Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/323630323a666137613a3a2f34342d3434203d3e203438353831.roa
File: 323630323a666137613a3a2f34342d3434203d3e203438353831.roa (raw, json)
Hash identifier: 0D5UtrEAf6dbhLBAG+/MjLlbSXYx0rUR7iuQTgsVPkM=
Subject key identifier: D3:C6:BA:48:E2:13:34:49:27:83:9B:F2:F6:00:CD:47:D5:B7:F6:02
Certificate issuer: /CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
Certificate serial: 7AA53BB27EB79D764732C1F2FFC3275694B8E92A
Authority key identifier: D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/323630323a666137613a3a2f34342d3434203d3e203438353831.roa
Signing time: Wed 03 Jan 2024 16:09:31 +0000
ROA not before: Wed 03 Jan 2024 16:04:31 +0000
ROA not after: Wed 01 Jan 2025 16:09:31 +0000
asID: 48581
IP address blocks: 2602:fa7a::/44 maxlen: 44
Validation: Failed, certificate revoked on Sun 17 Mar 2024 12:33:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:a5:3b:b2:7e:b7:9d:76:47:32:c1:f2:ff:c3:27:56:94:b8:e9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
Validity
Not Before: Jan 3 16:04:31 2024 GMT
Not After : Jan 1 16:09:31 2025 GMT
Subject: CN=D3C6BA48E213344927839BF2F600CD47D5B7F602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1e:37:c9:56:1d:dc:2a:5f:28:3a:47:d0:3f:
31:70:7a:ad:e4:94:66:79:ab:02:42:1d:ab:fa:95:
eb:05:bb:40:df:de:4c:64:73:52:9a:5f:87:00:8a:
94:ac:f4:e3:7c:50:a9:c8:0e:7a:7e:7e:eb:a2:00:
67:5b:0e:52:9e:0c:bd:7b:9d:6c:2a:8c:16:d4:3e:
a0:dd:ca:b6:9c:6d:53:f8:69:9b:12:b8:1d:2d:e5:
54:c2:eb:39:de:34:5b:6f:35:21:0b:ac:a8:cc:96:
37:7d:7e:79:cd:75:0e:89:6b:09:eb:45:d2:e5:27:
cf:36:7e:cd:0e:bf:9c:b7:c6:c5:65:f4:68:44:e0:
95:a7:98:ca:0e:aa:cb:0b:47:40:a6:b1:2b:dc:79:
da:ed:89:fc:45:a3:43:b8:97:19:9e:89:c6:11:84:
8d:9f:92:66:ec:78:3f:cf:84:08:51:ab:0b:91:77:
b9:4c:f3:d0:62:29:f9:47:d7:8c:64:b5:1b:e5:3e:
00:67:d2:b4:9a:b7:b3:52:fd:ec:b7:77:16:5c:e0:
5d:7e:6b:7b:8a:c9:37:d7:99:91:f3:dd:0a:bf:c2:
54:0f:82:2d:03:48:8a:f6:c8:29:c1:4a:f0:27:4b:
8d:fb:71:cc:3a:db:78:2f:bd:cb:6a:21:28:ba:20:
35:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C6:BA:48:E2:13:34:49:27:83:9B:F2:F6:00:CD:47:D5:B7:F6:02
X509v3 Authority Key Identifier:
keyid:D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/323630323a666137613a3a2f34342d3434203d3e203438353831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa7a::/44
Signature Algorithm: sha256WithRSAEncryption
8a:75:5a:47:40:a0:a9:48:8d:ec:ad:39:92:28:c1:f1:98:e1:
c1:f9:38:05:e9:db:b2:f9:7a:65:c4:a4:cf:58:2f:7a:bf:7c:
48:30:62:f3:43:0c:43:cf:6c:60:d2:d8:90:58:b1:e9:0c:2d:
cf:cf:9a:a9:6e:fd:65:0d:75:6c:d1:bb:4c:22:72:e1:40:38:
5d:08:96:8e:d4:fe:b0:a0:81:e7:43:df:6c:60:33:e3:3a:cc:
b0:8b:e1:ac:b1:d3:a3:d4:43:f8:e4:42:cf:9d:87:01:39:f9:
73:65:5f:21:c5:4f:01:0b:37:84:a4:bb:0e:09:01:d5:b4:e0:
3c:a1:c2:cb:6c:90:5b:14:79:80:c9:8d:79:97:5a:a5:66:a0:
7e:09:5d:06:56:76:46:8b:32:5a:06:54:bf:ef:6b:1f:2b:fb:
dd:99:85:4a:fc:28:72:00:c0:99:77:8c:8d:51:fe:47:e2:6d:
bf:f7:d6:cc:95:eb:ac:3e:4e:60:1b:8e:21:1d:c3:46:c4:f5:
c8:a1:74:b7:a9:bf:40:b5:01:3a:f1:f3:5c:c2:8b:52:90:f9:
a3:52:14:1e:84:08:cd:40:2f:d6:e8:fc:a6:7b:46:02:2c:3d:
c0:fd:86:3b:66:c9:e6:9d:21:0e:45:cb:59:db:99:e1:a6:09:
32:68:e0:d8
-----BEGIN CERTIFICATE-----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Generated at Sun Mar 17 14:37:40 2024 by rpki-client on console-fra.rpki-client.org