Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a663030303a3a2f33362d3438203d3e20323135323134.roa
File: 326130393a353463363a663030303a3a2f33362d3438203d3e20323135323134.roa (raw, json)
Hash identifier: Fc4rpaf7EVEPngxw7Vx8jl4nPRU/AfFfr+WvjjEditY=
Subject key identifier: 46:63:5E:48:2E:26:2F:A1:9C:DA:DD:95:D5:08:22:E3:83:62:29:23
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 74CE163E7878495F12EE5DEEB494B6BFDD6FDD3B
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a663030303a3a2f33362d3438203d3e20323135323134.roa
Signing time: Sat 14 Jun 2025 12:06:09 +0000
ROA not before: Sat 14 Jun 2025 12:01:09 +0000
ROA not after: Sat 13 Jun 2026 12:06:09 +0000
asID: 215214
IP address blocks: 2a09:54c6:f000::/36 maxlen: 48
Validation: Failed, certificate revoked on Mon 30 Jun 2025 14:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ce:16:3e:78:78:49:5f:12:ee:5d:ee:b4:94:b6:bf:dd:6f:dd:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 14 12:01:09 2025 GMT
Not After : Jun 13 12:06:09 2026 GMT
Subject: CN=46635E482E262FA19CDADD95D50822E383622923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:01:d3:3b:fc:a9:bd:86:b9:b9:0b:4a:9a:
6c:2a:d1:e3:7e:5e:f3:80:d0:b6:1d:94:9e:5d:f5:
37:27:0f:3a:4d:19:31:21:45:9a:87:9d:59:ba:8e:
3c:5b:f3:f1:29:c3:6f:d4:79:02:6a:2a:fa:ee:11:
53:2b:43:3c:53:0b:5a:3c:6d:e4:69:e1:3c:6b:75:
f5:6a:f2:97:f2:54:e1:1e:c9:33:ae:38:1f:64:6d:
1e:20:d0:47:f2:1e:23:88:42:d1:16:d8:e9:0b:d4:
a4:b3:26:ee:4e:bb:2f:0c:15:1f:4c:7d:c6:bd:5f:
dc:5c:c0:d9:dc:43:f2:94:a2:f7:55:86:c1:e4:46:
36:d4:d6:48:e8:87:60:06:4d:6f:52:08:ba:f4:98:
f3:0f:bb:18:7f:b8:29:e2:3b:f7:bd:5d:51:aa:ff:
ac:ee:31:ac:69:91:ec:e4:6c:f6:b1:38:23:70:99:
ba:8b:44:5b:fb:f6:90:40:81:60:a9:77:1f:9b:70:
07:9c:c6:1f:d4:7f:b2:d1:99:8f:70:c7:a1:40:95:
66:86:d9:20:b6:21:bb:fb:26:8d:1d:c8:54:77:2c:
46:72:59:25:f1:a6:80:55:a5:91:c3:6a:59:0d:9f:
b8:fd:ef:40:58:37:30:09:4d:f7:cf:f5:63:03:42:
27:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:63:5E:48:2E:26:2F:A1:9C:DA:DD:95:D5:08:22:E3:83:62:29:23
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a663030303a3a2f33362d3438203d3e20323135323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:f000::/36
Signature Algorithm: sha256WithRSAEncryption
6e:03:fb:9e:87:da:c1:5c:94:85:4b:62:c4:6e:d8:c3:0e:c1:
59:5a:82:7d:89:4f:d0:3c:fd:9c:d3:b1:dc:4a:c5:75:75:0c:
78:08:da:24:7b:db:ba:54:e0:14:03:2f:6c:48:73:14:9b:1c:
b6:a1:26:53:05:56:1a:8b:2f:b4:9e:6b:cb:ba:e0:9f:a5:67:
7c:aa:37:cc:8e:8c:e2:d2:21:66:99:fe:1d:65:7b:eb:f4:37:
4a:f1:3f:1b:80:21:be:1f:34:00:18:04:b4:5b:4a:29:03:77:
bd:09:c6:b0:c2:6c:bc:7d:87:a7:cc:5a:71:a7:54:9e:ca:e7:
94:ab:9f:23:47:ac:9c:7f:6e:b9:a1:5d:af:3e:24:a0:d5:79:
83:64:60:a1:a7:5d:4a:18:6c:11:ca:f4:2a:b2:a0:1d:4e:10:
4e:f1:1b:bd:ed:56:87:3f:fd:2b:6e:f0:40:c6:75:56:40:e5:
1d:ed:ae:2e:e8:95:02:90:ce:fa:30:1c:f7:23:82:b0:8e:3b:
fb:46:60:5a:ea:1e:d3:c6:1e:99:f0:60:0b:ea:95:cd:27:9f:
1c:4a:39:80:20:d4:6d:6b:67:14:dd:00:37:57:d9:1f:20:27:
06:a3:ff:3a:00:b8:e5:16:4e:30:a3:30:0a:d2:c6:83:ad:3b:
06:5a:69:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:36:58 2025 by rpki-client