Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613530633a3a2f34362d3438203d3e20323135393536.roa
File: 326130613a363034343a613530633a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier: i2BFV9uFBy3b96zQgg78FoHS5sXo/+9LPmH/Dd/M67A=
Subject key identifier: 37:33:EE:AF:6E:19:03:51:BE:D1:5D:74:73:A0:D6:C6:05:9B:D3:4F
Certificate issuer: /CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Certificate serial: 1BA9D7B290194B91E13AB1140C741CE946A78CA9
Authority key identifier: A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613530633a3a2f34362d3438203d3e20323135393536.roa
Signing time: Sat 08 Feb 2025 19:36:01 +0000
ROA not before: Sat 08 Feb 2025 19:31:01 +0000
ROA not after: Sat 07 Feb 2026 19:36:01 +0000
asID: 215956
IP address blocks: 2a0a:6044:a50c::/46 maxlen: 48
Validation: Failed, certificate revoked on Sun 09 Mar 2025 02:29:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a9:d7:b2:90:19:4b:91:e1:3a:b1:14:0c:74:1c:e9:46:a7:8c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Validity
Not Before: Feb 8 19:31:01 2025 GMT
Not After : Feb 7 19:36:01 2026 GMT
Subject: CN=3733EEAF6E190351BED15D7473A0D6C6059BD34F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:22:89:6d:8f:17:11:9d:9b:01:5a:ac:93:db:
be:67:2b:1d:91:cf:d7:b7:5a:a0:af:b9:34:20:b7:
8b:49:af:31:0f:56:64:02:7f:dd:5c:2a:de:20:02:
02:22:fa:e4:d7:8f:12:88:db:46:8f:31:5d:b9:3b:
3c:83:7b:bd:92:f2:50:f8:a1:3e:e8:62:77:8d:4d:
50:eb:b5:07:e2:ea:d5:e9:ca:3b:42:38:68:60:b1:
56:7f:d0:44:bd:78:64:26:a4:78:c5:8c:bb:47:e0:
0c:a9:3e:d1:13:6b:b9:ee:92:79:df:b8:c4:47:2e:
e6:ec:03:34:24:86:1c:a3:37:99:06:35:6e:97:f4:
df:6a:49:42:8c:a6:05:7e:71:2a:3b:e3:6a:ce:25:
bf:ee:5b:89:1e:dd:34:5b:7c:80:1c:79:4c:d1:34:
1e:5d:2b:d3:94:98:2d:85:47:2e:5a:81:54:e6:03:
7c:91:c0:d5:89:87:50:94:5f:93:5c:55:26:8c:57:
01:a7:4a:fa:eb:1f:6d:12:d2:71:8a:58:22:c0:18:
6b:fe:b1:8f:67:32:b1:ca:ff:69:d7:41:98:2f:fa:
2a:92:3b:e9:a8:c2:27:bc:49:90:eb:44:80:bb:53:
b4:64:92:b4:3a:2e:29:96:0e:78:cb:b8:db:79:68:
57:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:33:EE:AF:6E:19:03:51:BE:D1:5D:74:73:A0:D6:C6:05:9B:D3:4F
X509v3 Authority Key Identifier:
keyid:A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613530633a3a2f34362d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a50c::/46
Signature Algorithm: sha256WithRSAEncryption
04:7e:24:31:a7:9f:7b:d0:a9:4f:69:9c:10:31:c3:ab:cf:20:
de:77:30:6b:ff:ae:4f:5d:f5:cb:55:d9:4c:31:cb:19:ae:47:
cd:33:76:81:79:ac:7f:73:9a:e8:64:b5:03:fd:e0:c5:38:3a:
40:0d:23:60:69:bf:8a:33:e9:1b:8a:4a:ae:9f:c8:47:45:9d:
30:4c:e3:08:3e:15:00:e3:2b:7e:23:ea:a0:1d:dd:9b:52:f1:
cc:bb:23:e4:49:3e:67:a0:e4:d1:98:92:8e:73:aa:d6:1d:17:
f0:b1:8a:82:28:bd:a7:ee:27:0d:81:92:d2:c2:ec:d6:07:15:
c9:ef:26:a9:29:d9:ba:b1:e9:73:38:5d:39:78:df:f3:ab:d3:
6b:81:cb:18:5d:0c:19:af:f3:9b:15:cc:02:64:cc:95:cf:ad:
3d:c1:b0:1a:93:ff:c2:44:91:83:97:da:3c:46:1c:02:d1:4e:
5b:02:24:64:9b:51:9b:e4:e2:81:af:52:83:eb:24:7c:76:a9:
56:70:60:b2:28:89:3f:28:0e:45:b8:17:50:95:8b:b3:79:61:
46:99:22:71:b6:ad:ea:ae:50:b3:40:f3:f5:c0:04:01:9d:01:
ea:65:12:22:c2:a5:1f:c5:35:66:69:c0:c1:11:f1:c1:5c:59:
5f:71:a4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:28 2025 by rpki-client