Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a31653a3a2f34382d3438203d3e203239383032.roa
File: 326131333a393530303a31653a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier: IFZpcTmVMbRGr/D80iQ1c+MgGQ5iHsCsKJSB3Ic1lsg=
Subject key identifier: E7:4E:5C:E9:19:1E:4F:7F:CA:12:20:DF:C6:9E:6C:58:B2:F9:04:83
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5D7BC36CB543086B98F6BDCF0595CA9C112584AE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a31653a3a2f34382d3438203d3e203239383032.roa
Signing time: Fri 27 Dec 2024 09:28:11 +0000
ROA not before: Fri 27 Dec 2024 09:23:11 +0000
ROA not after: Fri 26 Dec 2025 09:28:11 +0000
asID: 29802
IP address blocks: 2a13:9500:1e::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:7b:c3:6c:b5:43:08:6b:98:f6:bd:cf:05:95:ca:9c:11:25:84:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 27 09:23:11 2024 GMT
Not After : Dec 26 09:28:11 2025 GMT
Subject: CN=E74E5CE9191E4F7FCA1220DFC69E6C58B2F90483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:3e:48:52:0f:da:71:35:e0:df:1a:b8:3c:
9f:d2:94:6e:a2:bf:a4:6d:bd:02:57:ed:a1:09:8d:
f8:c7:6d:df:83:b1:d2:eb:c4:6b:c1:a8:be:80:2b:
ac:d0:d4:be:31:af:12:93:9e:d9:f5:83:f9:94:41:
d1:6c:4e:9d:83:0c:2e:6e:db:6e:4e:f3:49:46:cd:
87:19:21:d4:a4:25:20:c0:42:a4:f6:9c:51:96:c1:
4a:d5:37:33:79:05:0b:08:0b:f9:fd:60:1f:e7:ce:
19:1b:b0:3b:3c:6d:25:e8:b7:d5:3d:35:9d:44:c7:
62:94:a6:5c:e5:e7:0d:51:4f:4d:77:1e:27:38:ae:
79:84:ab:4c:92:2d:53:6b:72:4b:75:45:06:4d:65:
7f:63:1e:8a:f6:cd:f5:a7:20:67:82:85:1b:5e:fc:
0c:76:ea:91:cb:ea:36:af:57:eb:77:c9:cf:1a:43:
61:12:77:a5:c2:cf:4a:16:2f:ed:ea:79:a6:9e:66:
bc:0d:1a:12:55:cf:37:53:33:c4:6f:fa:c4:1d:71:
23:65:1a:b5:0c:10:3e:de:70:89:3a:0a:6d:88:1e:
99:91:e6:d1:23:a9:ac:57:8e:43:32:db:0d:41:96:
7f:fe:3e:f7:d5:c3:85:bf:9b:aa:13:ef:62:26:e6:
f4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4E:5C:E9:19:1E:4F:7F:CA:12:20:DF:C6:9E:6C:58:B2:F9:04:83
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a31653a3a2f34382d3438203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1e::/48
Signature Algorithm: sha256WithRSAEncryption
49:cc:eb:b7:0f:68:42:7d:3b:28:e6:dd:9d:a8:fa:94:e2:3e:
a5:08:00:77:c6:df:d6:3d:3e:3a:25:62:b2:d5:cc:c0:6c:4b:
5a:07:ea:b9:37:80:ed:18:14:c5:0f:de:f3:51:ef:6c:bb:e4:
a1:46:c2:21:90:43:eb:48:e9:04:ed:10:d7:b4:63:49:03:39:
12:f4:28:94:89:31:a8:55:31:55:25:c4:ab:ab:a4:fe:c1:c9:
50:f2:01:33:84:6c:76:21:d6:03:49:35:16:08:1d:39:8e:83:
47:ed:f4:2e:b2:ca:ed:21:fd:00:d0:c4:8e:d7:6e:17:25:d4:
9b:15:aa:a8:69:c0:11:d0:ce:22:f6:ab:e1:cb:b7:62:ba:f4:
51:e4:b6:0d:9d:9b:61:ef:aa:eb:4a:6f:ce:6d:bb:32:81:13:
32:fb:97:28:a1:8f:85:c9:40:e8:29:8c:cc:ea:1d:90:61:0b:
69:5c:1d:0c:ff:ff:4f:c9:53:fd:90:cf:b3:44:d8:dd:ab:c1:
80:96:a1:96:22:ea:b1:3c:89:4d:9f:ac:a2:c4:40:b0:46:16:
27:7e:7e:a5:71:48:79:72:f1:a2:35:d4:f2:ad:6f:10:6b:cd:
66:44:e5:be:96:35:34:32:57:ba:cd:f4:89:59:d5:b7:bb:4f:
b2:83:c5:7a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 7 07:07:46 2025 by rpki-client