Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32323a3a2f34382d3438203d3e20323632323837.roa
File: 326131333a393530303a32323a3a2f34382d3438203d3e20323632323837.roa (raw, json)
Hash identifier: HLOPBGQO4HbfOJwXAQGIaJnWGmN+Z1XzSoFzoWU1CJI=
Subject key identifier: 33:5B:11:BC:82:64:36:C0:9E:63:AA:39:DD:0F:F0:D1:50:F6:A9:62
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3BDF8F80E019C93ECA4FDBE05CA33A41D78A09D6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32323a3a2f34382d3438203d3e20323632323837.roa
Signing time: Fri 27 Dec 2024 09:28:20 +0000
ROA not before: Fri 27 Dec 2024 09:23:20 +0000
ROA not after: Fri 26 Dec 2025 09:28:20 +0000
asID: 262287
IP address blocks: 2a13:9500:22::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:df:8f:80:e0:19:c9:3e:ca:4f:db:e0:5c:a3:3a:41:d7:8a:09:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 27 09:23:20 2024 GMT
Not After : Dec 26 09:28:20 2025 GMT
Subject: CN=335B11BC826436C09E63AA39DD0FF0D150F6A962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:88:a9:67:6a:40:05:bc:d5:57:9a:c2:cc:
92:78:b5:59:53:27:74:62:a6:d7:5d:be:43:53:7f:
61:81:f8:e1:5b:c5:ed:ca:2b:e8:1e:d5:1e:27:96:
8f:bb:b9:94:03:d0:fe:f0:1f:13:df:a5:ec:24:07:
f3:fd:b7:e1:53:a4:be:88:8b:8c:13:5f:e5:92:86:
38:e8:1f:c1:ab:73:08:b4:f5:2d:f6:58:8e:0b:58:
a3:d8:d3:42:c5:ce:66:9d:9c:49:57:4c:f6:9d:41:
63:a6:0f:ab:94:65:e0:31:c0:53:e5:68:85:4e:72:
9f:db:b7:97:67:0b:4b:69:9d:d7:10:8c:bf:0e:c5:
9d:86:19:cb:17:f9:34:b1:dd:b0:e8:75:6e:bc:eb:
12:94:07:e7:70:57:92:9c:84:df:d3:14:bb:e5:14:
48:c6:59:c4:00:0e:2f:d3:ba:12:89:b2:6c:2e:33:
26:3e:1e:3d:a0:ea:59:ad:7e:1a:2a:55:59:e1:b7:
9c:4d:67:94:4e:0e:4b:fd:b1:64:40:44:57:77:d0:
3a:30:13:ab:43:9f:a2:0e:b8:83:95:a9:b4:3b:60:
5d:3a:8b:09:d3:42:8c:b8:eb:62:06:c1:75:f3:f5:
61:aa:ba:2e:76:ec:16:c2:46:23:2d:22:2b:1a:06:
f3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5B:11:BC:82:64:36:C0:9E:63:AA:39:DD:0F:F0:D1:50:F6:A9:62
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32323a3a2f34382d3438203d3e20323632323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:22::/48
Signature Algorithm: sha256WithRSAEncryption
52:bf:16:47:9d:8f:fe:5b:69:1c:4f:b8:5d:9b:b5:fd:01:86:
5a:19:20:eb:af:a9:37:00:c7:04:a5:d1:4d:73:c2:d0:3f:2b:
f7:f9:57:ee:52:0f:d4:dc:91:d2:b0:d2:ef:47:de:cc:84:b7:
42:57:7e:53:e8:41:98:20:46:68:d9:7b:88:7b:c0:97:fc:fd:
af:93:cf:69:bc:e2:97:5a:4c:0b:20:7f:04:6e:26:0f:b3:fa:
15:67:57:d9:79:8a:6d:9d:24:2b:8d:12:85:4f:b5:83:6f:93:
43:ce:36:e3:4f:b2:10:93:e2:1f:92:13:3d:27:d9:25:7e:13:
1b:da:94:3e:4d:d6:89:ff:86:61:9e:3d:71:09:53:c3:28:eb:
93:76:ae:df:c1:a5:76:b7:54:c5:8e:74:f5:dc:46:b6:2a:d4:
f7:59:59:cb:84:2e:b4:0a:8a:4a:67:4b:fa:5e:9b:cf:9f:da:
ef:2a:8e:a0:13:ce:dd:07:c7:0b:30:25:3c:f9:5f:a9:64:7b:
16:d7:ab:b6:2c:8a:f3:0a:eb:c0:83:6c:21:24:fa:c3:c1:77:
a5:81:d0:73:c1:38:31:23:89:3d:c8:51:5c:64:c3:9a:85:fc:
07:28:c4:72:ce:77:e4:c2:51:e7:6e:bc:65:5b:80:be:65:0b:
45:b0:ca:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:28:48 2025 by rpki-client