Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32303a3a2f34382d3438203d3e20323632323837.roa
File: 326131333a393530303a32303a3a2f34382d3438203d3e20323632323837.roa (raw, json)
Hash identifier: so18t0TzWZ4jmGut7+Q6S2n0JX6rjHKpi/8Aov5mkJs=
Subject key identifier: 83:90:7D:2C:E3:E8:26:BD:EF:A0:29:D0:E1:AF:E0:9F:2C:7F:75:65
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 124D696EDA4B916D2E4C65D7D94372C4BF0F5C12
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32303a3a2f34382d3438203d3e20323632323837.roa
Signing time: Fri 27 Dec 2024 09:28:18 +0000
ROA not before: Fri 27 Dec 2024 09:23:18 +0000
ROA not after: Fri 26 Dec 2025 09:28:18 +0000
asID: 262287
IP address blocks: 2a13:9500:20::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:4d:69:6e:da:4b:91:6d:2e:4c:65:d7:d9:43:72:c4:bf:0f:5c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 27 09:23:18 2024 GMT
Not After : Dec 26 09:28:18 2025 GMT
Subject: CN=83907D2CE3E826BDEFA029D0E1AFE09F2C7F7565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:83:1f:e6:f0:dc:d1:18:fe:55:32:15:50:28:
95:ac:15:53:26:4d:47:6a:20:63:06:cc:b4:38:c6:
e7:7f:5a:19:b5:43:90:c6:e3:47:3a:c4:8b:4f:76:
d3:8c:f9:7b:6e:f4:c5:05:66:65:1f:73:83:c2:b6:
c6:2f:5d:8d:f8:5d:d4:20:c2:f9:ee:39:31:0b:f5:
95:5c:c7:e8:02:fa:45:53:7f:65:06:d2:09:cc:82:
61:1c:95:ca:0e:32:6e:fa:98:a7:bf:81:8b:f0:bf:
e8:26:77:a3:98:bd:82:b7:0e:72:6d:12:3d:54:51:
93:6a:39:4b:1f:0c:27:e9:67:f5:75:b0:8d:49:0f:
13:09:ac:af:60:e1:99:63:14:9e:14:05:a2:a0:be:
65:b2:7e:08:52:ce:b9:f6:72:03:61:24:a8:16:22:
fd:ae:29:24:95:ce:61:e4:41:b9:c4:d0:ac:35:f0:
bb:c4:3f:46:65:37:b2:a2:26:4c:1a:6f:cf:2a:59:
4a:b2:cf:27:95:b5:ed:58:07:6e:23:c1:21:e2:05:
e6:d8:14:bf:d2:ff:54:ea:1a:ff:ed:d2:db:26:68:
6c:cd:a3:73:6c:c3:2e:1a:4f:41:55:55:f1:b2:29:
1c:8c:85:e3:e1:e7:d8:42:95:3d:ff:54:9b:e3:64:
d8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:90:7D:2C:E3:E8:26:BD:EF:A0:29:D0:E1:AF:E0:9F:2C:7F:75:65
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32303a3a2f34382d3438203d3e20323632323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:20::/48
Signature Algorithm: sha256WithRSAEncryption
06:21:4f:42:04:6a:05:a4:7f:56:3f:dd:87:32:3e:4d:a2:91:
0b:83:78:f9:74:10:da:ba:fa:dc:01:cc:f8:25:fb:87:37:aa:
05:d8:63:80:24:b5:ce:f7:3c:44:93:5e:b8:eb:ca:ce:02:17:
0c:10:f3:bd:7e:1d:a9:1c:4a:ee:3e:b6:36:db:a5:a3:7d:46:
d8:16:49:9f:ee:ef:c8:64:65:70:ee:0e:5c:08:a5:94:6d:0d:
47:06:65:da:1d:92:0c:2b:72:54:95:1f:f9:7c:c4:a0:82:9c:
11:66:d9:44:d4:6b:11:ac:61:a4:01:7d:41:0b:b8:14:35:61:
e5:77:e8:17:2b:e6:ee:97:01:7b:c8:04:a2:13:a7:9e:d9:3b:
55:f8:0e:1f:07:3f:1e:3b:f3:01:c7:cc:f1:bf:6d:b7:c4:53:
b0:a9:3c:b7:21:87:f9:0d:2a:ee:f9:a7:5e:98:ff:f9:99:01:
8d:ae:8f:3f:dc:b7:c8:a1:ae:03:0f:da:6d:22:f1:72:20:d3:
61:bf:ff:be:3c:b8:17:e1:9c:ae:3d:e6:cb:1e:c4:3e:3c:bd:
f2:93:64:07:e0:c8:97:c6:7b:ba:e1:5c:3d:0e:b8:a6:84:fa:
5a:3a:ed:a1:8d:d1:22:be:40:c0:44:4f:23:4f:29:44:8c:a4:
b0:e8:df:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:40:22 2025 by rpki-client