Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/1/323630323a663732653a623a3a2f34382d3438203d3e203633323836.roa
File: 323630323a663732653a623a3a2f34382d3438203d3e203633323836.roa (raw, json)
Hash identifier: 5PJjjF6/JE02Z2e4tgjdbI2QwQ+AWFb1bPd6f07ZSHc=
Subject key identifier: C4:02:E0:14:FC:C3:D3:D9:C6:47:A3:75:57:28:06:D3:70:B8:6D:C0
Certificate issuer: /CN=369dbc2ec136eca64fd2a4969f15c99306c2d11e368f5e1c12
Certificate serial: 0A3C3824F5817EE2198D852D8E0FE7489C1B0E31
Authority key identifier: EB:4B:C0:6D:40:65:7A:9B:F4:3E:CE:83:09:AD:AD:76:DF:24:A6:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec136eca64fd2a4969f15c99306c2d11e368f5e1c12.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/1/323630323a663732653a623a3a2f34382d3438203d3e203633323836.roa
Signing time: Wed 29 Jan 2025 07:33:04 +0000
ROA not before: Wed 29 Jan 2025 07:28:04 +0000
ROA not after: Wed 28 Jan 2026 07:33:04 +0000
asID: 63286
IP address blocks: 2602:f72e:b::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 03 Apr 2025 10:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:3c:38:24:f5:81:7e:e2:19:8d:85:2d:8e:0f:e7:48:9c:1b:0e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=369dbc2ec136eca64fd2a4969f15c99306c2d11e368f5e1c12
Validity
Not Before: Jan 29 07:28:04 2025 GMT
Not After : Jan 28 07:33:04 2026 GMT
Subject: CN=C402E014FCC3D3D9C647A375572806D370B86DC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7e:6e:fe:89:ab:f5:fc:0f:24:0e:63:9e:b5:
41:ad:72:97:b7:15:6e:a0:98:0d:95:84:d6:77:2b:
94:11:db:d6:66:8f:96:25:e8:e0:1a:43:bc:f3:a4:
6f:3a:73:10:37:a5:b5:f3:74:dc:6a:91:b7:83:c3:
f6:dd:89:9b:42:c0:57:b5:30:ae:3c:e9:50:83:fb:
50:95:88:a3:48:07:1d:7e:e3:9b:25:ad:22:54:5a:
e9:65:18:e8:b2:72:96:c7:a5:c4:a3:c2:4b:99:74:
e2:59:d5:ee:c1:cb:b6:19:6a:62:b9:56:a2:52:25:
28:18:9c:64:dc:75:99:64:a9:0e:ea:dd:e8:b5:08:
a6:2c:0f:a7:20:82:87:fe:fa:3b:0c:4b:12:cd:e8:
c5:6a:b4:87:0e:82:1c:dc:3c:03:e1:34:89:79:29:
8e:52:8c:dd:e7:fa:8b:9e:99:9c:b2:0d:ee:10:76:
a9:82:fe:75:bf:dd:b4:28:2e:a9:75:0b:9a:a0:59:
3f:04:8b:d7:bb:58:a1:67:1e:74:39:9b:a1:69:01:
39:2f:9c:23:56:f4:85:96:0c:b9:0b:7d:c4:d1:35:
e0:d5:73:9d:f0:c3:63:ea:5a:34:12:3d:70:c1:0c:
fd:4a:e8:b3:26:a3:ea:d6:4e:dd:44:64:27:8a:e7:
7a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:02:E0:14:FC:C3:D3:D9:C6:47:A3:75:57:28:06:D3:70:B8:6D:C0
X509v3 Authority Key Identifier:
keyid:EB:4B:C0:6D:40:65:7A:9B:F4:3E:CE:83:09:AD:AD:76:DF:24:A6:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/1/EB4BC06D40657A9BF43ECE8309ADAD76DF24A63B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec136eca64fd2a4969f15c99306c2d11e368f5e1c12.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/1/323630323a663732653a623a3a2f34382d3438203d3e203633323836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f72e:b::/48
Signature Algorithm: sha256WithRSAEncryption
7e:9b:8a:0e:79:aa:d8:8d:e7:70:b2:6e:52:96:fb:f7:f4:4b:
3a:af:2b:8c:fe:76:60:c6:3d:2f:4a:a8:3d:72:73:cf:bd:3b:
ec:f7:41:01:30:c6:9c:12:54:ff:05:19:58:86:20:c7:0e:03:
bd:56:75:52:90:52:08:fa:a1:d5:94:8e:53:dd:ef:4b:03:d7:
38:01:1e:be:84:02:6a:e3:eb:cf:f4:84:d9:c4:ea:68:e0:46:
7a:1c:96:ea:73:3c:49:de:a9:85:61:1b:78:1a:f0:62:de:c6:
3f:65:82:35:08:59:ad:60:0c:e9:e9:5b:b0:91:3a:87:20:a7:
6e:3c:2c:ac:4a:5d:e8:18:3b:35:f7:98:3f:d4:92:46:f6:99:
c2:65:b4:54:54:07:ae:8e:dc:9e:16:3e:2e:54:40:08:e8:b5:
4a:0d:30:8b:a1:6b:cd:11:59:9c:1f:6e:5d:c3:1b:5e:ae:33:
b2:5e:a5:4d:5b:22:ce:a3:9b:2b:d9:55:1e:68:0a:1f:2e:c6:
70:30:a8:e5:74:ef:24:c6:86:cd:d3:f4:a4:22:01:f5:56:f3:
d8:ac:88:53:71:e0:7c:0b:ee:fc:55:05:ea:5b:a1:17:31:3d:
ea:56:f6:39:62:48:4e:b1:24:04:a7:ae:ba:10:c1:73:a3:74:
49:7e:7e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:07:08 2025 by rpki-client