Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a353030303a3a2f33362d3434203d3e20323133383634.roa
File: 326130393a353463373a353030303a3a2f33362d3434203d3e20323133383634.roa (raw, json)
Hash identifier: bafCoijyAdNVVJ3dgS7TeEaAQ5ye6yeZvLW7j6WhT1Q=
Subject key identifier: 3E:09:51:6B:35:79:49:06:40:06:36:3C:7B:BF:19:65:B5:64:DB:79
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 67987973749B98F00D2A09F8D49F70BB399EE1C3
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a353030303a3a2f33362d3434203d3e20323133383634.roa
Signing time: Mon 30 Jun 2025 12:10:51 +0000
ROA not before: Mon 30 Jun 2025 12:05:51 +0000
ROA not after: Mon 29 Jun 2026 12:10:51 +0000
asID: 213864
IP address blocks: 2a09:54c7:5000::/36 maxlen: 44
Validation: Failed, certificate revoked on Mon 30 Jun 2025 14:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:98:79:73:74:9b:98:f0:0d:2a:09:f8:d4:9f:70:bb:39:9e:e1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 12:05:51 2025 GMT
Not After : Jun 29 12:10:51 2026 GMT
Subject: CN=3E09516B357949064006363C7BBF1965B564DB79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:48:b7:fa:b4:14:36:a3:5e:c2:e7:9b:a3:
aa:36:aa:8d:67:b9:6f:94:1e:22:44:14:a1:d2:0d:
3c:c8:70:e8:13:cd:d4:ef:82:4c:da:ba:5c:2d:cd:
f7:aa:7a:e8:99:02:ec:a2:e9:d4:1d:3e:f3:a8:c0:
67:9b:1f:8e:68:78:b5:bf:8b:84:d3:02:1b:a4:e7:
76:f6:dd:49:d4:96:e7:7c:96:36:de:93:85:bb:65:
89:ea:b7:31:b7:ff:36:65:33:05:bd:27:33:78:1d:
c2:58:8b:81:8b:50:3f:c2:4b:7b:bc:22:48:6c:60:
a3:29:42:3d:e6:e4:61:48:da:0a:18:09:9d:87:15:
69:5b:54:b6:29:70:48:ad:77:01:22:a7:9d:7a:b7:
19:cf:f2:89:c3:a1:05:97:37:44:35:ea:21:05:28:
a4:5b:e7:01:98:42:70:cd:b2:10:9c:f1:a7:a4:55:
b5:8b:10:7d:ee:7b:f3:cd:5c:c9:db:90:3b:3f:b7:
93:fc:9f:b6:6e:7d:c2:bc:4e:74:97:c4:a2:bc:2a:
58:6c:c1:1e:02:fa:2a:3a:15:e7:34:55:da:70:65:
bf:cd:b0:fc:87:44:fb:2f:e9:24:61:26:ca:7c:79:
4b:39:f6:5c:4a:92:67:98:10:a3:c7:d7:3d:ce:41:
2a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:09:51:6B:35:79:49:06:40:06:36:3C:7B:BF:19:65:B5:64:DB:79
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a353030303a3a2f33362d3434203d3e20323133383634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c7:5000::/36
Signature Algorithm: sha256WithRSAEncryption
85:f5:2f:ff:8a:85:7e:92:55:a7:aa:61:9a:ff:0c:b6:ae:f9:
84:28:16:e9:43:b1:61:e3:fd:7e:7e:d4:17:77:70:23:35:64:
e0:27:01:87:8c:b3:9d:de:d2:e3:3a:be:6a:06:61:8a:8d:48:
04:cf:01:c2:9e:7b:6b:72:44:47:6b:a7:05:38:57:2c:5f:df:
ca:1b:74:3a:7c:18:0a:b8:46:28:80:bb:0a:0f:74:51:8a:7c:
3d:a1:38:dc:fd:40:4a:fe:2c:96:a0:22:5e:61:be:d8:78:a9:
d7:22:40:25:48:d8:c1:14:e1:88:ba:8a:01:3f:7c:ab:a4:da:
42:6f:48:f7:bc:f9:cd:88:9c:59:0e:54:08:b1:80:84:d6:bd:
a8:a1:0b:08:71:4f:2a:69:9a:11:de:7b:5c:d2:f0:66:79:79:
97:2a:c2:81:84:ef:d7:70:08:61:fa:e9:95:00:cb:6b:68:6b:
c1:dc:50:04:aa:ec:e0:35:c6:81:4c:32:4a:f8:64:1f:70:59:
84:82:ac:8e:ff:9e:b8:dd:c8:de:37:4e:98:7d:75:c2:ec:05:
d8:a7:ab:67:ba:4c:df:27:16:d8:6f:7a:3a:99:07:97:40:19:
f3:9f:b4:30:6a:1a:68:ca:b1:b3:62:35:14:6d:14:46:b6:0b:
4a:64:28:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:12:42 2025 by rpki-client