Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a31383a3a2f34382d3438203d3e2039303039.roa
File: 326131333a393530303a31383a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier: O0GcXmStJLWV3H8zGv9K5lJOO3c5jKn1hfZw0GN6ZhQ=
Subject key identifier: 6D:E0:F6:20:43:91:BB:AD:AF:44:31:33:62:DA:EB:18:D0:70:71:42
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 561CBD895DC871103D898A78804592290E95888A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a31383a3a2f34382d3438203d3e2039303039.roa
Signing time: Fri 27 Dec 2024 09:28:14 +0000
ROA not before: Fri 27 Dec 2024 09:23:14 +0000
ROA not after: Fri 26 Dec 2025 09:28:14 +0000
asID: 9009
IP address blocks: 2a13:9500:18::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:1c:bd:89:5d:c8:71:10:3d:89:8a:78:80:45:92:29:0e:95:88:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 27 09:23:14 2024 GMT
Not After : Dec 26 09:28:14 2025 GMT
Subject: CN=6DE0F6204391BBADAF44313362DAEB18D0707142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:84:e8:ae:b4:de:2b:91:8f:a8:51:6e:af:
37:31:81:d2:15:53:13:15:19:48:e6:37:9d:d6:f3:
37:1d:7f:a4:7e:5c:c6:6c:95:62:8b:73:39:b1:3f:
a2:ae:24:42:3b:ab:0b:da:79:dc:bc:e6:7d:60:12:
02:66:22:09:3a:07:34:87:3d:66:1b:22:5c:07:fc:
23:ba:e4:98:4a:a4:41:a9:0e:a8:4c:15:cf:9d:19:
28:08:40:67:0d:85:d5:cb:c6:4d:31:1e:23:74:ef:
c0:af:14:ef:d3:ff:dc:7a:b5:29:42:49:cb:58:67:
1f:77:28:34:3d:f6:76:58:bf:d1:82:6c:dc:3f:2f:
7b:3a:e6:58:52:1c:43:80:38:77:7b:b9:2d:03:b8:
99:b6:68:54:72:ac:ba:ee:09:bc:ef:41:dc:5a:8e:
8f:2b:d4:72:d5:13:ab:2f:15:02:ad:6f:1b:21:2e:
95:c4:84:16:65:17:2e:4d:6d:7f:5f:4d:e6:cd:e7:
0d:fd:98:09:09:c3:f7:dd:d6:5d:ca:a9:f9:82:c3:
7b:6d:89:fe:c2:fc:28:98:b0:08:bb:a4:19:79:25:
c3:46:16:37:b4:ec:c4:7c:fb:06:c7:21:39:96:62:
67:bf:15:16:b9:96:25:ec:c4:61:a1:ed:42:ee:2e:
67:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E0:F6:20:43:91:BB:AD:AF:44:31:33:62:DA:EB:18:D0:70:71:42
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a31383a3a2f34382d3438203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:18::/48
Signature Algorithm: sha256WithRSAEncryption
65:45:0a:7d:8e:3d:e9:fd:77:d1:37:ab:54:ca:2e:19:89:d7:
80:91:63:06:7c:c6:6a:6c:65:e6:a5:03:6b:78:b5:8f:df:f0:
01:41:f8:83:e1:c1:29:4f:7d:66:a7:cb:60:20:29:62:91:b8:
eb:e3:c4:7d:a1:37:29:f7:32:b1:02:21:4a:3e:f3:8d:71:f3:
61:a1:8a:87:41:f7:d9:f2:0b:87:37:cf:87:d9:71:13:b8:07:
7f:59:6d:69:40:72:84:66:cc:dc:ab:83:75:88:4b:dd:a4:9c:
29:08:bf:d0:04:80:1b:a3:48:a4:13:2f:08:f2:d9:e1:94:03:
f7:ec:d5:20:38:f9:c5:51:16:04:a5:02:e6:d5:9b:63:95:62:
80:bf:6e:dd:9f:e8:7a:89:a0:f3:5c:ae:8c:a7:1e:07:0e:da:
b2:ad:05:8a:6c:06:7c:78:d4:ce:88:45:60:17:eb:f9:90:db:
ec:74:33:a6:f9:8d:54:18:ac:32:06:fd:ad:2c:b1:d4:69:3f:
d0:f4:77:31:93:7c:90:17:bb:5a:ed:a7:6b:89:2b:08:2a:e2:
30:f2:d7:12:08:3a:85:7f:03:3b:b8:05:5f:e4:f2:54:d6:d5:
54:3f:24:2f:ca:08:62:1d:e9:88:f3:f4:aa:23:67:64:6d:59:
23:d1:47:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:27:44 2025 by rpki-client