Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656466383a3a2f34362d3438203d3e20323135393536.roa
File: 326131343a373538303a656466383a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier: sK4oWY1Wq2bkLG0lsmXjfF68jmldvC0bGR5poM57Rps=
Subject key identifier: 3B:04:8A:4D:37:2F:94:09:F2:7B:7D:B0:93:AC:7A:24:75:2A:3B:8E
Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial: 25804B6440BEA86E65542EA1480A4D6198F33729
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656466383a3a2f34362d3438203d3e20323135393536.roa
Signing time: Sat 08 Mar 2025 00:15:42 +0000
ROA not before: Sat 08 Mar 2025 00:10:42 +0000
ROA not after: Sat 07 Mar 2026 00:15:42 +0000
asID: 215956
IP address blocks: 2a14:7580:edf8::/46 maxlen: 48
Validation: Failed, certificate revoked on Sat 08 Mar 2025 03:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:80:4b:64:40:be:a8:6e:65:54:2e:a1:48:0a:4d:61:98:f3:37:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Validity
Not Before: Mar 8 00:10:42 2025 GMT
Not After : Mar 7 00:15:42 2026 GMT
Subject: CN=3B048A4D372F9409F27B7DB093AC7A24752A3B8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:04:8b:78:9c:0b:09:84:ab:e3:f1:9b:dd:
09:17:6a:1e:69:79:a8:7b:70:1f:f9:44:82:3b:e6:
2a:8d:61:e2:d9:a1:17:18:a7:dd:29:ad:a7:77:e5:
84:83:68:9e:8e:cf:fd:be:04:7c:8d:92:f4:98:87:
81:3e:f1:71:70:62:c8:f7:c1:4f:9d:eb:87:c3:11:
33:91:cb:26:21:26:d9:26:be:5e:0f:cd:b0:79:ec:
3b:2a:c0:fa:17:8c:2d:fd:94:5a:d3:0c:73:4a:48:
a6:1c:c2:4f:07:a8:74:6e:53:77:f9:b7:18:f8:14:
5c:51:ff:a2:34:7e:c4:2d:f2:ba:89:2a:53:87:32:
ed:c4:3f:76:bb:05:65:93:20:ec:05:33:55:ae:23:
ab:1f:b0:af:79:1b:f7:27:8e:fc:0f:d0:dc:f5:c7:
8b:f2:c7:59:71:40:b9:57:49:ce:19:bd:62:75:b6:
50:3e:32:ce:8d:d6:86:88:08:b7:d1:7f:9d:75:f1:
d2:40:e8:18:90:8c:bc:cb:5c:26:a4:3c:16:ae:ea:
28:6b:93:f4:e0:31:3c:7b:79:9c:39:fa:11:97:71:
ee:45:07:63:2b:76:60:77:c9:ce:93:41:41:c0:30:
45:d2:83:ea:41:80:6d:9c:d8:73:8c:f1:6a:a0:2d:
d6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:04:8A:4D:37:2F:94:09:F2:7B:7D:B0:93:AC:7A:24:75:2A:3B:8E
X509v3 Authority Key Identifier:
keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656466383a3a2f34362d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:edf8::/46
Signature Algorithm: sha256WithRSAEncryption
40:95:14:f8:f1:79:20:db:f5:d5:f3:70:b8:75:9d:b8:96:fa:
26:b0:24:4c:83:50:48:3f:a4:2b:19:50:cd:97:91:a7:e1:fb:
d5:7f:26:3d:41:9f:08:0d:62:a4:d7:87:a5:fb:69:c4:4e:f4:
4c:0b:4e:dd:6f:4b:de:5d:b4:44:5f:65:27:aa:f3:5e:91:a8:
1b:06:ee:f5:0f:c6:20:0c:07:85:fc:22:24:d3:f7:d2:d9:a4:
30:b1:c8:5a:15:fa:6a:9d:6c:05:20:88:7e:ad:31:a8:2a:25:
b1:71:41:af:22:8b:5a:f9:70:0b:39:d2:7f:d1:93:50:ea:f7:
f0:0e:de:70:0d:0b:5a:b6:17:ea:41:dc:96:90:6d:8a:e9:ac:
76:cf:70:d5:8f:19:47:27:e6:93:77:46:ab:1a:9d:ef:e3:8a:
00:4a:94:ea:e8:0f:c0:f9:04:8b:78:f9:12:dc:83:75:02:38:
f5:77:ef:ce:07:c7:ec:36:df:61:58:b9:1f:94:e8:f5:da:2b:
77:11:a5:75:e8:0e:07:6f:95:9c:8c:b9:70:28:a7:9e:0d:ad:
c5:3e:88:0b:97:a6:44:0e:5e:9b:cf:ef:00:e6:c0:24:b5:81:
94:34:96:37:46:a5:5b:93:9d:fb:72:3f:47:5b:a0:1f:21:d8:
83:e8:2d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:02 2025 by rpki-client