Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666630303a3a2f34302d3438203d3e20313938383839.roa
File: 326130353a646663333a666630303a3a2f34302d3438203d3e20313938383839.roa (raw, json)
Hash identifier: uCvkNaMLyFQe3T2lbucxXIRCT17gIxD3nGbjNXXGw5c=
Subject key identifier: 64:7A:BE:46:A4:7B:16:21:4A:FF:BC:53:72:41:9E:F3:AB:33:05:52
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 7E2E10C4A06806FD9DD4F0AF04D64564C19ACCC1
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666630303a3a2f34302d3438203d3e20313938383839.roa
Signing time: Fri 07 Feb 2025 18:33:14 +0000
ROA not before: Fri 07 Feb 2025 18:28:14 +0000
ROA not after: Fri 06 Feb 2026 18:33:14 +0000
asID: 198889
IP address blocks: 2a05:dfc3:ff00::/40 maxlen: 48
Validation: Failed, certificate revoked on Sun 23 Mar 2025 12:47:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:2e:10:c4:a0:68:06:fd:9d:d4:f0:af:04:d6:45:64:c1:9a:cc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 7 18:28:14 2025 GMT
Not After : Feb 6 18:33:14 2026 GMT
Subject: CN=647ABE46A47B16214AFFBC5372419EF3AB330552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5c:44:78:56:1d:a1:09:7e:b1:11:10:37:91:
0c:f4:13:72:8c:33:da:b8:b3:70:35:da:52:74:ad:
f0:1d:3e:cb:1c:33:10:a7:5e:a5:4c:df:8f:10:78:
16:a1:ee:31:32:88:23:d3:3d:3a:54:87:70:2e:c5:
68:c3:02:39:85:d8:2f:89:f1:4f:0b:ab:fa:d7:a5:
30:79:71:a2:f6:25:fe:c0:85:9f:d9:20:36:25:7f:
04:c8:f5:1d:6c:a2:63:5b:1f:a0:70:0f:b3:e3:0f:
a5:4f:fc:81:72:ab:cf:28:fa:28:cd:f1:42:7a:00:
05:13:7b:11:e7:20:66:4d:e3:02:08:53:8e:c1:ac:
bf:8b:5b:2b:22:4e:03:94:3e:01:6d:e2:f9:08:98:
27:f4:26:b4:36:96:6e:bb:51:09:b0:9e:fc:0a:74:
10:f9:a6:3c:d9:c6:ad:87:37:10:b5:81:43:d9:01:
8f:1d:56:83:6a:ad:12:7d:3e:c4:ed:36:11:01:3a:
cf:ef:65:e2:fa:53:7a:2f:64:94:58:59:41:15:d2:
be:dc:b3:4d:eb:49:7f:52:1b:34:1e:e6:3f:89:18:
dd:5e:12:bb:6a:d6:cf:4f:d7:e4:29:cd:8a:d1:74:
01:35:13:1d:42:41:f8:1e:0a:08:57:55:73:45:13:
f1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7A:BE:46:A4:7B:16:21:4A:FF:BC:53:72:41:9E:F3:AB:33:05:52
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666630303a3a2f34302d3438203d3e20313938383839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
36:2f:f8:97:de:0a:5a:0d:ac:e2:e2:4f:d6:73:99:82:36:05:
55:55:0b:4d:2c:f4:f9:dc:b3:6f:aa:dd:f5:34:b9:51:e5:3f:
62:08:89:67:b5:2b:4d:14:bd:79:18:c3:c3:b3:4c:b9:84:78:
19:9e:aa:17:a1:d6:56:62:f0:e6:9b:ff:e1:5f:74:88:4b:a0:
2c:63:16:71:07:de:5b:a8:96:f2:21:dc:10:a7:09:3d:f1:6c:
8d:17:7b:38:88:80:55:7e:2f:4d:0d:f6:2d:c9:8b:6a:b3:4d:
c4:75:45:86:02:b6:42:43:0f:cf:5b:42:98:38:8a:b8:95:af:
20:83:df:29:35:b4:6b:cf:3d:fb:e1:8a:b8:db:f9:82:2e:a6:
c7:b6:79:13:ec:74:64:9f:de:c6:d9:2c:fb:67:39:61:53:a8:
73:ac:4f:f2:9f:d7:0c:67:51:ef:fb:05:54:36:1d:9e:c3:c7:
27:86:fc:ea:b2:eb:15:f3:ed:61:9d:16:9c:5e:ac:70:2e:33:
41:46:62:ce:6f:b5:66:c5:50:5b:bb:ea:ce:8b:f0:69:b5:43:
c3:91:de:bb:07:f8:b7:a8:e6:8e:13:67:77:56:0b:30:4a:80:
e9:d7:72:38:27:3a:43:e8:33:36:73:41:12:8c:68:c7:4b:20:
a7:64:9c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:57:13 2025 by rpki-client