Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613531303a3a2f34362d3438203d3e20323135393536.roa
File: 326130613a363034343a613531303a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier: pkS174scTwzxxnu3rT/WaBMtDN4MJ8+571XnEzS0khI=
Subject key identifier: 95:F5:EE:14:A8:92:BF:2C:37:FD:3B:98:7A:C0:D2:D7:F8:DC:D3:5D
Certificate issuer: /CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Certificate serial: 2072341CFA01DAE36C3299E6CD31C896EDA4F28A
Authority key identifier: A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613531303a3a2f34362d3438203d3e20323135393536.roa
Signing time: Sat 08 Feb 2025 19:35:57 +0000
ROA not before: Sat 08 Feb 2025 19:30:57 +0000
ROA not after: Sat 07 Feb 2026 19:35:57 +0000
asID: 215956
IP address blocks: 2a0a:6044:a510::/46 maxlen: 48
Validation: Failed, certificate revoked on Sat 08 Mar 2025 00:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:72:34:1c:fa:01:da:e3:6c:32:99:e6:cd:31:c8:96:ed:a4:f2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Validity
Not Before: Feb 8 19:30:57 2025 GMT
Not After : Feb 7 19:35:57 2026 GMT
Subject: CN=95F5EE14A892BF2C37FD3B987AC0D2D7F8DCD35D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9c:ba:01:d7:73:c6:70:c7:02:b7:28:a2:5c:
65:04:3b:c7:7e:86:4c:cf:15:9c:6f:95:af:de:6d:
f4:c6:18:8b:3a:ef:5b:eb:5f:2c:8e:c6:62:37:86:
fe:7e:b3:3d:bf:84:58:f5:ab:57:b3:56:d9:43:c0:
b8:05:ed:32:7c:eb:e6:5a:da:f3:a0:6f:cd:13:74:
8d:70:ec:63:2a:e5:2e:9e:1a:94:1f:f3:dd:5e:f7:
01:67:c2:06:e6:97:dd:ee:f5:0c:29:5d:89:d8:c9:
ba:3d:48:5f:5a:79:cf:28:e9:30:02:5d:e2:23:69:
38:ad:fe:e2:66:cc:2a:73:fd:74:d6:0c:96:2b:ee:
e0:64:28:f7:61:b2:78:8c:22:02:3b:c6:35:f8:8a:
aa:9b:20:2b:1b:83:cb:dd:ec:c8:a6:8b:eb:be:b0:
46:e8:ec:d5:71:97:a4:34:b1:b3:ca:d0:bf:0c:17:
df:23:0f:e6:4f:c4:f6:c8:7e:0a:36:b6:65:e7:fb:
5e:82:ff:5f:81:70:fb:8b:2e:aa:61:ef:39:f7:67:
d4:3c:42:43:dd:06:11:c1:2d:17:08:7e:aa:26:80:
42:64:cc:f0:5c:d1:e2:aa:85:66:62:a5:61:f5:a3:
cf:91:fd:d7:7f:2f:b5:69:21:7d:56:11:0a:cb:21:
8d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F5:EE:14:A8:92:BF:2C:37:FD:3B:98:7A:C0:D2:D7:F8:DC:D3:5D
X509v3 Authority Key Identifier:
keyid:A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613531303a3a2f34362d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a510::/46
Signature Algorithm: sha256WithRSAEncryption
18:7b:b9:b4:9c:5b:a7:52:c3:c6:2e:cf:a1:48:07:93:0d:9f:
c5:a4:12:fe:cd:79:91:05:40:a3:3f:12:a7:58:92:eb:c7:be:
9b:ca:62:16:e2:b6:39:46:59:31:ed:5c:8d:d7:78:a8:3a:7b:
16:bd:12:82:4e:6d:68:1e:fb:08:57:f6:7b:af:60:74:47:0b:
5b:7d:2a:11:8c:e4:d0:1e:f8:95:fd:10:b9:2d:50:66:ef:c9:
b9:2e:38:d1:20:7a:bf:c9:7b:af:0b:34:a6:d3:c8:e6:2e:19:
39:6a:3d:85:9e:6f:72:4d:80:6b:d4:7e:cb:6d:7d:b4:3c:47:
c9:d3:46:fb:7b:39:30:69:ee:e8:be:37:b2:b6:75:dc:4d:65:
10:2e:2c:4b:20:49:1a:e0:30:2c:71:f6:41:0b:21:f6:41:57:
ff:6a:7f:b0:b2:d3:95:11:1c:ef:d0:87:98:69:76:0b:10:d8:
1a:b4:c2:43:66:55:d8:db:c8:8b:37:4b:3e:2b:55:49:0d:60:
4e:0b:9c:4f:f8:a5:75:11:ea:5b:cc:a1:eb:bb:61:28:97:da:
85:1d:60:83:34:67:1e:aa:2c:0c:60:1b:e8:9c:87:ae:a3:4f:
0b:98:c2:9e:79:8c:f9:a6:a5:ec:3c:3f:33:bf:10:54:3f:51:
f3:90:35:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:08 2025 by rpki-client