Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32333a3a2f34382d3438203d3e20323632323837.roa
File: 326131333a393530303a32333a3a2f34382d3438203d3e20323632323837.roa (raw, json)
Hash identifier: 8PKNtuFV3ODT1DwVExZENKJXr1Dzv8taKkgiIrS+NrI=
Subject key identifier: 75:C0:CE:7B:7C:2C:27:86:A6:61:42:C8:48:89:C8:FB:7F:5B:C1:84
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 301B3E7BC319690AF850EA778A35D38ED8084055
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32333a3a2f34382d3438203d3e20323632323837.roa
Signing time: Fri 27 Dec 2024 09:28:14 +0000
ROA not before: Fri 27 Dec 2024 09:23:14 +0000
ROA not after: Fri 26 Dec 2025 09:28:14 +0000
asID: 262287
IP address blocks: 2a13:9500:23::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:1b:3e:7b:c3:19:69:0a:f8:50:ea:77:8a:35:d3:8e:d8:08:40:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 27 09:23:14 2024 GMT
Not After : Dec 26 09:28:14 2025 GMT
Subject: CN=75C0CE7B7C2C2786A66142C84889C8FB7F5BC184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:52:38:cb:0d:fb:81:70:f6:e0:d7:82:3f:2f:
15:1f:b4:47:82:28:2c:66:34:ae:3e:88:02:2a:53:
22:8f:09:1e:42:7d:99:90:d7:ae:d8:03:76:42:01:
f3:f2:df:a5:6a:fc:82:cb:7c:60:4a:2d:5c:86:60:
1e:1c:35:72:07:ba:d4:a2:d6:f9:23:34:5a:89:b1:
56:f5:7c:e3:5e:51:8f:0d:d1:4d:58:30:3b:32:85:
4e:07:4d:b2:6c:e3:76:7e:7d:43:ad:a9:e6:3e:8d:
1a:01:27:d3:b7:37:ba:2f:4d:3d:6e:25:9d:35:74:
6b:4d:e8:dd:c8:53:dd:75:6f:65:7d:6e:c7:1d:dc:
60:eb:2c:78:2c:9d:24:8c:df:11:2e:43:b3:26:76:
6a:83:6b:82:aa:96:58:70:4b:80:21:af:f3:3f:80:
a1:28:44:a0:ee:be:d5:f3:ed:a1:78:9e:55:12:5f:
f8:5a:28:92:98:c2:56:cc:e1:3e:6a:c9:25:4d:11:
17:a5:28:ef:6c:3c:d8:0c:5e:8d:d3:69:9f:2d:3e:
ec:4d:ca:66:78:6c:b7:8c:7d:34:0b:6b:61:e2:7a:
51:90:d4:d3:71:d7:91:ac:80:1a:34:09:fa:28:6d:
3c:47:ef:79:6b:ff:08:1c:a3:8b:e7:56:94:8a:6e:
ca:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C0:CE:7B:7C:2C:27:86:A6:61:42:C8:48:89:C8:FB:7F:5B:C1:84
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32333a3a2f34382d3438203d3e20323632323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:23::/48
Signature Algorithm: sha256WithRSAEncryption
28:a7:2c:a2:ea:22:6b:08:e8:75:19:cd:7d:dd:b8:83:55:1c:
42:5e:9f:75:28:7b:93:98:cc:ea:ef:6f:82:3e:b7:55:f8:ec:
96:26:a5:75:7c:80:01:78:06:c2:6f:5d:16:2f:06:dd:19:aa:
c6:42:f3:64:ea:ad:fc:0e:2d:1c:24:f5:c1:60:9d:d1:d2:52:
37:13:31:37:f6:f2:a5:2e:c8:51:65:d3:e0:7a:a6:dc:2f:51:
45:f6:23:c0:d2:99:d8:62:72:d7:ab:d5:4a:ec:bc:6c:8e:56:
a9:14:eb:bb:9b:be:e3:a4:43:c4:4e:83:c7:eb:44:50:ba:57:
cd:39:0e:54:4e:43:72:02:09:02:43:38:95:54:7b:50:07:0b:
06:38:2f:be:93:ba:71:b6:8a:54:16:45:59:b5:a0:ae:46:d9:
16:b1:ac:18:15:fd:49:79:db:a3:cf:fe:ca:82:12:6c:8d:94:
5b:72:e5:c4:cd:85:5b:98:69:5a:7d:b2:df:4d:f6:02:13:9d:
1e:6f:d4:e3:13:0e:4d:67:fe:96:05:e4:d1:5c:5d:f8:8d:62:
86:01:4a:0d:e3:a1:1c:d7:09:96:0e:89:f3:d2:e3:c2:ab:f6:
4e:34:d1:8c:28:80:b2:68:b2:f7:18:a8:c9:c0:f6:0d:d5:04:
7c:f3:12:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:27:47 2025 by rpki-client