Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a363a3a2f34382d3438203d3e2039303039.roa
File: 326131333a393530303a363a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier: zkUD/1ssp3EER/Wj6JABe9AglG9mGUoffdvB+UOVuG8=
Subject key identifier: 89:79:FD:9F:41:A8:C4:23:25:10:76:FD:21:0C:E7:AD:34:FF:42:7D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 04EA93C379552BCACBDFC597F33CD8353B2C16A5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a363a3a2f34382d3438203d3e2039303039.roa
Signing time: Fri 27 Dec 2024 09:28:10 +0000
ROA not before: Fri 27 Dec 2024 09:23:10 +0000
ROA not after: Fri 26 Dec 2025 09:28:10 +0000
asID: 9009
IP address blocks: 2a13:9500:6::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:ea:93:c3:79:55:2b:ca:cb:df:c5:97:f3:3c:d8:35:3b:2c:16:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 27 09:23:10 2024 GMT
Not After : Dec 26 09:28:10 2025 GMT
Subject: CN=8979FD9F41A8C423251076FD210CE7AD34FF427D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:0a:7d:1a:ac:d9:fc:27:ad:ee:54:5d:87:
6e:d1:28:d6:6e:8d:ca:80:8e:7f:c6:8b:75:4a:9a:
36:77:25:5c:ee:b2:5b:02:4f:99:0d:df:bf:9d:8d:
0b:eb:24:62:b7:7f:19:08:00:c0:56:af:2f:1c:e9:
81:d4:08:12:3f:e3:da:7e:90:fd:25:43:92:f3:f4:
9c:64:95:42:d7:6f:2e:99:ee:9f:91:52:e9:19:a3:
8a:ec:54:a6:0c:92:3f:47:b7:48:5f:55:ab:72:4d:
57:92:de:8f:a0:87:8a:8c:89:d7:ef:af:5d:8f:05:
51:03:6e:48:34:01:3b:9b:26:40:25:9b:a7:68:15:
64:3e:e9:8e:43:29:fc:11:21:f0:7f:7f:11:1f:85:
d1:52:e2:d0:f9:f0:65:d3:40:76:3c:d4:98:de:3c:
06:1f:03:8f:c8:cf:5b:6b:3f:4b:67:3f:1d:a7:f5:
b3:d8:18:22:e5:cd:1e:7b:96:e5:10:fc:38:3a:e0:
75:7f:b3:b8:b9:a2:71:f6:07:7d:d2:e6:88:29:68:
b6:f3:48:73:a7:4d:c5:59:50:72:50:65:96:04:09:
55:69:10:65:58:4a:82:c9:19:2c:ae:a5:bd:9b:07:
c2:7f:72:8a:63:38:47:9e:86:5a:06:d5:c9:b1:2c:
13:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:79:FD:9F:41:A8:C4:23:25:10:76:FD:21:0C:E7:AD:34:FF:42:7D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a363a3a2f34382d3438203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:6::/48
Signature Algorithm: sha256WithRSAEncryption
99:8c:a5:8d:b5:a8:ad:9a:21:39:56:48:8e:55:4e:13:74:d8:
80:74:c7:64:54:9a:c1:a7:4d:db:b2:7e:4a:01:20:78:d4:0a:
f3:7a:f0:f3:f0:09:46:3e:db:90:88:32:3a:0d:64:fb:06:d7:
28:80:bf:36:2b:3d:a5:c2:d6:61:9e:ab:8a:06:b1:53:77:57:
a1:51:37:12:d7:ad:54:f3:aa:e5:a5:c8:e1:87:15:24:c7:21:
55:0d:62:e9:15:10:07:59:96:27:b7:46:bc:84:1d:41:dc:f2:
e0:17:a9:c4:76:2f:ca:12:c5:41:68:6c:b3:d8:e6:ce:1d:93:
02:00:23:e8:8b:44:43:fa:11:93:11:87:38:05:d9:6b:3a:c9:
92:b2:17:f7:52:54:f9:ff:b0:f5:f1:e7:e4:40:09:eb:11:0e:
35:96:ae:98:35:08:60:b7:b5:52:26:96:54:24:25:87:71:c1:
2c:0d:06:cb:b6:d6:a9:9b:e4:86:42:1b:e8:f4:04:f7:19:82:
5c:b0:61:15:c3:4a:97:15:ad:67:dd:3d:7e:6d:c3:13:ad:0f:
52:ed:f2:f1:2f:c8:b9:3a:9f:18:58:2c:59:d8:14:09:94:1e:
bc:d9:d0:87:95:85:f2:f5:01:8b:1b:a0:ef:f3:8c:3a:36:39:
43:54:56:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:31:06 2025 by rpki-client