Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666435313a3a2f34382d3532203d3e20323133363431.roa
File: 326130353a646663333a666435313a3a2f34382d3532203d3e20323133363431.roa (raw, json)
Hash identifier: xcQRuVWQN/k+WSJwshx8702BUxhmzb5E4aHNWAYLRBI=
Subject key identifier: 93:5F:6B:BB:3A:38:7B:E3:DF:82:67:88:57:27:EF:5F:42:30:C6:30
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 661C3F564D82E24D5595A9A1D53291D41EE1B482
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666435313a3a2f34382d3532203d3e20323133363431.roa
Signing time: Mon 02 Jun 2025 14:08:58 +0000
ROA not before: Mon 02 Jun 2025 14:03:58 +0000
ROA not after: Mon 01 Jun 2026 14:08:58 +0000
asID: 213641
IP address blocks: 2a05:dfc3:fd51::/48 maxlen: 52
Validation: Failed, certificate revoked on Mon 02 Jun 2025 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:1c:3f:56:4d:82:e2:4d:55:95:a9:a1:d5:32:91:d4:1e:e1:b4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 2 14:03:58 2025 GMT
Not After : Jun 1 14:08:58 2026 GMT
Subject: CN=935F6BBB3A387BE3DF8267885727EF5F4230C630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:6d:83:b4:ae:40:e0:e0:58:d0:91:a1:79:
bc:3b:c9:26:a0:da:04:9d:ab:52:48:14:27:f2:2a:
8c:d4:d0:94:52:8b:e9:54:06:9d:3f:a6:e7:9f:4e:
86:78:e4:48:f2:3a:18:7a:bc:81:61:8a:78:ea:32:
7e:73:63:34:76:82:54:ff:d0:09:69:b4:e7:06:79:
2a:94:b6:7e:9a:d0:b7:aa:2e:45:07:2a:46:7f:24:
53:f0:b3:a2:3e:f0:42:72:36:77:b1:3e:08:71:1d:
b1:ae:20:74:e4:0a:42:8e:09:f1:5b:f6:df:69:58:
0a:0e:8a:57:01:1f:82:9b:ed:59:d5:76:12:28:09:
d4:23:f7:0e:76:e6:a1:a8:b3:71:8e:cb:cc:c8:5c:
8b:03:7c:1d:ff:76:3c:70:2a:5f:88:2a:95:c8:73:
85:68:88:e3:9a:c6:7f:ae:90:32:25:39:1b:b8:73:
25:b0:fa:c1:c4:7f:45:bb:7a:cf:68:07:70:0e:eb:
a2:3d:7f:58:7a:b4:07:b8:34:bd:57:61:b4:46:6c:
a3:aa:22:87:b5:06:50:fd:cd:88:ce:a2:59:b8:45:
1f:da:35:de:44:15:ae:60:54:e0:48:e7:19:ca:fa:
58:21:93:50:fe:c7:9d:13:2c:97:cf:ca:55:5d:2e:
06:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5F:6B:BB:3A:38:7B:E3:DF:82:67:88:57:27:EF:5F:42:30:C6:30
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666435313a3a2f34382d3532203d3e20323133363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fd51::/48
Signature Algorithm: sha256WithRSAEncryption
44:aa:15:ab:47:c8:75:22:87:78:3e:64:ba:da:d4:a1:25:96:
68:e4:78:df:cc:43:5c:9a:da:4d:1a:b7:b7:41:6b:4d:30:0c:
23:04:42:b0:29:7e:56:ed:d9:f6:16:c3:2e:0b:42:f5:03:6e:
7e:4d:5d:dd:01:84:75:8b:2e:8a:5d:26:00:f4:81:34:29:13:
46:bf:c1:23:78:36:a2:a9:c6:ff:bc:03:35:1a:cb:10:89:fd:
4c:fc:5a:a1:97:f3:a7:2b:b6:b1:f0:0c:76:5f:56:ea:3c:13:
b5:85:f7:7f:08:1a:9d:7a:82:10:87:f3:3e:14:d6:dd:24:63:
0f:04:f3:97:36:44:f6:00:22:9c:9a:2e:08:9d:45:df:dd:9c:
53:a9:cd:b0:95:b7:28:6c:6b:66:04:f6:bf:44:ab:01:c0:86:
d8:e2:ff:c4:70:28:94:a9:cc:78:16:36:e1:67:2c:a2:8e:33:
3b:19:ea:db:f9:f8:3b:ce:32:24:b9:8c:0a:61:47:34:fa:ad:
97:23:04:70:28:1c:c7:03:1a:b5:69:67:2b:a3:71:a5:b0:80:
19:6d:56:af:80:ae:1a:7e:d2:56:11:96:32:92:3a:d5:9b:2f:
fb:29:c0:39:ee:e1:1c:7b:c5:e8:7e:ce:7e:d3:c3:48:d4:89:
de:5e:f4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 05:13:37 2025 by rpki-client