Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613532303a3a2f34382d3438203d3e20323135393536.roa
File: 326130613a363034343a613532303a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier: mKJV9sSYx+id2485kdEuf2iAyonrLghXAs5kL3Yuy2o=
Subject key identifier: 39:37:B9:B2:83:11:98:EF:D9:EA:CB:30:78:05:5D:41:AD:D0:58:76
Certificate issuer: /CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Certificate serial: 7C4BB925847C3A984D19818CE3984F010AC7E6B7
Authority key identifier: A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613532303a3a2f34382d3438203d3e20323135393536.roa
Signing time: Sat 08 Feb 2025 19:35:55 +0000
ROA not before: Sat 08 Feb 2025 19:30:55 +0000
ROA not after: Sat 07 Feb 2026 19:35:55 +0000
asID: 215956
IP address blocks: 2a0a:6044:a520::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 03 Apr 2025 12:09:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:4b:b9:25:84:7c:3a:98:4d:19:81:8c:e3:98:4f:01:0a:c7:e6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Validity
Not Before: Feb 8 19:30:55 2025 GMT
Not After : Feb 7 19:35:55 2026 GMT
Subject: CN=3937B9B2831198EFD9EACB3078055D41ADD05876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:bd:e0:29:a6:54:5d:be:39:39:cd:cf:0b:
3a:78:e4:35:e9:09:84:0d:19:b3:79:ef:1e:dd:5a:
95:bb:31:2b:99:0b:38:0a:22:36:0a:40:bf:72:f2:
2d:fd:07:f8:54:8b:69:8a:0c:d0:13:1a:32:e1:2e:
2d:08:f0:11:75:25:b6:4d:09:35:0d:d1:ba:6f:04:
f8:09:31:a2:74:a0:dd:46:0e:6b:47:29:62:12:5c:
89:65:40:12:dc:c9:5e:46:fb:6b:9e:51:8c:7c:d7:
0d:3f:c0:dc:d9:43:9c:da:39:63:d0:38:69:29:02:
02:fe:9a:7d:70:ab:ee:0c:2e:0a:6c:c3:71:f4:06:
e7:55:f3:01:b9:c5:ae:3d:33:1f:09:d9:a0:ea:0c:
5a:21:78:19:17:9b:84:4f:79:1d:ac:25:53:c3:11:
fb:69:e5:db:bc:70:70:ff:5e:12:1e:d9:66:dd:85:
6e:75:9e:4c:2c:c1:bf:2a:9d:d7:5c:5b:1e:c1:3b:
c3:52:34:36:55:85:78:d5:be:4f:1f:c6:05:05:a4:
b2:e0:d0:33:8d:5b:af:1b:1c:1f:1f:9a:28:22:ea:
e6:b9:ee:22:98:4b:dc:a3:47:e4:e8:c0:e8:80:11:
20:ae:3d:87:dc:5a:67:6c:0d:50:d1:f3:cf:88:cf:
db:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:37:B9:B2:83:11:98:EF:D9:EA:CB:30:78:05:5D:41:AD:D0:58:76
X509v3 Authority Key Identifier:
keyid:A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613532303a3a2f34382d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a520::/48
Signature Algorithm: sha256WithRSAEncryption
4f:b6:13:c8:db:3e:c8:4c:dc:7c:99:ce:97:d4:19:50:1e:8d:
aa:cb:d7:ce:a9:ac:af:54:aa:1b:0b:85:62:92:bb:9e:1b:e4:
da:1b:f0:fa:ee:28:53:55:ac:6c:8c:6c:7d:8a:04:67:ea:28:
e7:7d:c5:53:9b:01:8d:7b:4f:17:79:cf:32:2e:cf:80:02:fd:
47:a2:6f:1e:70:16:34:26:b8:33:0b:41:d6:7a:c0:50:44:9c:
64:30:35:1c:21:3a:7e:9c:19:d8:f8:9e:38:da:f2:dd:57:5f:
a5:f0:1b:94:4a:2d:51:a9:f6:05:e7:01:66:ca:3b:b2:4d:63:
81:f3:5c:9a:7a:f0:43:7f:65:2d:cc:9d:b6:4c:ef:e1:1c:ab:
be:94:da:aa:3f:19:f5:1b:a0:f9:48:3b:66:60:33:58:86:24:
a3:c9:44:94:3c:26:bb:af:a8:9e:c3:c6:95:da:e2:0b:88:e0:
bf:64:e3:b8:02:8f:74:49:1c:b3:a4:5b:66:5a:3d:91:35:1c:
d2:d1:ef:18:16:7f:62:c0:e0:c0:0f:8e:bd:d4:03:f3:6f:59:
39:59:4b:40:2e:be:ea:63:67:89:d0:c5:d3:aa:83:19:6f:65:
e9:36:a1:d4:f9:2f:c3:bd:27:93:f9:71:75:9f:57:24:9c:17:
7d:dc:42:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:39 2025 by rpki-client