Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a31323a3a2f34382d3438203d3e2039303039.roa
File: 326131333a393530303a31323a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier: gRmI/yuJTHHQ67mww7AyIpSQH7krYoqheCIHkFq8Evc=
Subject key identifier: A5:36:7B:B3:13:32:30:68:8A:64:FD:3E:42:E9:07:2B:29:32:B8:00
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 78A68BE74C6A80F78B74E0B58C93A662546137DC
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a31323a3a2f34382d3438203d3e2039303039.roa
Signing time: Fri 27 Dec 2024 09:28:18 +0000
ROA not before: Fri 27 Dec 2024 09:23:18 +0000
ROA not after: Fri 26 Dec 2025 09:28:18 +0000
asID: 9009
IP address blocks: 2a13:9500:12::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:a6:8b:e7:4c:6a:80:f7:8b:74:e0:b5:8c:93:a6:62:54:61:37:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 27 09:23:18 2024 GMT
Not After : Dec 26 09:28:18 2025 GMT
Subject: CN=A5367BB3133230688A64FD3E42E9072B2932B800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0c:c0:85:1e:80:99:dc:0c:63:bb:2b:e5:06:
03:82:1b:64:84:67:f1:96:3a:1e:29:0c:3a:34:8d:
56:d6:17:53:10:9c:ca:3b:92:e4:a2:19:05:18:e3:
75:61:3e:0f:cb:8f:c0:d1:87:44:3a:b3:f3:8a:e0:
ce:ff:0d:54:46:25:83:60:4f:ac:9f:d2:be:49:2f:
27:b9:aa:81:d5:4a:a5:1d:a3:ef:74:08:31:ab:7f:
5d:8d:43:c5:ac:5b:d3:90:9c:b4:64:a5:37:38:dd:
08:eb:b8:1f:d5:03:25:fe:08:3a:85:6d:b3:1c:b8:
71:c6:51:1e:97:ef:64:f5:44:b1:86:8d:99:fe:9c:
73:3f:d4:6c:c4:8d:93:0f:14:a5:1d:ba:5b:bd:80:
af:b8:7c:47:15:db:f2:82:b9:59:32:fa:e1:7a:2c:
2a:88:d7:1a:8a:e9:51:ea:da:74:7f:df:43:f4:93:
1c:ce:75:15:3f:9d:88:b0:08:0c:f5:b6:d3:42:24:
82:d6:f1:31:d3:28:a4:aa:59:39:e0:e8:01:fc:5f:
40:23:b8:d9:65:6e:35:51:f0:7d:40:08:5b:71:02:
13:51:1e:3c:c9:a1:b7:c1:a2:6e:8c:54:2f:0b:47:
83:e9:07:0e:c1:a4:48:da:c8:37:1b:54:eb:22:ce:
e9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:36:7B:B3:13:32:30:68:8A:64:FD:3E:42:E9:07:2B:29:32:B8:00
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a31323a3a2f34382d3438203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:12::/48
Signature Algorithm: sha256WithRSAEncryption
46:d7:7c:69:a4:d7:1a:20:35:f1:7c:82:79:94:c4:11:fc:f8:
25:af:37:64:a5:84:10:b5:ca:20:6b:3f:5d:64:94:8c:4e:47:
3a:f3:0d:1e:18:b7:79:b2:2c:33:1a:1c:e6:a9:63:cc:06:93:
2a:90:87:00:b0:89:1b:69:8a:bb:7f:14:c9:1f:5a:61:f0:24:
f0:be:40:be:c2:80:05:67:fb:d7:28:87:3a:fd:c4:78:85:f7:
1e:11:23:c0:6b:b0:85:4f:fb:17:c8:2d:fd:25:a5:43:75:84:
7e:3a:c4:f7:a4:52:33:8e:9e:f5:47:17:48:6b:cc:2a:f4:83:
8a:5f:18:6d:83:1b:aa:89:b3:c4:c7:a1:b3:24:63:9d:00:c2:
ea:b4:27:cd:28:8e:18:cf:80:ab:6c:6b:17:1d:28:61:1e:cd:
14:ef:b7:ad:2c:27:6f:53:b1:98:54:9d:5f:b0:39:53:60:7b:
31:95:d7:e5:0f:96:06:ac:09:03:79:fb:7e:72:6a:be:42:56:
55:6b:fc:8a:86:06:6d:74:16:d0:7a:86:65:7d:f6:55:47:ed:
ad:30:0a:8d:ea:06:97:1a:39:e5:59:aa:22:5c:df:e6:c9:19:
f9:ff:ea:07:ca:07:3f:96:9d:29:ad:80:75:0f:53:a4:5d:c6:
e8:2f:e8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:55:18 2025 by rpki-client