Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a31663a3a2f34382d3438203d3e20333936333536.roa
File: 326131333a393530303a31663a3a2f34382d3438203d3e20333936333536.roa (raw, json)
Hash identifier: gzQkFUW4Qg3I69PGBtx1U6iwP63f70vwgE1RiqlP0Ek=
Subject key identifier: CE:F4:3E:14:89:8E:4D:79:35:F9:86:1E:C3:2D:4D:A1:2F:C1:BD:07
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 60D4813657418008BF664EED4E2D75AB09DF449E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a31663a3a2f34382d3438203d3e20333936333536.roa
Signing time: Fri 27 Dec 2024 09:28:13 +0000
ROA not before: Fri 27 Dec 2024 09:23:13 +0000
ROA not after: Fri 26 Dec 2025 09:28:13 +0000
asID: 396356
IP address blocks: 2a13:9500:1f::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:d4:81:36:57:41:80:08:bf:66:4e:ed:4e:2d:75:ab:09:df:44:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 27 09:23:13 2024 GMT
Not After : Dec 26 09:28:13 2025 GMT
Subject: CN=CEF43E14898E4D7935F9861EC32D4DA12FC1BD07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d8:68:ae:7c:5a:d7:c4:1a:b4:2c:ab:b4:5b:
e8:e4:91:a1:d1:e8:3c:ba:ae:99:46:ab:fc:39:66:
1a:fc:b3:bb:c8:c8:0e:30:2c:86:cc:ab:89:8b:15:
97:ea:8b:e5:7c:e8:b4:39:d9:4f:c5:b5:81:a0:92:
98:67:1a:0d:4e:6f:60:0a:c5:1c:3f:be:a2:f0:f9:
20:4a:56:d9:30:44:e8:bf:e1:62:bd:61:e1:57:f6:
9e:2e:8f:b6:b4:b9:58:26:0a:8d:15:e2:95:18:7f:
1c:cc:21:47:b5:9a:c8:68:a5:d1:86:7c:32:8d:b5:
ca:59:b5:10:b8:71:b6:75:69:f5:54:47:34:04:9e:
88:9e:9e:4e:29:58:4d:2f:58:ec:63:9f:d0:00:b8:
56:bb:a1:ee:01:38:1a:74:d8:72:8b:2e:b3:c1:40:
27:15:04:2a:5d:2e:c3:49:d6:88:03:f2:b0:9d:3c:
cc:73:55:b3:92:e5:49:3e:0e:d5:8a:02:75:f1:92:
8d:4a:27:25:ce:95:d7:6b:cb:65:6d:f8:04:f4:d7:
1a:5a:5c:1f:9f:d4:df:b5:e2:ec:07:43:1e:64:72:
5a:f5:64:6f:7e:d0:ac:17:c5:87:ef:bd:12:23:80:
24:78:d1:4a:c0:9f:26:0c:0d:48:56:ab:5e:b1:16:
e2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F4:3E:14:89:8E:4D:79:35:F9:86:1E:C3:2D:4D:A1:2F:C1:BD:07
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a31663a3a2f34382d3438203d3e20333936333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1f::/48
Signature Algorithm: sha256WithRSAEncryption
66:5f:68:2c:eb:ee:c9:9a:73:4f:08:2d:62:f0:22:1a:ea:9d:
d3:18:68:43:1a:3f:db:30:97:0a:5f:98:2e:c9:31:48:b1:a6:
1e:38:d9:31:5d:0f:d8:9b:fb:d1:63:17:38:5a:da:33:fc:a5:
ee:d4:99:22:12:2d:35:54:2a:da:3d:ae:4a:41:1e:1c:76:d8:
f2:b3:1c:d1:d7:db:b1:49:17:5c:0c:82:18:28:9d:f4:b8:4c:
1c:b5:74:73:31:74:49:67:1c:e5:6f:52:8b:13:f5:0e:fc:56:
8d:cb:c5:14:66:47:60:e5:3a:f2:86:86:2f:f0:04:62:23:fb:
1d:98:df:ea:9f:d7:d6:03:c2:5f:c7:d6:38:a7:7c:fa:83:73:
cf:3b:09:b7:81:ad:d7:e2:0f:be:f4:8f:e5:6c:6f:bf:96:ac:
17:a3:f9:e6:b5:20:3b:0f:65:24:cc:bb:d6:cd:1e:3d:d9:aa:
4a:9b:95:13:e0:a9:76:bf:0f:29:c6:61:c3:cc:b8:fd:d8:92:
38:92:f1:0f:95:cc:08:5d:c8:ef:af:d6:7d:20:d2:a1:34:eb:
3c:ed:c4:5a:83:24:18:43:c1:1a:ac:ad:be:6f:c5:99:4a:0d:
7b:2a:44:70:2f:b9:e3:80:1f:42:93:fa:50:b1:35:aa:02:ce:
0e:85:07:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:15:29 2025 by rpki-client