Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666435303a3a2f34382d3532203d3e20323133363431.roa
File: 326130353a646663333a666435303a3a2f34382d3532203d3e20323133363431.roa (raw, json)
Hash identifier: iHxx4TdN+3tYE5TUjn6qoGUmAvGk0nFrlzWWg5k/bL8=
Subject key identifier: 19:1F:0C:55:55:F3:AE:B2:31:3C:A5:7B:22:FC:A9:AE:98:60:D1:7F
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 0B4090D42359F874C140E58194F04B9B810FCFDD
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666435303a3a2f34382d3532203d3e20323133363431.roa
Signing time: Sun 01 Jun 2025 18:12:53 +0000
ROA not before: Sun 01 Jun 2025 18:07:53 +0000
ROA not after: Sun 31 May 2026 18:12:53 +0000
asID: 213641
IP address blocks: 2a05:dfc3:fd50::/48 maxlen: 52
Validation: Failed, certificate revoked on Mon 02 Jun 2025 17:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:40:90:d4:23:59:f8:74:c1:40:e5:81:94:f0:4b:9b:81:0f:cf:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 1 18:07:53 2025 GMT
Not After : May 31 18:12:53 2026 GMT
Subject: CN=191F0C5555F3AEB2313CA57B22FCA9AE9860D17F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:3d:54:db:01:14:87:a6:a3:84:c9:34:ab:
95:17:c2:26:61:e5:58:ac:fd:30:dc:d2:4a:ba:98:
83:28:fc:a7:2e:85:43:51:32:b2:bf:48:38:19:ca:
cd:be:a1:eb:19:96:3f:1f:7e:16:03:33:e0:a3:8f:
59:a3:8a:b8:a5:e8:7a:61:d0:0f:f4:96:68:7a:1e:
c2:db:f5:f1:61:56:49:f1:77:40:5b:e8:1e:a0:fd:
7b:17:a4:54:83:37:98:79:93:ff:af:c1:71:06:7d:
4a:5d:72:5d:f2:96:b6:00:62:5f:5e:20:ca:96:07:
f8:e1:70:a6:6f:d5:a4:10:1a:e5:af:0b:10:0b:5a:
73:da:65:eb:7c:fc:a5:14:ae:bd:e8:08:56:b8:15:
f4:57:d4:9c:30:fe:02:ed:cb:5f:a4:be:64:fa:1f:
6d:cf:2e:41:a0:7f:27:1f:24:75:54:c6:56:b2:58:
3e:55:ef:ba:33:47:06:c2:5d:9a:09:7b:49:e3:23:
ab:15:5f:2f:d5:0b:07:42:1e:cb:ad:45:f7:79:45:
75:68:18:f3:f0:c7:44:8c:50:0e:71:43:16:b6:ee:
d2:e4:b4:5f:9f:10:f8:d8:fc:0e:f2:79:dc:25:4c:
f6:a4:75:72:14:70:ef:ea:bb:f6:6b:6f:da:01:7e:
d2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1F:0C:55:55:F3:AE:B2:31:3C:A5:7B:22:FC:A9:AE:98:60:D1:7F
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666435303a3a2f34382d3532203d3e20323133363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fd50::/48
Signature Algorithm: sha256WithRSAEncryption
0c:1f:26:a4:56:98:d2:55:9c:6c:78:85:e1:d2:75:d1:1e:8b:
92:d2:e6:20:9e:57:68:91:2b:26:39:66:a6:9e:fe:5d:95:12:
d1:7a:f0:9b:03:06:7b:33:50:b2:4e:6b:e8:12:34:41:c9:44:
7b:b0:ac:22:0a:c0:31:4a:66:f2:7b:f1:9a:33:c8:17:73:8a:
74:94:e4:cd:1f:5f:45:e0:43:93:94:55:9c:6c:42:b9:eb:f7:
0d:3e:53:c9:6b:23:fa:63:43:88:b4:8d:d0:2c:07:8e:3e:a3:
8d:94:44:b7:ec:34:df:93:6d:ec:1f:b7:28:fa:65:4e:be:d1:
9b:0a:2a:d4:d0:db:79:8b:cb:f0:94:d4:5b:ef:cc:af:73:81:
a9:95:e1:f5:ac:bd:72:3c:a7:09:86:bf:4b:3c:36:bb:cb:d8:
41:29:86:97:15:d2:24:34:1b:15:8e:b3:a8:0f:27:50:6d:c2:
e2:46:94:93:90:da:13:8f:81:df:50:67:cf:87:29:50:bb:1d:
c5:e3:b6:ff:32:49:14:bb:09:b9:1c:82:10:ac:13:16:0a:f3:
01:b0:f2:4a:57:43:57:a0:01:fc:09:a9:bd:cc:c0:3b:49:4d:
51:30:52:82:71:49:70:bb:59:ca:17:8d:7f:08:8c:80:67:70:
96:cc:70:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 05:13:31 2025 by rpki-client