Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616130363a3a2f34382d3438203d3e2030.roa
File:                     326130613a363034343a616130363a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          KcpnfZAObHHjqu6u5S1amnoO2s8fzON9T7jExAQI7GE=
Subject key identifier:   38:2C:06:77:4F:A8:73:0D:91:A3:F1:7E:6B:8D:82:55:10:91:7D:F1
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       73D9576AA0774D44C16ABD665D48C38BEA119ECE
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616130363a3a2f34382d3438203d3e2030.roa
Signing time:             Sun 01 Jun 2025 17:39:24 +0000
ROA not before:           Sun 01 Jun 2025 17:34:24 +0000
ROA not after:            Sun 31 May 2026 17:39:24 +0000
asID:                     0
IP address blocks:        2a0a:6044:aa06::/48 maxlen: 48
Validation:               Failed, certificate revoked on Mon 02 Jun 2025 06:44:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d9:57:6a:a0:77:4d:44:c1:6a:bd:66:5d:48:c3:8b:ea:11:9e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Jun  1 17:34:24 2025 GMT
            Not After : May 31 17:39:24 2026 GMT
        Subject: CN=382C06774FA8730D91A3F17E6B8D825510917DF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2b:4c:17:34:75:8b:6e:8d:83:ee:59:dc:2a:
                    24:d7:8c:cd:ba:e5:b1:d4:f5:13:de:98:ac:2e:9e:
                    1e:f2:aa:42:18:71:e1:b0:8d:33:bd:40:56:7a:3e:
                    e6:ab:3f:98:14:5f:da:cf:99:51:93:a5:7c:03:b0:
                    ac:55:fe:e7:9c:4f:81:de:30:a2:cf:13:e0:f9:a4:
                    9a:ee:8a:e6:89:bc:f0:ad:de:0f:15:a0:d1:79:ec:
                    d3:ec:bc:f7:0b:47:47:b8:fd:ac:90:30:ed:91:fa:
                    41:8b:fb:01:a3:01:f3:24:75:00:19:4e:dd:a3:57:
                    86:bd:26:0f:a5:3f:2a:02:41:a1:08:f1:37:8c:70:
                    e6:ef:ad:a9:a3:2a:47:35:a4:22:48:08:20:9a:23:
                    91:b5:60:72:55:f1:83:fd:e0:ee:0a:56:c2:29:05:
                    ed:3d:45:87:ac:34:62:49:c5:1a:2d:82:95:e9:9d:
                    db:0b:b6:12:36:76:7f:71:ef:f4:37:f3:5f:e1:23:
                    34:3e:c4:8e:37:ce:d9:85:87:3c:f3:59:3a:f0:2e:
                    45:93:90:b2:61:5c:fb:fb:58:a7:38:11:27:4b:44:
                    47:d9:f3:49:64:95:30:bb:00:9b:c8:38:b3:1c:ed:
                    d6:21:12:71:b3:76:51:a1:26:1f:07:c3:77:11:da:
                    7c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2C:06:77:4F:A8:73:0D:91:A3:F1:7E:6B:8D:82:55:10:91:7D:F1
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616130363a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:aa06::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:8b:89:3a:be:be:5a:01:8c:75:8d:73:49:15:38:8d:6c:20:
         37:ad:39:a0:be:0f:a4:96:78:a8:51:e7:49:7a:df:48:22:08:
         02:96:49:50:bb:a2:bc:73:90:8d:b2:e1:15:66:f6:6f:1f:b3:
         81:dc:94:50:18:50:8e:83:e6:d9:68:2d:bb:21:af:c9:8f:76:
         1f:0d:f7:16:a3:ad:57:85:3a:71:ec:c4:17:58:61:6b:52:24:
         38:a9:97:9f:46:85:67:37:76:06:0b:7a:0a:d5:fc:ab:c2:48:
         8b:e7:a0:ea:a0:c1:92:57:77:52:12:b2:a5:48:c9:e6:e6:f1:
         4d:01:f7:87:b2:ca:00:88:b4:cc:6d:b1:de:a1:1f:92:84:f7:
         12:30:06:f7:d9:10:bc:e8:7b:77:98:28:c1:46:52:f1:09:89:
         2a:31:6b:ef:5a:36:99:e0:8a:4a:2d:46:1b:95:4a:74:b1:cf:
         3f:24:3d:e2:c5:04:9c:8e:1c:b2:e2:53:35:fc:b1:32:63:0e:
         5b:cf:fd:bc:d8:0a:6e:0c:6b:5b:fe:bb:c9:75:3a:d3:58:c1:
         cb:99:04:78:27:69:3e:0d:2b:6a:64:6f:3f:9b:da:de:d4:e1:
         4b:86:4f:6c:96:6d:1f:9b:f8:22:2a:5e:85:dd:6c:50:c9:ca:
         70:b3:0b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 10:13:09 2025 by rpki-client