Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a323a3a2f34382d3438203d3e2033333230.roa
File: 326131333a393530303a323a3a2f34382d3438203d3e2033333230.roa (raw, json)
Hash identifier: J0aZiXxOs1fE7uAXI0dFI/ywIrBZBhSZfj/RTA0fHbA=
Subject key identifier: 6A:7F:A9:60:66:3D:F4:0A:61:87:58:59:E7:E8:3E:B1:51:E5:EF:C0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5CA3D8447E5CD0900677071260545BB567D72241
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a323a3a2f34382d3438203d3e2033333230.roa
Signing time: Fri 27 Dec 2024 09:28:10 +0000
ROA not before: Fri 27 Dec 2024 09:23:10 +0000
ROA not after: Fri 26 Dec 2025 09:28:10 +0000
asID: 3320
IP address blocks: 2a13:9500:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:a3:d8:44:7e:5c:d0:90:06:77:07:12:60:54:5b:b5:67:d7:22:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 27 09:23:10 2024 GMT
Not After : Dec 26 09:28:10 2025 GMT
Subject: CN=6A7FA960663DF40A61875859E7E83EB151E5EFC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2d:a5:5e:06:90:05:60:52:fe:39:8a:70:2f:
c3:be:3a:fb:81:94:ff:d6:8e:bb:df:eb:88:f8:27:
df:49:72:ae:9a:be:4c:20:d3:31:bf:c2:c6:ad:f6:
d1:35:62:43:eb:cb:d0:5d:af:ad:4d:1a:e9:a0:02:
68:db:ba:7e:59:ee:41:a5:5b:67:55:98:39:17:1b:
1e:43:33:f1:9a:44:d5:0d:5e:35:b7:71:2a:fe:6e:
3a:03:55:ca:6b:e7:7a:36:53:64:8e:b1:f8:d5:0d:
ce:7a:4e:4e:d7:b6:6c:0f:38:fd:22:7c:81:1a:11:
5c:6b:08:50:10:69:86:86:b5:cf:39:94:c1:21:6c:
ce:ea:06:06:d9:90:03:ff:f7:81:b6:c5:98:39:29:
54:32:02:5b:41:ab:9d:2e:3b:e4:36:0b:fa:49:36:
bf:b7:ba:a5:15:38:ad:40:43:01:fb:b4:bb:52:80:
60:4f:4f:88:38:36:57:ba:a6:3f:bb:40:a0:06:3b:
e0:36:59:65:4c:4d:1d:99:6a:4f:e0:09:69:1c:d3:
7d:88:a9:6c:b4:1f:ea:b0:52:3d:28:4d:55:53:80:
4a:b4:96:04:b5:d0:1d:3e:31:e1:e6:52:ef:a1:fa:
28:9e:c0:bc:ff:f2:dd:0f:54:c5:49:34:22:4a:29:
9e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7F:A9:60:66:3D:F4:0A:61:87:58:59:E7:E8:3E:B1:51:E5:EF:C0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a323a3a2f34382d3438203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:2::/48
Signature Algorithm: sha256WithRSAEncryption
9c:d0:e4:3a:83:7e:43:ee:a6:16:3f:e8:9e:dc:c8:4d:cf:90:
ef:4f:a2:15:b9:48:ee:ec:89:60:b2:68:4d:88:15:a3:6b:d6:
89:8e:82:f3:29:08:2b:8d:57:cc:1a:d8:ae:c2:93:36:d1:95:
90:cf:20:e5:66:88:fc:e2:3a:b3:9a:5c:8c:66:ed:01:f0:f0:
98:a8:5f:9e:06:4a:f8:f8:03:17:47:d5:08:c3:64:a8:4a:c8:
d0:c2:18:ca:0b:38:f9:89:20:65:5d:94:c6:72:00:a0:98:ec:
bb:32:1d:5f:d9:2e:0b:0d:6b:b3:7f:cf:6b:29:1a:e6:f6:6f:
27:ac:6e:c3:dc:8a:fe:f3:57:f7:02:30:46:5a:0f:83:a6:4f:
9d:7c:f4:ff:66:c6:e4:4b:de:6c:b3:76:bb:cc:80:b7:2d:3a:
39:f0:df:96:20:88:82:8b:6c:fe:91:89:7b:76:dd:54:4e:b0:
27:1a:1e:02:73:75:ca:c5:d3:f7:89:db:7a:d3:55:6d:2b:69:
27:61:9a:5f:8c:5e:a7:22:69:a2:e9:03:1f:6c:8c:95:5c:eb:
84:14:a2:03:d4:b6:1a:b1:73:b9:b2:b2:5e:be:fb:e1:aa:0c:
7b:aa:bf:9a:fa:2c:52:f5:3c:c7:58:95:b9:57:da:8f:d1:21:
89:77:1a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:47:39 2025 by rpki-client