Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a3a2f33322d3332203d3e2030.roa
File: 326130393a353463373a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier: IMO+SXaG9uf0EquuyDOHayndAKuoIVjOZECwMNEmt88=
Subject key identifier: 4E:81:B1:70:A6:C9:F4:8B:76:59:84:FE:53:6C:42:D7:0A:75:4A:3A
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 47042695B9673F8EEE42A5C2A987C5663A00A2D8
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a3a2f33322d3332203d3e2030.roa
Signing time: Thu 10 Apr 2025 17:59:46 +0000
ROA not before: Thu 10 Apr 2025 17:54:46 +0000
ROA not after: Thu 09 Apr 2026 17:59:46 +0000
asID: 0
IP address blocks: 2a09:54c7::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 27 May 2025 20:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:04:26:95:b9:67:3f:8e:ee:42:a5:c2:a9:87:c5:66:3a:00:a2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Apr 10 17:54:46 2025 GMT
Not After : Apr 9 17:59:46 2026 GMT
Subject: CN=4E81B170A6C9F48B765984FE536C42D70A754A3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:3d:af:fd:3f:91:a8:e4:27:77:d9:75:64:
25:2a:9a:5b:12:90:b7:ec:ef:37:0c:ad:c1:2c:ef:
ba:2f:59:57:6c:9d:da:f8:56:aa:00:f3:4e:5d:3f:
40:4a:78:6a:aa:71:0e:99:e3:48:93:f7:1a:fe:5c:
0c:9c:dd:f0:8b:8f:71:cb:20:d1:90:fa:89:bc:17:
c6:29:95:3e:a7:a1:11:db:25:0d:9f:b1:f2:38:04:
50:69:88:13:55:57:ef:1a:dd:91:2f:be:97:b2:83:
8b:9a:c7:b0:d8:18:6b:30:63:26:bd:05:57:39:36:
9c:c8:61:13:68:d1:4c:3c:69:7d:0e:8d:25:59:3a:
37:45:e9:ae:52:ee:4f:4f:5c:1b:e2:e7:e1:7a:5e:
25:71:94:42:bd:50:a7:d8:02:2e:91:7a:be:e1:49:
d2:bc:ed:d3:55:51:a6:ef:5f:92:f9:51:8c:f9:d0:
91:73:f2:84:d2:21:75:cb:d5:e7:b9:7c:6c:a3:ef:
cd:7d:64:6a:79:77:bd:49:c0:d4:39:e6:b9:aa:9c:
70:f7:be:ae:43:3e:49:8e:c7:e4:28:e7:ee:49:1d:
9f:20:1b:4d:6f:25:64:9c:d3:33:dd:91:51:75:e7:
53:b3:f9:81:e6:91:11:8f:52:70:a4:97:0b:92:bf:
43:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:81:B1:70:A6:C9:F4:8B:76:59:84:FE:53:6C:42:D7:0A:75:4A:3A
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a3a2f33322d3332203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c7::/32
Signature Algorithm: sha256WithRSAEncryption
24:74:51:16:b2:30:a4:59:9a:e1:79:c7:4f:eb:04:a4:e1:5d:
33:70:dc:81:27:b0:2a:1a:62:a0:a4:a1:c1:cc:4e:74:74:2c:
1f:13:5f:da:29:11:29:a6:77:57:2d:ff:eb:7d:c2:78:87:bc:
d6:3e:7d:49:41:a9:db:9f:e5:f4:89:99:a6:03:d9:49:47:1b:
a5:43:17:cc:79:a1:e4:08:b5:97:e3:8b:b0:5e:62:d2:58:a5:
67:81:93:f4:02:94:06:63:27:e0:de:6d:c4:c5:2f:dc:8b:23:
66:bf:4d:9f:b9:db:18:df:fa:9d:11:d1:a1:a8:ab:1b:21:5d:
77:1b:e2:36:8d:36:83:82:ad:c8:10:af:a2:d7:9c:07:e2:7e:
c6:ad:c4:9a:20:93:dc:81:4d:cb:3c:05:7b:0e:e9:6d:1e:3f:
f6:f5:bb:68:c6:bc:89:9a:5a:5f:fa:cf:0d:4a:bd:4c:a5:25:
4c:5c:6d:bf:64:04:c4:df:0f:8f:74:a8:0b:df:69:92:da:25:
c7:97:06:13:39:5a:fd:40:6a:ef:71:93:e9:e6:51:93:94:d2:
e0:97:8b:12:2f:c5:27:b2:1d:77:be:ab:99:6d:97:45:39:7e:
3a:d5:d4:3e:0d:c0:b9:e4:c5:6b:85:eb:5b:50:96:32:47:e0:
15:57:30:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 03:14:37 2025 by rpki-client