Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130663a363238303a313030303a3a2f34302d3438203d3e20323131373830.roa
File: 326130663a363238303a313030303a3a2f34302d3438203d3e20323131373830.roa (raw, json)
Hash identifier: 336Pm1F9ih4RU5NENDs5Af9+eHW1YTFNToa+e0cxYLs=
Subject key identifier: 30:31:C7:EE:52:2C:43:DC:27:41:F5:9B:C9:6F:DB:BB:1F:A9:84:C2
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 5DADE59F17D484193B0C7B4209D2396BE3BCF0F9
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130663a363238303a313030303a3a2f34302d3438203d3e20323131373830.roa
Signing time: Sat 28 Jun 2025 08:41:12 +0000
ROA not before: Sat 28 Jun 2025 08:36:12 +0000
ROA not after: Sat 27 Jun 2026 08:41:12 +0000
asID: 211780
IP address blocks: 2a0f:6280:1000::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 30 Jun 2025 14:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ad:e5:9f:17:d4:84:19:3b:0c:7b:42:09:d2:39:6b:e3:bc:f0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 28 08:36:12 2025 GMT
Not After : Jun 27 08:41:12 2026 GMT
Subject: CN=3031C7EE522C43DC2741F59BC96FDBBB1FA984C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a0:30:c3:7d:2b:6b:ed:25:e3:32:6e:ce:0c:
57:cf:74:9d:f3:59:99:3f:b3:4c:20:a3:98:e7:b8:
54:4e:a9:15:62:38:62:56:97:75:cc:b6:40:4d:f3:
06:b9:8f:38:8f:25:58:26:31:fb:ed:e6:d1:f6:78:
4d:40:21:af:40:5a:9e:7e:50:d1:cc:6e:bf:32:cd:
f0:cf:96:d1:54:5d:8a:1b:9e:0f:9a:e5:af:07:fc:
09:0a:ca:4c:48:df:2f:6e:88:de:5b:be:84:15:41:
e7:8e:4f:de:57:7c:d7:93:df:34:e9:00:6c:8f:a7:
e2:1b:ad:29:6e:8c:e0:76:c1:bb:a3:9c:b6:7b:ad:
c4:de:fc:f6:5d:9a:9b:1d:55:09:31:37:14:35:e2:
bf:d3:51:82:f5:c0:ee:2f:12:97:dc:d0:3f:b0:e0:
40:15:d3:e7:e1:b4:ee:0e:7b:76:b0:13:b1:f7:c3:
28:f3:35:fa:f1:d6:df:d3:bf:63:a3:71:30:02:4b:
d9:38:f1:58:3f:ff:99:1b:3d:79:ab:2f:7d:ed:27:
7e:4b:79:61:22:ce:64:eb:60:0a:1f:29:ca:52:a4:
7b:6c:92:d9:19:be:00:d6:0b:72:37:b9:1d:80:7f:
9f:55:d6:a7:7b:88:c9:f4:37:f0:9b:cb:3a:2a:75:
82:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:31:C7:EE:52:2C:43:DC:27:41:F5:9B:C9:6F:DB:BB:1F:A9:84:C2
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130663a363238303a313030303a3a2f34302d3438203d3e20323131373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6280:1000::/40
Signature Algorithm: sha256WithRSAEncryption
48:6c:46:e1:2f:ed:42:ad:5e:72:d6:21:53:60:5a:88:f7:24:
14:04:a5:00:2d:cb:0c:db:b6:f9:84:14:b1:08:04:a2:07:84:
99:38:d8:95:a4:24:80:ab:23:1d:95:b9:04:de:b3:e5:f5:7a:
95:89:21:28:41:13:e9:fd:66:d4:8d:bf:65:7f:65:04:8d:50:
fa:47:eb:e1:6c:fd:0b:88:0c:31:24:b8:a0:50:7e:e9:01:07:
90:ab:a7:88:e1:42:8f:41:95:e4:a7:8b:c3:bd:76:e0:7d:d5:
0f:d6:f1:40:32:22:02:1c:78:c7:94:61:1f:cb:6a:5f:d6:3b:
92:7c:b0:0d:e1:db:5b:f7:1d:8b:32:5e:7f:bf:6e:3e:51:ba:
40:fe:71:19:17:5f:6e:dc:ea:18:ff:fd:48:7c:9c:da:03:62:
c3:c6:54:6d:24:c0:19:96:db:f5:7a:0d:64:c1:f0:65:7b:e6:
7a:17:ca:f3:ce:d7:88:1f:dc:c9:e4:11:5b:e6:75:85:05:f1:
e0:60:db:08:39:32:05:28:38:d5:e7:0f:77:3d:5a:b7:86:8f:
e4:2a:f1:00:11:01:7f:ad:49:18:1c:fd:90:fa:18:35:14:01:
a9:ab:d6:a0:20:bd:2a:77:f4:6d:0e:fc:d2:33:93:a6:4b:4d:
f7:8b:2e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:36:09 2025 by rpki-client