Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a343030303a3a2f33362d3438203d3e20323134393131.roa
File: 326130393a353463363a343030303a3a2f33362d3438203d3e20323134393131.roa (raw, json)
Hash identifier: Icwu0OFqH3sCQjtNJNdtJomop4mO9vCyixG5OQLPJoU=
Subject key identifier: 5E:D7:17:A6:1C:9B:D2:75:4D:EE:C2:0E:B4:66:8E:7C:64:50:BE:D0
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 46CA4A6FF7C8863A4624D1B6A1C7DA921C7EAA73
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a343030303a3a2f33362d3438203d3e20323134393131.roa
Signing time: Tue 18 Feb 2025 07:11:20 +0000
ROA not before: Tue 18 Feb 2025 07:06:20 +0000
ROA not after: Tue 17 Feb 2026 07:11:20 +0000
asID: 214911
IP address blocks: 2a09:54c6:4000::/36 maxlen: 48
Validation: Failed, certificate revoked on Thu 03 Apr 2025 15:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ca:4a:6f:f7:c8:86:3a:46:24:d1:b6:a1:c7:da:92:1c:7e:aa:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 18 07:06:20 2025 GMT
Not After : Feb 17 07:11:20 2026 GMT
Subject: CN=5ED717A61C9BD2754DEEC20EB4668E7C6450BED0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:38:e2:60:91:73:35:31:ad:b3:9e:98:3f:
f5:fe:1f:67:9f:b7:92:a3:c5:a4:8b:b5:8a:5e:ac:
6b:75:9a:9d:0e:e9:f3:ed:27:4e:c9:42:71:a5:a6:
62:39:3d:0a:85:af:56:d5:93:08:16:f4:67:be:a8:
ec:43:79:3b:44:56:82:9e:a9:09:ac:23:93:bf:d5:
3c:ee:b9:d5:07:0a:8d:16:51:a1:b4:c9:15:00:5c:
92:9d:fd:ab:63:ad:53:69:0d:1d:bb:4a:b9:b5:7f:
fb:e6:f4:8a:9c:8f:45:cd:5b:23:62:8e:7b:d8:8c:
09:05:24:1c:43:94:a3:c8:bb:8b:c2:82:dc:bf:04:
cd:5b:c4:d1:4f:3c:65:aa:88:27:1d:ae:03:ef:5c:
b2:52:b6:2f:01:7c:f6:88:18:5f:23:85:1d:af:1c:
cd:0d:59:8f:1d:04:2d:86:02:69:45:41:3a:cc:be:
5c:3b:a5:03:1d:da:4d:06:85:2d:fc:59:26:d8:0c:
2e:83:52:41:92:3b:d4:e9:78:99:a4:9a:b7:df:ad:
94:41:62:16:01:22:8f:26:b9:4a:61:ec:87:6e:aa:
a7:54:73:8a:d2:e0:76:e2:27:fa:e4:ed:6b:fc:77:
2f:a1:99:23:ab:ed:5a:f9:5f:2b:4d:c5:d1:7c:1f:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D7:17:A6:1C:9B:D2:75:4D:EE:C2:0E:B4:66:8E:7C:64:50:BE:D0
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a343030303a3a2f33362d3438203d3e20323134393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:4000::/36
Signature Algorithm: sha256WithRSAEncryption
87:a0:0e:63:a4:bd:eb:c3:23:39:6c:d0:1a:a3:bb:4f:a7:ec:
07:68:c7:a0:ae:90:0d:c6:72:d9:1a:77:a4:53:cf:9d:72:e7:
b4:56:fb:30:5a:6c:8b:b1:d8:22:1a:e4:e2:01:8a:37:21:38:
1f:b9:d7:3d:85:47:aa:35:ce:0a:a6:c4:b3:4a:13:64:02:79:
74:d3:36:43:39:ff:22:bd:f1:1a:29:cc:de:8b:b8:a8:ab:b6:
28:07:f3:70:ff:4c:50:a4:cf:fc:43:d2:b0:c6:b7:87:f0:90:
2b:64:9c:41:7d:1f:6d:19:95:75:40:67:05:b6:b2:f4:13:f4:
d3:23:77:3a:a7:80:b8:24:38:f3:0f:52:ed:47:1b:87:b8:a4:
f8:86:ae:88:83:3d:46:87:d4:5c:64:fd:0a:32:74:2d:67:18:
22:21:81:2e:1f:fb:b8:e6:94:1d:99:31:99:75:56:28:66:83:
99:e0:b3:65:4f:97:f9:bc:43:96:b7:82:95:52:0e:ad:ee:d1:
ad:ab:d0:d5:eb:e1:f7:e6:e6:4a:f5:e1:98:d2:dd:ec:c0:87:
53:7a:50:0c:71:e1:f2:12:83:8a:a6:4d:93:49:51:64:f4:36:
e4:cc:a3:59:01:d3:39:13:f2:ef:11:11:96:33:21:47:88:3d:
31:85:8a:5e
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIURspKb/fIhjpGJNG2ocfakhx+qnMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx
OEMyM0IzNjAeFw0yNTAyMTgwNzA2MjBaFw0yNjAyMTcwNzExMjBaMDMxMTAvBgNV
BAMTKDVFRDcxN0E2MUM5QkQyNzU0REVFQzIwRUI0NjY4RTdDNjQ1MEJFRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJJTjiYJFzNTGts56YP/X+H2ef
t5KjxaSLtYperGt1mp0O6fPtJ07JQnGlpmI5PQqFr1bVkwgW9Ge+qOxDeTtEVoKe
qQmsI5O/1TzuudUHCo0WUaG0yRUAXJKd/atjrVNpDR27Srm1f/vm9Iqcj0XNWyNi
jnvYjAkFJBxDlKPIu4vCgty/BM1bxNFPPGWqiCcdrgPvXLJSti8BfPaIGF8jhR2v
HM0NWY8dBC2GAmlFQTrMvlw7pQMd2k0GhS38WSbYDC6DUkGSO9TpeJmkmrffrZRB
YhYBIo8muUph7IduqqdUc4rS4HbiJ/rk7Wv8dy+hmSOr7Vr5XytNxdF8H++9AgMB
AAGjggJ5MIICdTAdBgNVHQ4EFgQUXtcXphyb0nVN7sIOtGaOfGRQvtAwHwYDVR0j
BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5
OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy
M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt
MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzkzYTM1MzQ2MzM2
M2EzNDMwMzAzMDNhM2EyZjMzMzYyZDM0MzgyMDNkM2UyMDMyMzEzNDM5MzEzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGBCoJVMZAMA0GCSqGSIb3DQEBCwUAA4IBAQCHoA5jpL3rwyM5bNAa
o7tPp+wHaMegrpANxnLZGnekU8+dcue0VvswWmyLsdgiGuTiAYo3ITgfudc9hUeq
Nc4KpsSzShNkAnl00zZDOf8ivfEaKczei7ioq7YoB/Nw/0xQpM/8Q9KwxreH8JAr
ZJxBfR9tGZV1QGcFtrL0E/TTI3c6p4C4JDjzD1LtRxuHuKT4hq6Igz1Gh9RcZP0K
MnQtZxgiIYEuH/u45pQdmTGZdVYoZoOZ4LNlT5f5vEOWt4KVUg6t7tGtq9DV6+H3
5uZK9eGY0t3swIdTelAMceHyEoOKpk2TSVFk9DbkzKNZAdM5E/LvERGWMyFHiD0x
hYpe
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:57:28 2025 by rpki-client