Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/323630323a666137613a3a2f34342d3434203d3e20323033363335.roa
File: 323630323a666137613a3a2f34342d3434203d3e20323033363335.roa (raw, json)
Hash identifier: rwMdELUzFMh3zF6Sc7LmThfHOmCD8H3Qr3ljgZvuBE8=
Subject key identifier: 31:61:43:71:18:7F:A8:95:8A:CD:9D:CE:15:F2:BE:CB:77:9B:C3:CF
Certificate issuer: /CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
Certificate serial: 3C6FBDED3C5648F3C6486DE2C970BDE23B0A0AFD
Authority key identifier: D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/323630323a666137613a3a2f34342d3434203d3e20323033363335.roa
Signing time: Wed 03 Jan 2024 16:09:32 +0000
ROA not before: Wed 03 Jan 2024 16:04:32 +0000
ROA not after: Wed 01 Jan 2025 16:09:32 +0000
asID: 203635
IP address blocks: 2602:fa7a::/44 maxlen: 44
Validation: Failed, certificate revoked on Sun 17 Mar 2024 12:28:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:6f:bd:ed:3c:56:48:f3:c6:48:6d:e2:c9:70:bd:e2:3b:0a:0a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
Validity
Not Before: Jan 3 16:04:32 2024 GMT
Not After : Jan 1 16:09:32 2025 GMT
Subject: CN=31614371187FA8958ACD9DCE15F2BECB779BC3CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6e:b2:39:4d:d6:5f:9d:42:d5:00:c3:34:f2:
54:4a:be:a4:29:ea:2f:61:f3:18:be:fe:7c:99:e9:
95:49:1f:83:46:37:ec:46:18:67:7d:0d:ad:cb:b4:
3f:75:92:08:67:69:90:5d:f7:e1:01:4f:7c:77:92:
4e:8c:a7:f2:e3:3f:2d:43:6b:7e:96:92:2f:a9:92:
15:84:28:0c:5d:44:2e:f8:aa:d7:c8:a8:32:8c:d6:
cf:11:c9:7e:fb:40:90:1d:d4:67:63:90:25:e3:5b:
e3:8b:58:68:f1:bd:b5:e9:06:ce:74:25:96:fa:bf:
dd:97:60:61:d1:aa:7b:d0:8f:0b:b3:55:94:9a:b5:
9c:ec:df:b1:84:df:60:50:01:2e:c8:94:0e:4b:97:
db:71:f0:74:c5:82:53:b2:38:ea:2f:47:7a:10:89:
91:c3:ad:71:1b:42:0d:ca:5d:de:9c:63:d1:68:78:
83:cb:2c:27:8c:2e:fa:03:34:2a:89:bb:e0:3e:cd:
b6:cd:aa:67:60:52:28:88:29:7e:fa:0a:fc:74:46:
7d:8d:f6:34:e0:40:c0:b4:e1:a3:7c:05:88:60:d1:
08:49:77:5c:fa:1f:5d:c3:2e:7e:d8:c9:b6:83:24:
74:79:c1:79:84:01:20:6c:a5:75:c8:11:ee:2c:41:
ad:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:61:43:71:18:7F:A8:95:8A:CD:9D:CE:15:F2:BE:CB:77:9B:C3:CF
X509v3 Authority Key Identifier:
keyid:D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/323630323a666137613a3a2f34342d3434203d3e20323033363335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa7a::/44
Signature Algorithm: sha256WithRSAEncryption
4c:c1:80:8f:85:86:d8:ef:8e:0e:42:46:a2:78:2c:43:ec:ca:
18:a4:d9:4c:96:d8:7e:85:b0:91:cf:ee:8c:56:d4:12:b8:fd:
ff:ae:b9:4c:08:ea:56:30:fb:aa:f7:92:fe:45:d1:d7:e8:85:
4f:e0:87:ec:cf:93:c2:a9:f1:bc:26:42:be:e7:43:df:a5:7f:
fc:fc:6a:e1:8c:48:00:08:f7:36:ef:9e:20:00:af:fe:e6:7b:
32:e8:b8:59:c7:05:4f:8b:8e:e4:b2:0c:2d:dd:0e:44:63:23:
fc:4e:31:cb:15:0f:80:ec:12:ea:c4:88:a3:c8:39:9c:10:87:
d9:50:55:ec:33:0e:a0:a6:56:cb:bf:3d:24:7c:d5:d7:f5:7d:
64:b1:34:36:0c:01:7e:f1:93:8d:69:43:4d:fb:30:44:0b:8e:
74:63:8f:e2:c5:ac:cd:ca:f4:af:15:4d:1f:71:a7:61:2a:79:
6a:5a:b0:1b:78:9c:11:90:af:6d:3b:be:81:a1:ab:96:d0:5a:
57:ef:a1:5f:5a:c5:b4:b0:7a:15:f3:73:9e:91:f0:ea:89:c1:
7e:4d:1c:69:2f:7e:a0:db:29:d0:d1:d9:3f:09:c0:fb:70:99:
be:a0:52:27:f4:6c:7e:a8:15:f6:c4:d8:08:82:10:fc:63:aa:
65:c1:73:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 14:53:05 2024 by rpki-client on console-ams.rpki-client.org