Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32343a3a2f34382d3438203d3e203133323133.roa
File: 326131333a393530303a32343a3a2f34382d3438203d3e203133323133.roa (raw, json)
Hash identifier: nQOVFFN0EJ46vcVQh0d8pKtD2mK2VIYJEoKw2urjLoM=
Subject key identifier: 72:84:27:38:F7:B5:9B:12:26:92:E1:A3:6C:6C:9A:15:D9:17:BD:55
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 52C101151EF36A97932B23FA806DB48E39723953
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32343a3a2f34382d3438203d3e203133323133.roa
Signing time: Fri 27 Dec 2024 09:28:15 +0000
ROA not before: Fri 27 Dec 2024 09:23:15 +0000
ROA not after: Fri 26 Dec 2025 09:28:15 +0000
asID: 13213
IP address blocks: 2a13:9500:24::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c1:01:15:1e:f3:6a:97:93:2b:23:fa:80:6d:b4:8e:39:72:39:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 27 09:23:15 2024 GMT
Not After : Dec 26 09:28:15 2025 GMT
Subject: CN=72842738F7B59B122692E1A36C6C9A15D917BD55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ba:1b:51:7f:c6:c0:3c:65:1c:70:f4:c3:f2:
a8:90:7a:d9:de:5a:6f:d5:1c:64:0e:ba:72:b7:f6:
bd:e9:3a:ac:94:09:ce:bd:85:ba:7c:04:33:5d:99:
c9:5b:c6:1e:8f:6d:86:c6:36:b9:8b:a9:e2:3c:85:
8f:3d:c8:b9:fd:23:4a:7b:6a:ed:75:14:cc:fb:0e:
de:69:9b:5e:0c:20:de:79:ce:30:5c:7d:32:eb:fd:
3e:97:5d:cf:a8:7f:88:6e:68:5d:52:ff:3f:8a:d9:
5e:32:de:a2:79:d5:04:45:2d:69:ef:84:8a:22:2d:
5e:4e:04:cf:64:90:01:5d:81:c2:c1:b0:4f:97:1d:
73:59:28:fa:e6:03:ca:e2:e5:ee:50:32:e3:1f:ac:
e0:d5:e1:97:be:99:99:a5:06:ab:c6:6a:c3:3b:63:
89:68:39:49:89:0f:f7:0f:87:42:ac:87:bd:da:38:
b5:83:c3:67:48:55:5b:ca:7c:2c:e3:94:c1:93:4e:
1c:a0:9b:de:87:0d:7b:41:01:e6:f2:70:0f:b4:17:
d3:9f:84:25:0c:f4:45:a8:eb:36:97:37:43:bc:de:
4e:18:66:35:aa:32:32:e5:d5:d9:71:fc:e3:6c:dd:
94:99:90:11:14:12:85:f0:b3:50:46:f2:89:7f:ae:
38:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:84:27:38:F7:B5:9B:12:26:92:E1:A3:6C:6C:9A:15:D9:17:BD:55
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32343a3a2f34382d3438203d3e203133323133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:24::/48
Signature Algorithm: sha256WithRSAEncryption
38:0a:17:f5:e3:82:56:73:ca:18:10:fd:72:e0:98:ae:8c:00:
b6:bb:a1:84:76:0e:3a:b9:5c:5a:a1:85:97:30:23:46:02:ec:
16:c6:80:a9:af:05:f3:ef:27:e6:d8:47:49:b8:72:41:60:e4:
07:a9:9b:4d:2f:f8:f5:d8:f1:70:15:09:d2:c8:51:93:e1:81:
41:21:2e:92:1c:1e:5e:8b:9e:ff:5b:c4:c4:43:bf:72:8e:88:
53:5f:d8:a4:8a:75:ba:ca:bd:bc:01:a7:fb:01:5a:5f:e4:7a:
49:f8:0d:e1:a3:b5:41:2f:57:19:8c:fa:b7:97:17:f8:c4:0a:
b1:97:1d:a4:bf:d9:dc:f3:b7:23:98:19:f3:54:1a:05:49:0c:
7f:b4:d0:21:b4:eb:43:96:b7:57:f4:93:d2:e1:cc:5b:59:31:
99:54:3f:a6:a8:0a:ee:46:ec:2e:db:ef:61:58:19:53:87:25:
7f:73:73:8b:b1:90:00:c8:72:fb:a0:7c:47:01:c0:4b:07:03:
24:a7:f5:d4:e7:51:04:89:06:db:01:dc:43:cc:ab:8c:50:2c:
ce:de:15:f3:08:dc:6c:21:4b:81:41:70:5c:b6:fb:be:00:68:
90:ba:db:63:a4:98:47:0a:23:6d:d7:87:b8:ed:58:74:5a:75:
1d:e8:36:be
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUUsEBFR7zapeTKyP6gG20jjlyOVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNDEyMjcwOTIzMTVaFw0yNTEyMjYwOTI4MTVaMDMxMTAvBgNV
BAMTKDcyODQyNzM4RjdCNTlCMTIyNjkyRTFBMzZDNkM5QTE1RDkxN0JENTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmuhtRf8bAPGUccPTD8qiQetne
Wm/VHGQOunK39r3pOqyUCc69hbp8BDNdmclbxh6PbYbGNrmLqeI8hY89yLn9I0p7
au11FMz7Dt5pm14MIN55zjBcfTLr/T6XXc+of4huaF1S/z+K2V4y3qJ51QRFLWnv
hIoiLV5OBM9kkAFdgcLBsE+XHXNZKPrmA8ri5e5QMuMfrODV4Ze+mZmlBqvGasM7
Y4loOUmJD/cPh0Ksh73aOLWDw2dIVVvKfCzjlMGTThygm96HDXtBAebycA+0F9Of
hCUM9EWo6zaXN0O83k4YZjWqMjLl1dlx/ONs3ZSZkBEUEoXws1BG8ol/rjh5AgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUcoQnOPe1mxImkuGjbGyaFdkXvVUwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYt
YjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWExYWY2LzAvMzI2MTMxMzMzYTM5MzUzMDMw
M2EzMjM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzMyMzEzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACoTlQAAJDANBgkqhkiG9w0BAQsFAAOCAQEAOAoX9eOCVnPKGBD9cuCYrowA
truhhHYOOrlcWqGFlzAjRgLsFsaAqa8F8+8n5thHSbhyQWDkB6mbTS/49djxcBUJ
0shRk+GBQSEukhweXoue/1vExEO/co6IU1/YpIp1usq9vAGn+wFaX+R6SfgN4aO1
QS9XGYz6t5cX+MQKsZcdpL/Z3PO3I5gZ81QaBUkMf7TQIbTrQ5a3V/ST0uHMW1kx
mVQ/pqgK7kbsLtvvYVgZU4clf3Nzi7GQAMhy+6B8RwHASwcDJKf11OdRBIkG2wHc
Q8yrjFAszt4V8wjcbCFLgUFwXLb7vgBokLrbY6SYRwojbdeHuO1YdFp1Heg2vg==
-----END CERTIFICATE-----
Generated at Tue May 6 21:41:38 2025 by rpki-client