:2e:d7:ed:23:69:78:20:df:08:29:12:d5:1c:c9:77:
a3:9c:59:d5:3a:01:30:58:c8:1e:fc:38:82:96:01:66:80:8a:
ab:df:0d:cc:1a:b7:8f:ac:63:82:83:7b:27:fc:e8:c3:ca:fc:
be:10:81:4e:ed:69:b9:4f:78:9e:00:f9:34:8c:24:1b:84:bc:
68:19:37:25:c3:b0:c8:b7:e8:9c:11:25:89:c8:49:fb:0e:20:
e9:4d:c1:fd:db:08:a3:aa:93:88:47:ff:cf:ae:42:39:e0:6c:
b0:f5:06:9a
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgIUaAWPXQ5M14hLwISjgtiFn4zfvvUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk4NkRCNTQxNTI0ODZENjUzMzg0MTU4OTlERUFEOTVB
MDY3QjI1RTAeFw0yMzEyMTExNDA2MTJaFw0yNDEyMDkxNDExMTJaMDMxMTAvBgNV
BAMTKEY5NDE5MkQ1MjFDQzg4Njc3M0E4N0Y0ODg2RjRERUJFREMwRTJGMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUCtROyzPsMdCoKzbHeNPne8lQ
stvI0Z1/qiHPMCE+AGBdFJBgbcdM3VqqrpFl7xw+oUn7kOomUOeU8mmZUmCf2EUv
8Qv7fXZGthtWLmpktnQrFuTgXz4v8wKJNd7a2zAoV8+Mgg2enfffebirBxTlr171
pc7wkaIP7qc9qrYzagDrxKwwNadAy6bvL4q9JOqxJNk9Yfs6rR3rdECG38gZ1KvO
5AUjWSlvIjDsSu7qb29KXUaOi3AJn/TzsMcPeC8pkFS/qgKZga6ewbPPVEwNvkry
mxL4XZ67kQNXGHGkSLb1IL1m8yDxRUSlpGloe1UvMeU6/MXIe9QFGXLnYsTLAgMB
AAGjggJsMIICaDAdBgNVHQ4EFgQU+UGS1SHMiGdzqH9IhvTevtwOLzQwHwYDVR0j
BBgwFoAUOYbbVBUkhtZTOEFYmd6tlaBnsl4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmNhODExZjgtZDA3NS00ZTUwLTliYmYtN2IyZDA5MDcx
NjhmLzIvMzk4NkRCNTQxNTI0ODZENjUzMzg0MTU4OTlERUFEOTVBMDY3QjI1RS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvMzk4NkRCNTQxNTI0ODZENjUzMzg0MTU4OTlERUFEOTVBMDY3
QjI1RS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmNhODExZjgt
ZDA3NS00ZTUwLTliYmYtN2IyZDA5MDcxNjhmLzIvMzI2MTMwMzYzYTMxMzIzODMz
M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzQzODM3MzAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoG
EoMwDQYJKoZIhvcNAQELBQADggEBAHekiqSa44e19VdwWDyHRzX3s9sqvTKY58n3
iQafc8KJndkp3hX0j/6U2p/2RUIZDxTXzLHS3/cwOIWs3ZVDb2EBH3eynzISAZfz
YpymA0hPtMprhj9+Vcufz/tnayW6arExQAV+kwd3JIVkPDYSVXHQXvdocNuzGFLv
nrkvQuYTfXhFu/c8RGr01z4xVzJDs6pf6y7X7SNpeCDfCCkS1RzJd6OcWdU6ATBY
yB78OIKWAWaAiqvfDcwat4+sY4KDeyf86MPK/L4QgU7tablPeJ4A+TSMJBuEvGgZ
NyXDsMi36JwRJYnISfsOIOlNwf3bCKOqk4hH/8+uQjngbLD1Bpo=
-----END CERTIFICATE-----
Generated at Sun Apr 28 22:52:47 2024 by rpki-client on console-ams.rpki-client.org