Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a626230333a3a2f34382d3438203d3e20323135393536.roa
File: 326130613a363034343a626230333a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier: 1gWlq6I3uwnNe6TZmdj/2/N7yegqi81mZ9LVKJDHqRM=
Subject key identifier: 54:D9:D2:13:3C:4A:96:41:20:E4:0A:A5:44:43:AC:D6:1C:F3:14:21
Certificate issuer: /CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Certificate serial: 68B7B9647D1797D009D9DC59A014DA6357F37C4F
Authority key identifier: A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a626230333a3a2f34382d3438203d3e20323135393536.roa
Signing time: Wed 12 Feb 2025 06:31:34 +0000
ROA not before: Wed 12 Feb 2025 06:26:34 +0000
ROA not after: Wed 11 Feb 2026 06:31:34 +0000
asID: 215956
IP address blocks: 2a0a:6044:bb03::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 09 Mar 2025 02:36:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:b7:b9:64:7d:17:97:d0:09:d9:dc:59:a0:14:da:63:57:f3:7c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Validity
Not Before: Feb 12 06:26:34 2025 GMT
Not After : Feb 11 06:31:34 2026 GMT
Subject: CN=54D9D2133C4A964120E40AA54443ACD61CF31421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:07:87:5c:e1:ec:95:0b:43:75:c2:7e:b1:46:
bb:8e:3d:04:00:5a:8c:18:bb:c2:46:7d:ed:c8:1d:
7d:1b:6d:93:3c:4e:4f:2c:fe:c9:b7:6b:b5:ba:7a:
5e:35:06:9b:83:aa:cc:c8:5d:e1:72:49:5e:a0:71:
e2:cc:f2:83:74:dc:0d:2d:fe:fd:52:51:2c:8c:03:
22:70:c8:4d:d3:ec:5a:d0:d8:44:88:31:47:d4:75:
ac:93:a4:f7:dd:18:e4:46:b2:96:86:21:89:b6:0c:
ff:9a:f7:fc:89:cb:cb:17:17:16:40:32:6c:a5:74:
9c:df:f1:ca:ef:75:73:81:fd:b9:2e:44:fa:01:56:
59:a6:86:25:08:57:6e:c4:d1:0f:10:1c:2a:4a:ea:
ff:97:40:fc:7a:5f:ea:7d:b3:16:28:01:03:69:5d:
50:ee:62:fc:fb:e3:c2:50:58:75:b0:fb:91:93:b9:
57:ba:90:24:6c:c3:35:4f:55:8b:df:0c:47:f7:09:
39:08:80:a7:2d:8f:9a:19:2c:68:52:e5:2b:2e:ee:
42:40:3a:59:04:f3:49:22:53:7f:cd:c8:d2:6d:bf:
fc:af:bf:ac:e2:c5:00:93:9e:ca:38:96:45:28:db:
57:e2:32:5b:fc:8b:7b:a8:f6:8a:4b:3a:00:25:d2:
ed:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D9:D2:13:3C:4A:96:41:20:E4:0A:A5:44:43:AC:D6:1C:F3:14:21
X509v3 Authority Key Identifier:
keyid:A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a626230333a3a2f34382d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:bb03::/48
Signature Algorithm: sha256WithRSAEncryption
60:85:97:b8:5f:a0:46:fe:24:d6:eb:80:14:44:76:4a:6c:fc:
43:0e:b6:4c:96:09:ee:0f:be:b6:d8:3f:09:6e:88:33:47:b4:
13:20:24:d7:87:74:49:a5:8f:2a:f5:d3:f2:9d:12:cd:2b:3f:
12:32:5c:9c:24:ae:5b:b1:ae:81:ca:4d:17:18:58:07:ae:8b:
1b:96:9f:f1:63:e2:ec:63:d9:56:1c:bb:5c:7b:f7:c7:d9:46:
9a:e6:6d:5b:f4:68:b5:a0:66:8c:02:79:a5:eb:12:89:dc:3f:
91:54:4d:e2:ae:41:99:4b:6c:37:ef:10:2f:08:d5:4e:01:47:
f6:c3:bc:8e:8f:29:b7:ed:8d:08:8b:40:2e:60:59:e6:59:f7:
79:1c:1c:92:bd:e5:d8:21:5b:5e:bc:31:d1:50:a9:68:ea:d1:
7b:f8:22:ac:ca:b7:87:9d:7f:2e:bd:be:93:e6:ca:d7:67:cc:
fa:88:c7:e1:c2:b2:da:c2:13:ab:d9:e3:09:95:89:2f:2b:5c:
29:f1:43:43:52:bb:fe:61:a0:fa:42:79:43:1a:a1:a0:7f:00:
b4:87:af:90:63:25:db:e7:d9:e8:7e:86:50:51:c8:f5:29:e3:
7d:89:7d:4a:ef:04:6a:5d:5f:e1:47:80:50:bd:71:ec:6d:70:
e5:cb:b1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:52 2025 by rpki-client