Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a323030303a3a2f33362d3434203d3e20323135313038.roa
File: 326130393a353463363a323030303a3a2f33362d3434203d3e20323135313038.roa (raw, json)
Hash identifier: u0675HBpnRRtX1mQxIn964o5s8sxrjY5X9g5zaCaCnI=
Subject key identifier: EA:C7:97:BC:F2:CE:ED:39:89:50:44:7A:93:86:A4:82:D3:E4:AB:D0
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 5F85DD5204D7A9DB56300EA910EF1BC14C15375F
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a323030303a3a2f33362d3434203d3e20323135313038.roa
Signing time: Thu 06 Mar 2025 12:41:47 +0000
ROA not before: Thu 06 Mar 2025 12:36:47 +0000
ROA not after: Thu 05 Mar 2026 12:41:47 +0000
asID: 215108
IP address blocks: 2a09:54c6:2000::/36 maxlen: 44
Validation: Failed, certificate revoked on Mon 17 Mar 2025 14:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:85:dd:52:04:d7:a9:db:56:30:0e:a9:10:ef:1b:c1:4c:15:37:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Mar 6 12:36:47 2025 GMT
Not After : Mar 5 12:41:47 2026 GMT
Subject: CN=EAC797BCF2CEED398950447A9386A482D3E4ABD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1b:6e:f5:fc:b4:13:31:85:59:71:92:17:de:
8e:30:7f:ce:db:cf:e3:8c:e6:51:ec:03:67:0f:a2:
de:d0:c3:fe:bc:1d:12:c4:69:90:20:f8:d2:af:c2:
fb:a8:c9:d5:95:59:03:2a:45:0f:f0:0a:b9:51:d6:
04:80:94:4f:e7:6e:23:63:e1:7c:31:c3:21:24:30:
f3:7a:57:23:4e:c6:91:ed:33:cf:46:49:77:fd:03:
c2:5b:17:a7:29:ff:52:03:fc:5f:1b:07:1a:d1:4b:
eb:df:83:65:45:eb:c4:99:36:8b:13:2e:60:40:05:
5d:fa:15:0b:66:1e:26:7d:cf:c6:1f:c4:c7:02:b5:
b0:77:da:2d:47:37:e6:ad:35:ae:35:44:9e:ab:ea:
9b:40:cb:2b:6e:ac:0d:c5:f5:de:aa:f7:16:19:8d:
f1:7c:ad:a3:a1:be:ee:ac:fe:59:d4:60:b5:4a:8f:
e7:96:43:4e:39:5b:99:0b:31:a1:73:16:fa:c1:77:
11:75:cf:cd:45:69:f6:83:ba:d6:12:cb:99:81:ab:
ad:e8:a8:95:ef:7f:04:c8:0a:b3:f0:75:21:a9:4e:
40:55:46:66:63:38:80:6a:f7:e3:f8:4e:5f:ad:ff:
0a:c3:5e:e8:fa:da:fa:55:5e:09:11:fb:ad:f0:a7:
02:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C7:97:BC:F2:CE:ED:39:89:50:44:7A:93:86:A4:82:D3:E4:AB:D0
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a323030303a3a2f33362d3434203d3e20323135313038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:2000::/36
Signature Algorithm: sha256WithRSAEncryption
75:78:36:74:3e:db:01:3c:1c:a0:e8:f1:19:0b:4b:e4:94:1c:
b5:71:99:c3:24:84:9f:a3:37:10:d0:c0:79:93:70:9b:d9:f5:
39:70:8d:a9:f7:3b:5b:53:1a:9e:ae:ff:c5:53:50:43:72:3e:
47:85:94:85:11:49:bf:c9:0b:85:0a:3f:9c:83:69:68:49:63:
64:ae:aa:ba:6d:69:c4:bb:2b:be:b9:37:92:ef:d3:1c:bb:87:
5c:64:bf:10:dd:a3:58:b9:a3:0c:39:43:48:c8:54:87:d6:0e:
5a:a5:cd:27:76:c8:15:9b:69:b6:19:20:85:2b:f7:3c:c8:78:
00:6d:6e:a4:e1:02:d7:7b:6d:a5:02:5f:d4:99:7a:01:0a:74:
ed:a7:35:91:32:a4:80:ef:69:2f:ce:15:1f:3b:dc:9b:0c:38:
a5:9e:c9:8d:92:5e:d2:58:97:9e:d3:ad:4b:ab:e1:e6:48:59:
3c:e5:02:02:1a:64:7b:3e:8a:ff:49:ef:ad:be:70:ec:c5:a2:
f1:69:12:14:24:68:2e:b8:ae:6b:66:48:36:bc:53:05:2b:7c:
fe:60:22:67:ca:76:0e:da:4b:3f:c1:cc:2f:bd:c9:c6:d4:b3:
37:f1:4a:aa:c3:c9:9d:3c:5c:1e:e5:02:dd:4b:91:ca:10:3f:
f0:2e:df:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:59:32 2025 by rpki-client