Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a323030303a3a2f33362d313238203d3e20323037353637.roa
File: 326130393a353463373a323030303a3a2f33362d313238203d3e20323037353637.roa (raw, json)
Hash identifier: lHRD56U0YcxOlu0FGI0/VyoqiXlyb0JHfXvA1jU/WEg=
Subject key identifier: E9:60:A5:FF:C3:10:AD:C8:E3:4E:DF:2B:6A:4B:EC:A5:4D:AA:1A:22
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 40B13F87EB1DDD4D6E3CAEDAB85F33DC3576B6BA
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a323030303a3a2f33362d313238203d3e20323037353637.roa
Signing time: Wed 04 Jun 2025 00:04:48 +0000
ROA not before: Tue 03 Jun 2025 23:59:48 +0000
ROA not after: Wed 03 Jun 2026 00:04:48 +0000
asID: 207567
IP address blocks: 2a09:54c7:2000::/36 maxlen: 128
Validation: Failed, certificate revoked on Sun 29 Jun 2025 18:25:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:b1:3f:87:eb:1d:dd:4d:6e:3c:ae:da:b8:5f:33:dc:35:76:b6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 3 23:59:48 2025 GMT
Not After : Jun 3 00:04:48 2026 GMT
Subject: CN=E960A5FFC310ADC8E34EDF2B6A4BECA54DAA1A22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:90:ce:2f:80:5b:85:8f:d8:95:b4:3c:89:36:
d3:68:8f:1c:07:cb:c8:76:54:1e:54:6e:ad:58:fc:
1e:be:d9:21:26:b9:fe:95:a4:76:5e:58:b8:4f:99:
ee:4e:c9:f3:67:e7:68:c8:de:a8:af:be:90:a9:6d:
a1:d1:e1:af:5a:0a:6e:02:04:95:fc:bf:59:d9:ff:
9b:92:34:fd:00:cf:83:b5:e7:4a:63:5b:00:59:fd:
7c:be:54:f0:56:27:32:91:b4:9d:1a:f4:ca:b2:84:
39:90:9f:3e:19:58:6e:40:c2:8f:f2:9b:53:bc:7b:
9a:eb:86:36:1c:19:56:56:bf:0e:7c:50:79:a4:4a:
b9:cf:bd:e8:41:d5:e5:c2:79:84:74:2d:b2:df:7d:
d2:b5:5d:4c:d3:8d:6d:23:0e:d7:65:30:ce:7c:ee:
ec:e8:95:a5:82:58:d0:24:e4:00:ec:fd:e7:cd:69:
13:35:b0:3c:c9:b0:7e:38:cc:e4:85:c1:7c:45:e1:
f8:79:b2:8f:63:16:7a:63:e7:33:37:f4:6a:07:bd:
28:e1:76:10:3f:60:bf:d0:78:f7:fc:ae:5b:0c:04:
92:53:7d:d0:da:ff:df:7d:11:a0:9d:27:05:10:16:
de:07:4d:1c:55:29:79:9d:fd:d9:45:18:c4:ff:02:
9e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:60:A5:FF:C3:10:AD:C8:E3:4E:DF:2B:6A:4B:EC:A5:4D:AA:1A:22
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a323030303a3a2f33362d313238203d3e20323037353637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c7:2000::/36
Signature Algorithm: sha256WithRSAEncryption
30:b3:34:78:32:c3:2c:9a:85:52:a6:2e:13:07:ee:e3:b0:89:
7d:25:a9:3b:43:50:e0:28:23:af:2b:8e:53:48:30:f7:c7:aa:
50:3f:cc:3c:46:4e:c6:02:ff:de:9b:e6:df:e2:aa:14:5b:08:
ca:2f:7a:80:8a:83:74:32:ce:e9:2c:ec:20:4b:7b:88:78:43:
b2:fe:53:cb:10:70:8f:88:4c:b3:f5:bf:6d:66:24:0a:f5:d2:
3b:7d:ea:aa:83:e7:df:47:25:f0:ba:60:c1:ee:0d:59:13:e7:
bd:27:44:33:74:01:d8:c9:b2:57:87:46:a4:4a:b5:d5:77:6a:
8e:5c:87:33:6b:b7:86:4c:b7:51:0c:ed:97:f7:3d:04:3a:32:
90:37:04:9c:63:24:af:2e:f6:12:86:19:27:0f:af:fb:e7:b8:
5c:47:40:4a:d3:7b:45:37:c9:76:7c:4d:cf:1e:80:ab:1c:9c:
97:de:8a:03:d8:d2:8f:27:09:d9:0e:cf:cd:6d:9e:b4:a9:35:
38:79:02:12:d9:85:3c:51:c9:89:2a:91:cd:8e:c7:ae:1f:34:
80:eb:24:fd:de:c4:ef:7d:5f:0e:4e:30:f4:e3:39:ea:5c:4d:
cc:59:5d:93:11:c3:14:51:e1:72:bf:09:28:e5:8c:be:3d:a6:
ac:b8:21:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:06:12 2025 by rpki-client