Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a353030303a3a2f33362d3438203d3e20323039363933.roa
File: 326130393a353463363a353030303a3a2f33362d3438203d3e20323039363933.roa (raw, json)
Hash identifier: GUNeH2+z36sgZCQMq+A5pgqJOguwWigWE6rIJbRVE7Q=
Subject key identifier: 26:DF:58:EE:BC:C0:45:CC:18:20:F0:0E:02:1E:FF:15:AC:16:3A:CB
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 3E83CDAC827C81F5F7680F9FC857FD9C2BDF7F78
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a353030303a3a2f33362d3438203d3e20323039363933.roa
Signing time: Sat 07 Jun 2025 13:34:17 +0000
ROA not before: Sat 07 Jun 2025 13:29:17 +0000
ROA not after: Sat 06 Jun 2026 13:34:17 +0000
asID: 209693
IP address blocks: 2a09:54c6:5000::/36 maxlen: 48
Validation: Failed, certificate revoked on Mon 30 Jun 2025 14:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:83:cd:ac:82:7c:81:f5:f7:68:0f:9f:c8:57:fd:9c:2b:df:7f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 7 13:29:17 2025 GMT
Not After : Jun 6 13:34:17 2026 GMT
Subject: CN=26DF58EEBCC045CC1820F00E021EFF15AC163ACB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:65:d4:bf:e0:27:e0:f6:8c:f6:6a:6d:98:83:
3a:66:33:e7:4b:c6:16:56:fb:a1:1b:f1:cc:14:a5:
51:54:01:a7:7a:d1:d9:25:c5:c3:86:45:cf:1b:1f:
56:cb:90:17:da:e8:d8:26:53:ce:4f:68:bc:47:17:
d7:10:99:9c:a5:76:41:15:36:18:75:e0:d1:d3:74:
a8:2e:3c:37:aa:f9:64:85:ed:fa:64:b7:37:a1:91:
0b:2b:cf:d9:7d:e4:da:b6:b3:a2:31:a8:4e:eb:75:
13:f0:95:d3:aa:63:64:aa:bc:3b:77:16:b9:09:7e:
95:c4:36:aa:10:f1:c1:51:98:25:d0:4d:21:ed:41:
ae:a6:e8:05:d3:95:d5:9a:2a:78:83:5c:60:53:03:
2c:43:4f:a4:a9:bd:a7:52:a0:79:3e:2c:63:23:89:
7e:ea:bd:4a:b6:65:11:2d:c2:7e:04:cd:d7:ce:91:
55:f5:eb:bf:27:e6:a6:c5:6f:75:f8:7a:4f:ef:c2:
ad:98:77:ed:1b:5f:75:bc:60:62:2b:54:c4:18:30:
74:4f:d8:20:3f:26:81:33:37:53:85:40:47:3a:44:
5c:24:e6:82:39:37:9e:63:59:48:53:dc:ce:df:f6:
a5:e3:3b:99:a5:8c:7f:27:c0:6d:e3:fa:b0:45:6d:
e2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DF:58:EE:BC:C0:45:CC:18:20:F0:0E:02:1E:FF:15:AC:16:3A:CB
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a353030303a3a2f33362d3438203d3e20323039363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:5000::/36
Signature Algorithm: sha256WithRSAEncryption
89:09:61:fb:fa:b3:3b:83:40:e2:81:8f:9f:26:b0:a8:54:c7:
9c:b4:13:ed:f2:30:f1:7f:03:99:44:78:be:f2:bb:04:c6:9b:
c4:f4:7b:57:eb:76:89:be:a9:2d:61:4f:f4:18:cf:1d:0e:84:
e3:9f:49:fe:45:05:ca:ab:ec:53:a1:82:39:5d:c6:19:2b:52:
a1:55:d0:1f:5f:8e:08:4f:a6:db:25:d1:74:07:07:da:0f:99:
7f:04:e1:8f:9e:d4:47:a9:9f:24:cf:27:b6:2f:64:20:34:a2:
c3:6b:63:c1:55:37:3e:a1:4f:24:80:58:bc:15:66:c1:ce:cd:
df:e6:73:20:6f:6b:6c:e4:11:10:e4:a2:d9:a1:b9:49:84:3c:
17:28:14:30:e4:5c:60:82:44:3a:ff:bb:ac:82:55:f0:9e:19:
b6:02:ac:e8:90:e2:67:04:4b:9e:b5:81:d0:84:b0:74:10:f3:
f0:33:89:3a:56:97:7b:76:53:59:ae:b6:a3:ad:35:97:d1:f8:
d2:52:6b:d3:d8:2d:1c:bb:a3:b7:3c:c1:02:b8:da:88:e0:4d:
d4:e9:3a:39:07:60:c4:8b:e3:12:01:23:ea:f8:ef:19:34:91:
ea:bb:96:7c:21:67:65:9c:1c:ff:33:29:46:31:82:32:5e:d1:
3f:9e:f1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:45:12 2025 by rpki-client