Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a323830303a3a2f34322d313238203d3e20323134343232.roa
File: 326130393a353463373a323830303a3a2f34322d313238203d3e20323134343232.roa (raw, json)
Hash identifier: xZtRpwnTJGbuOvALKsNDqIQwzBX6mCFl/mF3a3ZvpOY=
Subject key identifier: AE:76:FF:AA:4A:E5:EC:65:50:E1:8E:2D:E6:C2:98:E7:AF:18:C0:3A
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 67A5ED87FA7C9CC8129F3EE99CD34D62D8377087
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a323830303a3a2f34322d313238203d3e20323134343232.roa
Signing time: Sat 31 May 2025 00:13:16 +0000
ROA not before: Sat 31 May 2025 00:08:16 +0000
ROA not after: Sat 30 May 2026 00:13:16 +0000
asID: 214422
IP address blocks: 2a09:54c7:2800::/42 maxlen: 128
Validation: Failed, certificate revoked on Sat 31 May 2025 13:08:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:a5:ed:87:fa:7c:9c:c8:12:9f:3e:e9:9c:d3:4d:62:d8:37:70:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: May 31 00:08:16 2025 GMT
Not After : May 30 00:13:16 2026 GMT
Subject: CN=AE76FFAA4AE5EC6550E18E2DE6C298E7AF18C03A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:50:c4:28:cb:5d:14:84:83:0b:ed:65:a1:
59:3b:05:b4:37:fb:18:10:1d:93:17:02:2f:f5:eb:
22:77:2b:37:19:66:56:fe:85:55:f5:b1:8d:04:32:
2c:d5:0b:72:c3:61:17:2e:6c:94:6a:38:4e:9d:75:
a1:d3:c4:7f:23:1e:07:11:ff:eb:20:22:47:ed:d6:
49:c0:ef:20:04:76:7b:42:95:00:50:ef:d6:b0:e2:
21:4a:14:ec:2a:b0:e2:dd:06:7b:cd:dd:2d:9f:37:
d9:4c:48:91:4e:e6:7e:9d:81:10:46:05:1c:8f:20:
24:72:3e:5c:e6:c6:e1:3a:71:19:cd:ff:21:57:6d:
56:c1:ce:8e:bf:90:a1:c4:dc:c5:4a:13:e7:41:bf:
4c:d7:2d:d4:63:d8:6f:f1:d0:de:94:91:25:1c:da:
e4:c9:3a:99:d2:e7:18:98:e9:00:e7:63:35:bb:fe:
ac:f4:89:e2:1e:61:7e:ca:f5:78:7e:82:c4:bc:6f:
b3:c4:1e:c8:e0:1d:40:9c:74:fe:09:25:49:b4:30:
a7:46:cb:a2:bc:a7:40:0d:96:3e:f7:47:c3:e7:f9:
1c:3c:34:c7:a1:1b:cb:b6:cc:ca:46:b5:20:a4:f8:
70:55:8d:8b:ca:c3:f0:41:58:0a:aa:db:e3:2d:e7:
11:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:76:FF:AA:4A:E5:EC:65:50:E1:8E:2D:E6:C2:98:E7:AF:18:C0:3A
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a323830303a3a2f34322d313238203d3e20323134343232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c7:2800::/42
Signature Algorithm: sha256WithRSAEncryption
03:0a:0d:78:ff:38:b3:f2:0c:5e:4c:12:96:3e:61:a6:b2:48:
be:27:74:53:fb:3d:61:63:8b:7c:5c:ca:c6:cc:83:d0:f6:a3:
77:73:a2:d8:6a:dd:a1:cb:eb:f1:8c:11:10:44:07:ba:a6:b7:
7e:ee:ab:c7:a9:3c:92:37:b6:47:46:01:8d:ce:e7:52:bd:ca:
29:2f:ec:10:9e:0a:01:7b:ff:84:cc:06:da:89:9f:aa:c5:80:
18:c4:2d:8d:f7:8b:cd:88:34:0b:60:62:e1:dd:03:0e:8b:f6:
95:35:34:ee:42:13:40:2c:7f:65:d7:88:a8:0d:e8:e2:43:31:
95:ef:78:81:cb:0b:4b:4a:1b:26:cc:53:ca:f1:b8:cf:53:30:
8f:36:ed:69:15:23:01:dd:78:d3:0d:7c:bb:01:e2:94:92:02:
c0:8f:4f:9f:2e:8d:b9:d4:fc:b1:d6:f4:d2:21:7e:39:35:c3:
03:cb:7e:c8:4c:6e:78:86:0a:92:da:ec:cb:da:5d:e9:ec:4d:
5f:21:6c:15:ad:3c:ce:6f:dc:ec:d4:07:e2:77:37:7d:ed:1b:
2d:c8:fe:00:05:63:b8:89:ed:ce:fa:0c:11:45:90:e5:f8:01:
4d:38:e1:d6:6f:3a:19:6c:c9:2b:99:6b:c4:91:b5:9b:0b:c5:
f5:6e:25:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 05:28:11 2025 by rpki-client