Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663735303a3a2f34342d3438203d3e20313333353034.roa
File: 326130353a646663333a663735303a3a2f34342d3438203d3e20313333353034.roa (raw, json)
Hash identifier: 2+cOJzXzqFwtQgh18O35z/fiD6rpQpwqtP/KCzdc6go=
Subject key identifier: B0:49:0E:97:58:95:41:06:15:3A:EF:C4:4B:26:9A:2F:BC:8B:5D:49
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 3EC49175C84A25995816E45B02DE910114D822D8
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663735303a3a2f34342d3438203d3e20313333353034.roa
Signing time: Tue 24 Jun 2025 07:19:57 +0000
ROA not before: Tue 24 Jun 2025 07:14:57 +0000
ROA not after: Tue 23 Jun 2026 07:19:57 +0000
asID: 133504
IP address blocks: 2a05:dfc3:f750::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 30 Jun 2025 14:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:c4:91:75:c8:4a:25:99:58:16:e4:5b:02:de:91:01:14:d8:22:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 24 07:14:57 2025 GMT
Not After : Jun 23 07:19:57 2026 GMT
Subject: CN=B0490E9758954106153AEFC44B269A2FBC8B5D49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7a:90:db:50:61:86:9c:c0:52:c4:97:2c:d0:
d0:a5:c7:db:90:9d:b3:99:a3:c8:81:bd:b8:79:d9:
71:46:09:05:5a:69:56:7d:80:5c:b2:b3:af:ce:8e:
82:46:a4:97:b8:7f:fc:4d:59:60:01:98:1b:af:52:
4c:c1:71:7b:ed:2f:6f:b1:3d:c4:4c:fe:56:7f:72:
0c:0f:ae:33:9d:e0:eb:de:3b:a6:7f:07:ed:45:a4:
13:04:2a:e3:b2:98:14:ce:c4:cd:77:1b:6e:dd:b8:
14:c5:2a:3f:e7:9f:6f:09:ca:70:c0:cd:20:14:78:
ab:6f:b5:7a:88:8d:48:93:8e:ce:ac:3c:0f:be:43:
bc:05:7e:f5:27:e3:1a:ad:53:42:57:8b:c6:3e:1d:
dd:d8:2f:8e:00:bf:51:ea:0e:2d:4e:57:79:4b:90:
9c:aa:86:04:92:29:4d:d1:dc:73:bc:a1:e1:cc:06:
9a:9b:cf:7a:65:27:4a:d8:f0:05:af:26:af:f5:ef:
87:c6:e3:0d:d1:a7:74:ce:2b:41:3a:ae:2c:5c:5f:
60:dd:15:e1:98:c5:dd:1a:72:fa:7c:9e:8e:05:eb:
77:3b:40:2b:db:b7:b0:b0:35:f3:1e:7e:28:3b:c3:
49:78:2c:a5:94:bd:01:84:b2:8c:1a:77:6f:70:9d:
03:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:49:0E:97:58:95:41:06:15:3A:EF:C4:4B:26:9A:2F:BC:8B:5D:49
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663735303a3a2f34342d3438203d3e20313333353034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:f750::/44
Signature Algorithm: sha256WithRSAEncryption
64:cb:67:9f:d9:0e:4e:1c:66:ef:05:f9:5f:74:70:b2:a3:9d:
f1:06:78:19:d8:e7:c2:69:e6:5e:6f:d3:2d:38:1b:a6:10:97:
9a:81:d9:0f:50:4f:33:f1:0f:86:1e:83:a8:e2:c7:f4:75:e1:
0c:df:ac:c6:99:3a:88:07:c2:46:d5:d2:9a:a7:8e:d1:46:e4:
65:dc:f1:6a:89:0d:56:4e:1f:8a:8e:2e:7b:ce:05:04:fa:67:
cd:c0:d6:43:41:94:a6:de:32:2f:8b:64:cc:d7:4b:6e:8f:21:
ed:15:02:9f:fa:db:ba:6a:23:0f:26:92:45:3f:2e:bf:9a:58:
43:ed:22:8d:e9:82:f0:c5:f4:48:3f:9f:0a:1e:98:f5:53:6a:
cd:5d:62:35:69:61:b7:e2:79:d1:70:38:03:b1:d5:3a:23:2c:
8a:e7:f0:81:61:c8:72:de:53:4c:9a:db:b4:c1:d9:81:a6:a2:
ae:79:1f:82:e9:b4:cd:62:30:da:59:14:9f:8f:37:4a:60:06:
47:a0:0e:c7:98:49:6f:d3:82:4a:8f:67:e6:16:c9:4f:fb:c8:
cf:27:c0:57:79:37:ce:c8:d4:81:22:54:3e:e7:4b:01:44:4b:
d0:e9:df:51:a7:c1:96:9e:00:79:3e:73:ef:85:8f:44:a8:4b:
a9:48:7e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:30:17 2025 by rpki-client