Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666435323a3a2f34382d3532203d3e20323133363431.roa
File: 326130353a646663333a666435323a3a2f34382d3532203d3e20323133363431.roa (raw, json)
Hash identifier: AP1AFM+7rkD/fsiexpLR95misuUZTQSct+TgVFpnqxs=
Subject key identifier: A5:21:D5:21:BB:46:18:96:79:3C:E6:B0:90:C0:7B:96:07:4B:74:2A
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 3F7795BB98F09C567183C24CEA6EAAFC8374CC5E
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666435323a3a2f34382d3532203d3e20323133363431.roa
Signing time: Mon 02 Jun 2025 14:09:10 +0000
ROA not before: Mon 02 Jun 2025 14:04:10 +0000
ROA not after: Mon 01 Jun 2026 14:09:10 +0000
asID: 213641
IP address blocks: 2a05:dfc3:fd52::/48 maxlen: 52
Validation: Failed, certificate revoked on Mon 02 Jun 2025 17:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:77:95:bb:98:f0:9c:56:71:83:c2:4c:ea:6e:aa:fc:83:74:cc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 2 14:04:10 2025 GMT
Not After : Jun 1 14:09:10 2026 GMT
Subject: CN=A521D521BB461896793CE6B090C07B96074B742A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:e6:e7:62:1b:20:f3:55:f4:60:1d:f0:28:
2f:80:8d:d1:94:3b:31:fd:3e:b6:44:28:e0:6b:98:
47:74:57:56:aa:99:be:ad:74:e4:c1:98:20:1e:95:
e6:31:f8:33:be:68:ff:1f:53:89:84:e4:fd:0d:11:
84:c6:da:7c:91:32:1e:b5:51:8d:27:bf:79:b9:1f:
62:2f:38:b3:17:96:41:b0:66:77:86:eb:c1:98:86:
97:e9:fe:e3:11:d1:7a:12:8a:bb:1c:25:6b:d2:55:
30:1d:a5:1e:2a:cf:89:8b:da:c7:e2:d5:06:36:39:
b3:a5:02:11:d3:06:18:ae:ae:2b:6d:73:99:15:74:
74:76:02:1c:5b:6f:50:63:75:f2:d0:df:8d:fa:87:
71:e6:1e:54:cb:83:e8:b1:f9:84:3d:54:a0:c0:68:
46:99:4e:22:1b:f7:d3:49:bf:f2:7c:07:32:ac:40:
89:77:54:27:88:97:fb:e3:dc:fd:68:7b:57:dc:fd:
a6:30:16:c6:9a:76:b3:90:2b:91:80:e3:f4:6a:87:
04:1f:aa:b5:bd:8c:17:84:9f:ba:0a:ce:b3:c2:ab:
cf:f6:ce:73:23:f0:c2:1e:65:a4:b4:7c:43:96:49:
28:e0:7c:6f:ff:58:f6:58:83:c7:87:80:c1:31:92:
da:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:21:D5:21:BB:46:18:96:79:3C:E6:B0:90:C0:7B:96:07:4B:74:2A
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666435323a3a2f34382d3532203d3e20323133363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fd52::/48
Signature Algorithm: sha256WithRSAEncryption
a9:3c:ea:e0:56:e7:88:ac:51:55:3c:7e:00:ea:f4:d4:7d:b0:
b3:d8:cf:45:f0:75:d6:e0:e9:28:75:a3:5e:1c:00:92:7b:88:
27:65:ef:4c:1f:fb:91:65:12:39:b6:de:be:ca:df:32:b8:37:
a3:84:bd:f1:18:11:97:0c:7e:dd:fe:f2:0c:8b:be:fd:18:74:
4e:4f:5f:cf:96:fc:20:9d:a8:5c:10:30:47:62:a8:59:08:1e:
05:a4:1e:ec:fa:9b:a7:4a:b3:e3:df:9f:f7:6a:bb:82:7b:5a:
2d:1f:e5:18:30:59:bc:72:79:d9:66:a3:80:e0:ea:51:a5:f0:
04:ea:9e:ed:97:18:3a:1b:1b:75:e4:72:3c:d2:30:cd:48:6c:
cf:05:87:33:af:d9:d7:e5:1f:cb:e0:08:b9:0e:ff:03:98:0c:
88:c5:50:99:3b:07:c8:c0:63:8e:ef:22:b9:c9:5b:ee:10:25:
77:95:f2:cd:e1:5a:3e:02:fd:b1:28:4b:8a:9d:7b:40:cf:7f:
2b:50:68:67:96:7c:03:bb:7d:8b:30:c8:fa:7e:08:76:5d:8f:
22:bf:f6:5f:44:0a:da:5b:4b:e1:ba:bb:6b:7f:54:87:83:fb:
39:88:8c:77:69:11:4d:6b:d4:f2:47:34:4e:49:78:80:7e:24:
e5:e0:96:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 05:15:44 2025 by rpki-client