Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a313030303a3a2f33362d3434203d3e20323134323939.roa
File: 326130393a353463373a313030303a3a2f33362d3434203d3e20323134323939.roa (raw, json)
Hash identifier: Cv/eT+bItmTV12zo7hXDlx5P5f7a6l2oTd9rKwdfX3M=
Subject key identifier: 79:6A:0E:B6:E4:EE:9A:CB:1F:DC:6F:28:41:48:3C:2C:F7:CE:8E:78
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 6DA963715D2891228A56A77B82DA58776A632E52
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a313030303a3a2f33362d3434203d3e20323134323939.roa
Signing time: Mon 26 May 2025 17:36:42 +0000
ROA not before: Mon 26 May 2025 17:31:42 +0000
ROA not after: Mon 25 May 2026 17:36:42 +0000
asID: 214299
IP address blocks: 2a09:54c7:1000::/36 maxlen: 44
Validation: Failed, certificate revoked on Mon 26 May 2025 19:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:a9:63:71:5d:28:91:22:8a:56:a7:7b:82:da:58:77:6a:63:2e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: May 26 17:31:42 2025 GMT
Not After : May 25 17:36:42 2026 GMT
Subject: CN=796A0EB6E4EE9ACB1FDC6F2841483C2CF7CE8E78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:02:b7:30:2d:c2:1b:b2:34:9f:6d:9d:90:f5:
c2:44:3b:f6:52:dd:8a:38:ee:03:11:7b:84:e8:ea:
be:26:54:09:c3:be:00:13:76:4a:7c:74:71:fc:ca:
a6:e4:b7:b6:a2:60:0c:15:2b:bf:74:3d:94:ac:c6:
3d:d0:27:a0:b0:12:60:c4:77:2e:cf:12:a6:22:d1:
27:ca:f0:52:de:75:a0:f6:0f:a8:75:bd:f9:a2:52:
30:af:f5:b2:7d:0d:95:19:12:71:d3:22:f6:33:6b:
15:46:8c:e2:96:52:b9:04:86:a3:61:a3:24:62:00:
31:09:98:a6:4d:30:dc:b6:b4:6c:43:74:c5:00:6b:
a9:a8:e4:dc:f0:93:77:c3:9a:0b:c8:8e:fc:49:be:
46:8d:94:f7:0d:1b:45:79:da:53:bd:0d:f3:67:20:
aa:d3:d6:be:1a:4e:1c:76:e1:6f:ea:c3:54:5f:d1:
08:a8:8e:4c:44:1f:89:90:a5:96:e9:0a:ba:1b:6f:
2d:b6:d0:3b:65:a0:b0:ec:ed:c0:d7:e6:73:a2:56:
76:39:fd:6a:5d:01:4b:6f:91:bd:85:ec:4e:75:15:
26:24:fa:ed:5e:85:9a:8a:58:28:1c:0f:24:7e:1d:
ce:36:56:7f:54:d9:aa:09:23:9e:3c:e1:51:e2:65:
de:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6A:0E:B6:E4:EE:9A:CB:1F:DC:6F:28:41:48:3C:2C:F7:CE:8E:78
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a313030303a3a2f33362d3434203d3e20323134323939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c7:1000::/36
Signature Algorithm: sha256WithRSAEncryption
9b:85:4a:97:33:f2:9d:2b:7f:68:13:90:56:22:67:ae:49:56:
98:e2:80:30:fb:e2:f5:47:7f:04:59:fe:64:ea:88:79:7c:ac:
d7:2d:ab:ca:b5:17:06:3d:5f:d9:9b:3d:74:15:4f:9e:9a:ef:
66:56:ab:75:69:44:68:01:5f:cc:99:cf:34:61:6f:11:72:2e:
f1:37:f4:9a:aa:4e:d6:b2:25:78:6b:91:c7:bf:1f:d3:8d:ee:
2c:9e:e5:2a:74:c2:e6:15:c2:d8:47:48:3d:3d:ed:9b:f2:05:
a1:7d:3f:a0:de:c7:b3:10:26:95:f6:50:0d:4a:fd:24:1d:20:
49:2a:55:7f:90:37:d2:31:b7:81:18:81:98:0d:36:69:26:7b:
23:d7:36:01:9b:bc:30:cc:b3:47:7e:1c:d2:d6:51:12:86:cb:
2d:a4:63:f5:24:d3:1d:a7:4f:30:8f:ec:63:cf:f9:00:da:30:
d3:56:d8:2e:83:5b:22:68:99:51:03:78:f7:0a:e4:ac:5a:11:
8a:c6:f9:d0:75:42:e7:39:8b:36:38:13:5a:c4:6d:b3:83:00:
7b:5a:d0:4a:5d:6b:77:47:1a:52:89:c4:24:cd:5b:45:62:15:
58:71:e1:7f:ef:43:49:9d:83:1f:9f:f9:04:6c:a4:46:42:48:
cf:e9:f0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 05:20:18 2025 by rpki-client