Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a353030303a3a2f33362d3336203d3e2030.roa
File: 326130393a353463363a353030303a3a2f33362d3336203d3e2030.roa (raw, json)
Hash identifier: F7BX11BczWaCxFG1ZYRq4waoauAsUzzgW5Q/heNrH6M=
Subject key identifier: 1F:7F:7A:0F:FF:3E:50:D2:14:BD:2B:6B:6F:F1:E3:CA:28:E1:FB:C4
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 5AF03522AD36D81A5CB10054FB7296E24B41CB76
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a353030303a3a2f33362d3336203d3e2030.roa
Signing time: Sun 11 May 2025 15:05:12 +0000
ROA not before: Sun 11 May 2025 15:00:12 +0000
ROA not after: Sun 10 May 2026 15:05:12 +0000
asID: 0
IP address blocks: 2a09:54c6:5000::/36 maxlen: 36
Validation: Failed, certificate revoked on Sat 31 May 2025 11:23:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:f0:35:22:ad:36:d8:1a:5c:b1:00:54:fb:72:96:e2:4b:41:cb:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: May 11 15:00:12 2025 GMT
Not After : May 10 15:05:12 2026 GMT
Subject: CN=1F7F7A0FFF3E50D214BD2B6B6FF1E3CA28E1FBC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:11:ec:cf:87:19:3a:24:24:a4:61:c6:51:e4:
4d:f3:43:d1:9a:aa:29:f3:d0:b9:47:fb:b6:42:c6:
1c:3f:1c:05:78:a4:9a:cf:94:ac:11:68:8d:e2:b2:
ea:24:94:f6:ef:1c:29:fd:de:14:e0:cf:ea:66:de:
a3:8b:c5:f2:40:13:23:6b:bb:81:e2:e4:ba:92:43:
36:33:81:50:aa:52:7f:7c:21:18:eb:76:24:15:84:
c5:5d:b1:57:c2:eb:3b:ef:39:7a:25:4c:3c:e3:7c:
92:64:bc:23:af:d9:17:3d:f9:95:d5:b9:c7:f7:a2:
a2:c0:20:98:0d:19:39:3f:77:47:cf:e2:17:20:42:
54:88:f9:0e:12:75:8d:80:aa:f2:25:51:72:4e:c6:
7b:11:5d:71:3d:c8:95:b8:17:b7:a4:f1:59:47:b9:
6d:3a:4c:1f:2b:e6:7e:64:52:2d:cf:a8:93:74:51:
af:65:65:81:f6:b2:79:71:7d:6d:89:fb:82:83:ad:
d8:1e:7b:f2:53:24:60:aa:7f:db:15:42:4c:77:9b:
fc:7a:37:e0:65:55:f1:56:ab:b6:ac:a9:73:a4:38:
f5:f5:70:14:7d:3d:c6:77:f6:05:d8:85:11:4a:5b:
38:8e:c3:b9:42:bf:c9:8c:38:69:fb:1d:d8:7f:63:
a1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7F:7A:0F:FF:3E:50:D2:14:BD:2B:6B:6F:F1:E3:CA:28:E1:FB:C4
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a353030303a3a2f33362d3336203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:5000::/36
Signature Algorithm: sha256WithRSAEncryption
ac:5b:8a:77:d3:fe:e9:96:0e:ac:b1:5f:2a:93:65:32:8b:cb:
70:28:d9:f1:02:5a:f4:ff:de:45:77:14:06:84:87:a9:66:62:
c9:57:04:04:26:a6:6a:b0:55:a0:21:6f:08:0e:66:3d:98:8e:
53:f6:f9:5c:67:a9:3f:fe:02:90:c7:b6:ea:6b:b6:16:f3:ec:
7c:5a:97:0c:d3:38:ab:82:63:54:3c:c1:41:ef:45:37:a7:82:
1b:43:56:de:d1:74:b4:a8:bc:6e:ce:4c:4e:9f:c3:cc:03:91:
f4:b6:f7:e3:a6:df:51:5d:d6:28:55:1b:ab:0f:a9:0b:df:b4:
d8:de:1e:f1:9a:57:a9:ee:71:c5:41:de:26:94:aa:db:c5:62:
1c:d4:11:4c:0d:ea:d0:a4:ef:5d:c2:fe:c9:19:5c:58:90:51:
fe:16:41:15:92:7b:ac:76:71:40:6d:15:df:e2:bb:ac:9d:ad:
f4:4f:c8:6d:16:6d:7a:af:86:67:33:29:83:4b:f6:ee:72:f1:
84:21:16:d4:d2:fd:e4:03:aa:35:b0:cb:81:d7:de:66:c5:f9:
b5:58:d5:24:3d:f5:2d:57:3d:30:24:2b:9b:9a:8f:9c:27:3c:
0a:57:ef:f1:fa:7d:f5:9e:b6:9a:ee:ff:7e:fb:79:3b:11:c1:
65:e6:b4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 03:14:36 2025 by rpki-client