Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32633a3a2f34382d3438203d3e2039303039.roa
File: 326131333a393530303a32633a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier: Xp+s5rHajotubWWZ7EOROK0IsTJ9iHh55ZNgYX/yglE=
Subject key identifier: 46:2D:87:44:C9:82:19:FE:DA:E8:4A:B6:85:B0:23:45:B9:73:FE:0C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 67537EECAB54A293D4F06C86207791F4BEC40655
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32633a3a2f34382d3438203d3e2039303039.roa
Signing time: Fri 27 Dec 2024 09:28:10 +0000
ROA not before: Fri 27 Dec 2024 09:23:10 +0000
ROA not after: Fri 26 Dec 2025 09:28:10 +0000
asID: 9009
IP address blocks: 2a13:9500:2c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:53:7e:ec:ab:54:a2:93:d4:f0:6c:86:20:77:91:f4:be:c4:06:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 27 09:23:10 2024 GMT
Not After : Dec 26 09:28:10 2025 GMT
Subject: CN=462D8744C98219FEDAE84AB685B02345B973FE0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:16:5f:e8:49:3d:76:79:19:03:5a:30:aa:28:
d4:02:6f:5d:96:c4:42:4c:ce:1b:04:01:d3:29:06:
d2:84:20:05:ee:d2:43:40:08:66:f9:4d:e8:cc:ae:
b5:d3:4e:75:99:0f:37:5f:03:74:f3:c4:31:40:cc:
cb:f7:f0:53:27:85:fb:83:72:50:ef:17:0c:04:6f:
c1:06:f9:e0:f9:17:22:b0:8c:7e:17:5d:1a:e1:b7:
27:fc:aa:3a:31:09:8b:be:38:9d:4a:48:10:29:42:
a4:f6:b6:57:76:0c:67:82:be:38:bf:33:71:a3:ef:
d4:80:a6:18:52:5d:f0:42:69:8d:10:84:5b:c3:2d:
3b:ee:3d:b1:ae:b1:91:fd:c0:3d:bd:a1:19:28:2e:
b8:94:de:d5:4d:bf:36:04:9a:ab:cb:41:97:62:3f:
c8:64:d7:a3:db:ec:19:80:da:e7:6d:e8:5c:dc:64:
8e:9b:d8:a0:4c:f3:7d:ad:cd:e2:06:65:93:34:28:
5c:80:c9:f1:38:f8:5f:27:ff:8e:25:af:82:17:13:
9a:86:16:78:d8:c8:33:d2:90:a3:ee:e0:2b:45:bd:
3c:a4:ef:ce:31:78:a0:2d:6d:40:f9:31:33:a4:f6:
26:f2:a7:34:53:a3:bb:e3:d7:52:f7:af:56:42:79:
a5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2D:87:44:C9:82:19:FE:DA:E8:4A:B6:85:B0:23:45:B9:73:FE:0C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32633a3a2f34382d3438203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:2c::/48
Signature Algorithm: sha256WithRSAEncryption
37:6f:ec:2c:66:38:d4:15:b7:e3:43:fa:63:14:cf:9c:fd:29:
28:c2:29:2e:7f:a0:17:65:b7:45:bd:52:2b:45:07:43:c9:08:
82:bd:98:cb:17:38:50:3e:b7:4d:d9:6b:ca:60:1f:db:51:42:
9a:0d:bb:a5:a7:54:4f:63:c5:0c:37:4b:88:f9:49:c1:93:23:
c9:ef:78:a6:5a:1a:d8:73:e1:85:58:bd:49:11:7e:32:7e:60:
67:a1:97:77:eb:bf:09:8d:13:54:2b:e2:61:7c:68:56:44:18:
be:1a:7d:61:16:86:ce:8e:b4:98:39:aa:eb:de:38:f8:6a:15:
09:6f:5e:35:ad:59:3a:8b:e4:1c:db:d4:b6:b5:9f:36:f7:15:
7b:69:af:c5:ba:91:c8:a5:49:23:08:5c:de:71:13:14:a0:0a:
c9:fc:ca:63:d7:1e:90:7f:a2:6f:91:21:bb:39:98:9d:ae:23:
28:54:58:19:5d:3d:26:a7:78:01:79:3d:6c:8c:61:6a:87:f7:
4c:d9:96:f4:77:33:08:8a:9f:13:a8:2e:7c:a2:2b:eb:37:2f:
d9:63:06:81:33:0f:9f:b3:57:11:9f:80:93:f0:61:ea:ad:28:
4d:7e:06:b4:72:d9:06:17:73:22:22:33:29:4b:34:e4:85:6e:
0e:d8:b0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:32:28 2025 by rpki-client