Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a626230323a3a2f34382d3438203d3e20323135393536.roa
File: 326130613a363034343a626230323a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier: zNZzqpxdvGiJb2NL9ZJCFKoz/PE3iqDUMJN9ZMk09rM=
Subject key identifier: 7E:20:91:BC:52:03:1B:EB:BF:78:BD:4E:8A:D7:39:FC:EB:47:67:92
Certificate issuer: /CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Certificate serial: 067B80DFA5BE368C6262FF5EE22E9D636B476D9B
Authority key identifier: A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a626230323a3a2f34382d3438203d3e20323135393536.roa
Signing time: Wed 12 Feb 2025 06:31:36 +0000
ROA not before: Wed 12 Feb 2025 06:26:36 +0000
ROA not after: Wed 11 Feb 2026 06:31:36 +0000
asID: 215956
IP address blocks: 2a0a:6044:bb02::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 09 Mar 2025 02:37:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:7b:80:df:a5:be:36:8c:62:62:ff:5e:e2:2e:9d:63:6b:47:6d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Validity
Not Before: Feb 12 06:26:36 2025 GMT
Not After : Feb 11 06:31:36 2026 GMT
Subject: CN=7E2091BC52031BEBBF78BD4E8AD739FCEB476792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6b:88:e5:2b:6c:7e:9f:36:8f:23:5e:d8:f4:
18:88:d0:1e:5e:02:72:56:3b:cc:74:fa:6b:26:37:
98:3f:25:92:69:19:e2:94:5e:e7:60:ec:38:42:6c:
29:7d:d4:d9:28:71:df:7b:79:65:37:c4:f5:87:88:
c4:6e:8b:f5:dd:25:fd:cc:59:ab:a3:32:47:b1:44:
f9:38:0f:c5:00:cd:88:34:6b:ff:35:17:19:43:bb:
b0:99:80:5b:03:64:e1:e5:ab:be:41:57:e1:00:0b:
45:41:f0:8f:67:02:22:02:01:b4:38:69:01:bc:6c:
95:52:80:78:27:ce:4d:a9:f5:47:a3:1f:ff:33:99:
1b:b3:f6:5d:44:6c:4b:18:3e:8c:40:f5:05:84:04:
71:fd:fa:4f:32:04:b1:22:c3:6b:ee:28:2c:10:09:
49:7b:30:bd:35:5e:40:55:f5:60:1d:29:85:48:aa:
78:a2:d1:02:eb:04:c6:a5:1d:b2:45:bf:bd:fd:bc:
f2:af:f0:bd:f7:9c:2e:c7:f8:9b:88:6c:97:d0:86:
20:03:60:ff:ad:79:cb:ef:38:36:3e:77:19:40:c0:
96:53:c5:ed:68:c1:84:22:af:17:3a:dc:4e:19:7f:
8d:26:b6:7a:67:38:39:11:63:f7:55:5e:e8:43:b8:
f3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:20:91:BC:52:03:1B:EB:BF:78:BD:4E:8A:D7:39:FC:EB:47:67:92
X509v3 Authority Key Identifier:
keyid:A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a626230323a3a2f34382d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:bb02::/48
Signature Algorithm: sha256WithRSAEncryption
7e:46:1e:42:ea:38:86:b5:34:e6:3d:0f:9e:eb:ae:fd:0d:be:
12:97:94:ab:94:4a:f1:ff:e3:0a:60:e0:7b:5b:43:fe:f4:a9:
26:0f:bd:b6:07:23:84:5f:ce:ad:4b:ce:1d:8c:c4:71:cd:c7:
0d:87:d7:68:d0:0f:e8:30:37:75:67:29:e2:94:76:86:a9:5c:
d1:20:9e:01:04:3e:3b:53:3d:ba:87:13:d3:bf:10:47:c5:db:
cf:e1:ad:a6:28:2d:4d:88:22:32:aa:25:d9:55:3f:29:bc:11:
a5:8e:cc:66:e0:14:2d:d1:1a:f6:ba:ab:31:93:93:da:52:d7:
f5:26:ce:a4:00:30:4c:c5:ca:c7:7f:cf:5e:63:f2:8f:54:84:
96:26:09:9f:23:d2:5e:8c:d0:2f:ab:42:70:e4:80:d7:a3:85:
83:2a:cc:79:44:cd:54:60:01:1a:2b:95:05:a8:30:75:8c:bc:
d8:d1:38:0a:30:91:ef:ae:7d:cd:42:f2:60:37:f5:2f:76:a8:
5d:3d:e7:a9:22:c7:99:3b:f0:95:14:8e:f1:27:08:c2:0f:38:
48:4d:37:33:83:83:52:2f:44:29:08:72:49:b0:1a:9a:01:91:
8d:66:10:57:c8:c9:67:aa:33:e9:f2:9e:d1:d7:9c:57:1a:91:
f4:70:dd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:40:31 2025 by rpki-client