Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666435303a3a2f34342d3532203d3e20323133363431.roa
File: 326130353a646663333a666435303a3a2f34342d3532203d3e20323133363431.roa (raw, json)
Hash identifier: MbYZZOitnCn3R0wFqve2Kq3/Qo+gOMCJvDLpNXy55Eo=
Subject key identifier: 6C:8A:02:40:14:DD:9C:20:89:5E:8C:BE:4D:1C:3C:58:D1:32:C5:EB
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 32A4DB960B623BD25497D6A4DC6D99A384917D5E
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666435303a3a2f34342d3532203d3e20323133363431.roa
Signing time: Mon 02 Jun 2025 14:49:52 +0000
ROA not before: Mon 02 Jun 2025 14:44:52 +0000
ROA not after: Mon 01 Jun 2026 14:49:52 +0000
asID: 213641
IP address blocks: 2a05:dfc3:fd50::/44 maxlen: 52
Validation: Failed, certificate revoked on Mon 02 Jun 2025 17:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:a4:db:96:0b:62:3b:d2:54:97:d6:a4:dc:6d:99:a3:84:91:7d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 2 14:44:52 2025 GMT
Not After : Jun 1 14:49:52 2026 GMT
Subject: CN=6C8A024014DD9C20895E8CBE4D1C3C58D132C5EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5c:8f:ce:54:9b:eb:18:b7:9a:58:15:d8:2a:
1b:82:94:5c:9d:97:1f:4e:02:60:df:28:f6:f2:09:
71:42:a7:dc:ef:d0:47:c3:13:71:d9:0f:f4:14:8b:
40:82:ff:fd:cd:15:ec:91:28:23:91:2b:60:99:97:
2d:59:5b:71:78:6a:b5:02:e5:3c:a9:d3:60:5c:33:
59:cd:d8:c3:86:74:bf:53:bb:32:e4:bb:0e:cf:a4:
d4:de:ca:07:a9:2c:69:dc:01:f6:35:fb:00:2e:4a:
cd:91:e7:e6:a3:ba:1d:ea:c4:a5:62:b2:88:12:72:
03:d1:d2:64:b4:98:86:c7:31:49:cb:f7:a7:f8:71:
45:40:7b:18:db:f9:de:d5:c6:8b:87:14:52:54:8b:
0a:47:2f:15:0b:30:ee:8c:96:1c:af:bd:73:4b:05:
92:0a:12:c1:e2:3a:d2:e0:d2:6e:d2:a0:b0:22:50:
3f:5b:aa:c4:7c:1b:79:50:a2:b1:91:9b:2c:3d:71:
15:7a:01:ef:60:98:af:09:57:0e:41:f8:5a:94:a4:
28:23:c3:de:49:e3:6c:2b:76:b6:d8:70:94:e6:3e:
58:14:f2:99:d6:2b:b0:73:af:c7:bf:f7:50:39:63:
1d:00:1a:b2:87:82:3b:8d:74:d5:25:d5:c3:24:7a:
54:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8A:02:40:14:DD:9C:20:89:5E:8C:BE:4D:1C:3C:58:D1:32:C5:EB
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666435303a3a2f34342d3532203d3e20323133363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fd50::/44
Signature Algorithm: sha256WithRSAEncryption
94:70:ed:ff:e5:89:4d:c3:00:c0:5c:61:8b:a7:d7:54:77:cf:
b4:86:08:8a:49:a8:f9:de:cd:a3:5b:8d:ca:fe:b4:60:08:11:
75:61:e0:4e:4f:3f:e3:78:02:70:d0:78:8e:0a:94:a1:d2:56:
ac:79:3c:b7:73:2f:d0:7b:19:a6:ed:2d:8e:57:81:f1:41:33:
1d:4a:a9:12:11:d8:e1:95:5b:11:60:56:19:fc:24:2b:3d:ad:
10:ca:a6:3d:2f:7d:e9:41:51:73:9c:ea:f9:88:a3:a5:83:51:
eb:ad:ec:6e:e1:4c:b8:87:f5:3b:6f:81:96:48:d4:33:b2:ef:
cd:5e:61:54:d5:b2:eb:49:29:2a:da:40:47:33:59:a4:56:8a:
e0:46:00:ec:19:ab:64:84:3a:d1:91:4b:1c:43:6c:dd:76:77:
20:d9:43:b6:00:20:47:c1:44:6a:d8:63:bd:1b:2b:99:13:5d:
b2:c0:ae:c9:6b:3d:c1:a8:f7:8b:e4:7d:d4:15:a4:66:60:dc:
9b:e9:10:c5:63:36:76:de:88:0b:a4:01:57:d8:24:15:59:b3:
73:1c:06:fd:17:cd:58:0c:cd:d9:8a:f4:94:61:f4:5d:de:84:
7b:de:a4:2f:8f:fe:ad:29:e0:5a:b7:db:d2:a0:27:e8:84:02:
4e:b0:a5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 05:13:35 2025 by rpki-client