Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613533613a3a2f34382d3438203d3e20323135393536.roa
File: 326130613a363034343a613533613a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier: XCtLeUqFAvfRgFom9j0O80ZtbY1NXzf/JUREzRVfpug=
Subject key identifier: 78:8D:13:BD:CF:08:6A:7F:B8:87:11:77:AB:92:FA:B3:0C:98:69:D7
Certificate issuer: /CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Certificate serial: 0BCE0EAB49A18CAFDFF2F75FD88F3FC896FF4963
Authority key identifier: A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613533613a3a2f34382d3438203d3e20323135393536.roa
Signing time: Sat 08 Feb 2025 19:35:58 +0000
ROA not before: Sat 08 Feb 2025 19:30:58 +0000
ROA not after: Sat 07 Feb 2026 19:35:58 +0000
asID: 215956
IP address blocks: 2a0a:6044:a53a::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 04 Apr 2025 13:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ce:0e:ab:49:a1:8c:af:df:f2:f7:5f:d8:8f:3f:c8:96:ff:49:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Validity
Not Before: Feb 8 19:30:58 2025 GMT
Not After : Feb 7 19:35:58 2026 GMT
Subject: CN=788D13BDCF086A7FB8871177AB92FAB30C9869D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:07:90:d9:fa:bc:f0:d8:ec:ec:01:7b:78:
94:32:f9:f5:a4:70:42:60:07:d3:0a:e3:d2:bb:0f:
4a:48:b9:0f:85:ee:48:7e:e7:27:70:79:ef:7a:ca:
2a:9e:1e:15:77:02:10:56:5e:81:c0:a3:cf:7c:2d:
60:ab:be:c0:4a:c1:2d:6a:72:e0:e1:8d:6d:dd:be:
71:5e:f0:86:fd:45:2b:6e:62:37:be:22:62:b6:5c:
e7:1e:57:d9:53:0a:51:27:16:6d:a1:de:c1:b5:6e:
b2:21:b1:4a:d5:7d:82:f1:43:34:1a:c4:17:f1:0a:
c4:f8:97:6d:01:cb:80:fb:5a:38:9d:3f:e7:b7:8c:
70:8c:c9:2c:38:7a:3f:e5:3c:5c:9f:1d:00:96:06:
aa:53:cb:09:1d:eb:31:0c:c1:ec:85:8d:3b:7b:c6:
70:0c:fa:c5:02:fc:78:ad:4e:79:70:f5:3e:2f:66:
00:c2:13:7b:8f:f9:ce:77:55:68:48:3c:d3:ca:cf:
80:53:00:64:db:9c:e9:a1:7b:83:09:09:db:b1:54:
d0:c4:3c:28:e1:cf:8e:96:46:b7:e8:3b:87:d6:eb:
c7:11:21:8e:50:a8:2c:95:e2:bd:fe:c9:b2:35:74:
cf:df:81:39:c4:12:5b:9e:2e:f3:2c:48:a2:37:c1:
04:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8D:13:BD:CF:08:6A:7F:B8:87:11:77:AB:92:FA:B3:0C:98:69:D7
X509v3 Authority Key Identifier:
keyid:A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613533613a3a2f34382d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a53a::/48
Signature Algorithm: sha256WithRSAEncryption
89:7c:69:7f:d9:1f:87:6e:01:2b:9c:9a:27:33:55:50:54:ac:
90:85:9d:f6:bb:f4:42:50:9a:15:b4:5d:a5:dc:f3:15:8c:46:
55:9b:a1:1a:83:c0:99:cf:a1:7f:75:45:89:43:d9:e2:dd:1a:
ca:5a:c8:fe:7f:fc:30:ba:1a:bb:9e:ac:8b:e7:7f:21:ac:da:
bb:e6:8b:ad:79:37:94:d3:9d:77:df:db:21:1c:21:13:15:c9:
27:54:51:a4:72:89:e5:aa:e0:0b:07:94:44:ac:9e:56:22:44:
02:ff:0d:ba:50:79:cf:d1:b4:e2:18:ec:77:f8:ae:b4:82:d3:
a2:2d:9a:29:b7:b1:d3:ca:72:23:3e:99:bc:26:6f:0b:67:c6:
d1:83:89:02:05:b3:32:7b:91:50:f3:5b:b8:c6:a3:e2:7d:f2:
f8:0d:0c:da:69:a2:76:e8:c3:10:89:6d:72:47:88:1f:72:a8:
c0:47:fe:90:f8:d2:af:76:12:0e:d2:b0:ce:c1:84:2b:20:36:
23:27:6d:70:98:e9:65:f3:b8:f3:74:7f:11:08:c2:0c:ff:6f:
a5:f8:31:2d:81:be:5e:77:7d:e4:1f:45:33:9a:ae:4f:a9:40:
a5:f0:5c:7d:ed:3b:39:84:1c:e7:3d:b6:2a:35:f1:92:ad:1f:
68:b4:e7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:03 2025 by rpki-client