Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32643a3a2f34382d3438203d3e20323039313831.roa
File: 326131333a393530303a32643a3a2f34382d3438203d3e20323039313831.roa (raw, json)
Hash identifier: kRYfWcoMx77tv4P29oUmziUrUJcT17RTApe/JysmFjg=
Subject key identifier: AA:26:93:37:F8:9B:E9:CE:D2:06:9E:AC:BC:6B:D7:D4:3F:77:B0:C6
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 713C5AAF9F4DCD9DDF00500EBD9E130ABF8A2ADA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32643a3a2f34382d3438203d3e20323039313831.roa
Signing time: Fri 27 Dec 2024 09:28:20 +0000
ROA not before: Fri 27 Dec 2024 09:23:20 +0000
ROA not after: Fri 26 Dec 2025 09:28:20 +0000
asID: 209181
IP address blocks: 2a13:9500:2d::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:3c:5a:af:9f:4d:cd:9d:df:00:50:0e:bd:9e:13:0a:bf:8a:2a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 27 09:23:20 2024 GMT
Not After : Dec 26 09:28:20 2025 GMT
Subject: CN=AA269337F89BE9CED2069EACBC6BD7D43F77B0C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d4:9f:74:85:36:be:dd:3c:d7:b4:83:48:44:
66:ea:29:f4:78:71:ea:4c:a5:b0:38:b7:40:28:74:
d2:90:54:c3:7b:e9:73:2e:3c:fd:1a:88:e1:48:aa:
09:1d:5c:55:ee:89:2c:57:8f:cf:54:a2:10:1c:a5:
a0:44:28:ce:e6:ef:66:16:03:28:eb:d1:c3:91:2a:
4c:45:c9:d7:3e:69:24:2b:f2:5e:69:62:57:c0:16:
0b:a6:ce:b9:2c:ea:91:7e:42:51:b4:2b:1b:2c:35:
13:82:30:a5:f6:a2:28:72:d5:93:33:79:2a:e9:92:
36:3c:48:e4:e4:c7:71:07:df:e7:62:1b:b9:26:63:
22:38:dd:53:15:a7:05:b0:d2:7a:7b:06:ef:c1:6f:
04:f4:6b:3c:d9:1a:cc:1e:3c:29:8d:49:94:83:42:
cb:9e:e8:7b:32:66:5e:9e:90:11:c8:e1:eb:80:ae:
6a:b3:4e:d8:3c:ac:1e:41:cd:e6:02:3d:6c:fb:c2:
94:f3:c5:7c:1c:53:ba:a1:6a:b2:70:40:0f:20:68:
e4:86:56:14:8c:84:d4:79:0c:d1:cb:bd:36:df:da:
5c:5c:e8:6d:d9:29:a1:01:d6:61:eb:14:09:2c:42:
84:c0:e5:9c:3f:44:9b:b8:df:c6:32:1c:ed:fa:d1:
ea:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:26:93:37:F8:9B:E9:CE:D2:06:9E:AC:BC:6B:D7:D4:3F:77:B0:C6
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32643a3a2f34382d3438203d3e20323039313831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:2d::/48
Signature Algorithm: sha256WithRSAEncryption
12:78:f0:8d:4c:57:21:9c:09:eb:a4:2c:39:86:38:bd:a2:ea:
d3:08:7b:8e:2f:99:6f:a0:7a:4e:37:6e:af:b0:7d:45:80:df:
79:79:04:44:bf:42:db:a4:d2:0d:fc:eb:ae:58:3e:5c:d9:1c:
c2:8c:25:1a:35:da:da:6c:44:91:8a:f1:b3:89:bb:21:dd:a9:
1f:ed:39:59:23:07:85:ba:37:72:b1:7c:6d:02:b9:c6:45:78:
fd:7a:a6:cc:23:f5:09:67:3a:f7:99:d9:cb:7b:5b:b0:84:f3:
09:45:ba:bf:1b:14:f1:ca:ff:43:ec:ac:ee:b3:88:99:9f:90:
f8:0a:53:6f:b6:00:4c:67:c8:9a:92:66:e3:9b:5a:a8:db:da:
77:9b:7d:1d:e3:3a:09:59:00:8b:21:53:70:e9:3a:82:ef:a6:
f9:85:dc:50:d3:f0:a9:b7:36:e3:03:ed:99:31:14:b2:d6:5b:
73:1e:26:8a:eb:6d:d8:cf:da:6b:d7:18:24:34:cb:c4:a3:69:
8e:f4:cc:59:a5:bf:b1:e5:f6:ca:c1:c2:8c:c9:80:49:28:97:
61:d7:2c:f1:7b:25:77:46:e5:92:d2:9b:20:ef:04:05:a4:7c:
7e:cf:95:cc:c8:aa:87:9f:b2:2d:6e:ba:1a:28:21:7a:42:aa:
52:4a:27:02
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUcTxar59NzZ3fAFAOvZ4TCr+KKtowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNDEyMjcwOTIzMjBaFw0yNTEyMjYwOTI4MjBaMDMxMTAvBgNV
BAMTKEFBMjY5MzM3Rjg5QkU5Q0VEMjA2OUVBQ0JDNkJEN0Q0M0Y3N0IwQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh1J90hTa+3TzXtINIRGbqKfR4
cepMpbA4t0AodNKQVMN76XMuPP0aiOFIqgkdXFXuiSxXj89UohAcpaBEKM7m72YW
Ayjr0cORKkxFydc+aSQr8l5pYlfAFgumzrks6pF+QlG0KxssNROCMKX2oihy1ZMz
eSrpkjY8SOTkx3EH3+diG7kmYyI43VMVpwWw0np7Bu/BbwT0azzZGswePCmNSZSD
Qsue6HsyZl6ekBHI4euArmqzTtg8rB5BzeYCPWz7wpTzxXwcU7qharJwQA8gaOSG
VhSMhNR5DNHLvTbf2lxc6G3ZKaEB1mHrFAksQoTA5Zw/RJu438YyHO360erBAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUqiaTN/ib6c7SBp6svGvX1D93sMYwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYt
YjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWExYWY2LzAvMzI2MTMxMzMzYTM5MzUzMDMw
M2EzMjY0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDM5MzEzODMxLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKhOVAAAtMA0GCSqGSIb3DQEBCwUAA4IBAQASePCNTFchnAnrpCw5hji9
ourTCHuOL5lvoHpON26vsH1FgN95eQREv0LbpNIN/OuuWD5c2RzCjCUaNdrabESR
ivGzibsh3akf7TlZIweFujdysXxtArnGRXj9eqbMI/UJZzr3mdnLe1uwhPMJRbq/
GxTxyv9D7Kzus4iZn5D4ClNvtgBMZ8iakmbjm1qo29p3m30d4zoJWQCLIVNw6TqC
76b5hdxQ0/CptzbjA+2ZMRSy1ltzHiaK623Yz9pr1xgkNMvEo2mO9MxZpb+x5fbK
wcKMyYBJKJdh1yzxeyV3RuWS0psg7wQFpHx+z5XMyKqHn7ItbroaKCF6QqpSSicC
-----END CERTIFICATE-----
Generated at Wed May 7 02:33:42 2025 by rpki-client