Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32393a3a2f34382d3438203d3e2039303039.roa
File: 326131333a393530303a32393a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier: OttLW5UXv6eKDlRhNVgBP84qmwDrsv4yjscFX+cvoXA=
Subject key identifier: 80:EC:F1:9E:38:9F:D1:73:F4:DF:43:21:65:11:B4:B1:B1:15:86:B8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 30A866E1102064B7D72217C06C8BCDFB05D85D6A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32393a3a2f34382d3438203d3e2039303039.roa
Signing time: Fri 27 Dec 2024 09:28:11 +0000
ROA not before: Fri 27 Dec 2024 09:23:11 +0000
ROA not after: Fri 26 Dec 2025 09:28:11 +0000
asID: 9009
IP address blocks: 2a13:9500:29::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:a8:66:e1:10:20:64:b7:d7:22:17:c0:6c:8b:cd:fb:05:d8:5d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 27 09:23:11 2024 GMT
Not After : Dec 26 09:28:11 2025 GMT
Subject: CN=80ECF19E389FD173F4DF43216511B4B1B11586B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0b:26:49:d0:e7:e8:08:42:e6:5d:f3:df:00:
d6:30:a9:26:bb:07:ca:b5:0b:4f:12:7d:32:7b:68:
9e:95:4e:1e:60:87:2e:e1:64:7b:50:ab:3c:e9:c6:
6a:28:44:91:97:e2:ec:b2:0c:4e:bd:07:64:09:e6:
15:3c:fb:c9:e5:03:a1:40:90:0e:b0:e4:e7:2b:94:
b3:d2:2c:4a:4e:6a:55:2a:50:35:f0:4b:c8:ce:96:
90:4d:98:1c:d1:d1:0a:be:83:aa:ac:2f:45:07:73:
84:85:8e:42:44:a9:c9:e4:ef:b5:2a:05:40:e0:39:
62:7b:02:cc:52:75:18:70:45:d1:5c:71:9c:10:8e:
c6:a6:d3:ef:da:10:9a:4e:8b:45:7f:1d:2c:8e:0e:
06:53:f8:e3:d4:1e:6d:d8:1f:61:25:8d:a7:b9:09:
d6:33:5b:fb:83:c2:69:bf:44:36:e3:f9:e1:95:30:
76:6c:a7:a7:04:1d:e3:f0:7c:93:96:65:43:1c:5f:
29:a9:ce:c8:a6:b6:b9:5a:3f:e7:65:64:44:11:a6:
b3:63:a6:98:bb:b1:fb:03:3c:d5:70:2c:15:9c:c6:
b2:28:02:97:78:09:35:18:78:95:96:0c:c6:57:f0:
00:c8:9a:42:84:ce:7c:ae:ad:44:01:19:3c:5b:cd:
d0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EC:F1:9E:38:9F:D1:73:F4:DF:43:21:65:11:B4:B1:B1:15:86:B8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32393a3a2f34382d3438203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:29::/48
Signature Algorithm: sha256WithRSAEncryption
63:f5:1c:25:f1:54:65:f4:66:7a:84:7c:c6:98:66:bb:fa:4b:
fd:18:0e:cb:f0:a2:69:24:c0:96:af:77:b8:c6:b8:b2:8c:c2:
9e:57:67:b1:c9:ef:59:86:ba:b8:26:49:9d:6d:25:52:f8:df:
7b:c2:db:c9:ec:3f:e4:ce:f1:ee:e8:25:07:20:21:ee:11:9a:
f2:8b:31:9d:14:8c:80:59:68:4e:b4:c7:cc:55:a1:78:71:68:
6e:93:46:3d:9d:2f:29:87:f3:44:75:82:a4:a5:fe:88:f6:5c:
7e:b8:3a:8a:71:58:a9:a3:af:9c:ab:6b:7c:99:d5:ef:f3:aa:
03:9e:90:25:c6:6e:6c:97:12:33:53:f2:bb:d2:ec:bb:6b:32:
89:e1:49:56:1b:eb:95:a5:f5:74:11:ac:0b:0d:a7:4b:8d:07:
87:16:7a:9e:15:cd:ab:63:73:a1:b1:e5:07:e0:91:65:8c:b9:
c3:1d:16:02:6d:91:d3:d1:f3:86:26:42:e1:8e:75:b8:08:94:
0d:a6:dd:75:ec:86:ed:88:8d:e0:1a:7c:74:b8:8b:1f:d9:9c:
f6:15:af:02:33:0f:17:2e:81:57:8e:02:a0:81:d1:d2:78:16:
2e:98:ae:44:43:8a:d1:86:e2:f6:ba:0d:a0:d3:e5:a2:6a:0c:
64:df:52:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:29:11 2025 by rpki-client