Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a373a3a2f34382d3438203d3e2039303039.roa
File: 326131333a393530303a373a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier: L8Zxwfke5+4lDokC+OSZEVj22AlrJ2Bv5bLaEYsOsa0=
Subject key identifier: 3F:97:65:56:A3:CA:6A:75:A6:51:21:75:FA:48:27:5A:EC:7B:65:70
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 567252A2C39D1D3C769DB344AEE4BBE11117D306
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a373a3a2f34382d3438203d3e2039303039.roa
Signing time: Fri 27 Dec 2024 09:28:10 +0000
ROA not before: Fri 27 Dec 2024 09:23:10 +0000
ROA not after: Fri 26 Dec 2025 09:28:10 +0000
asID: 9009
IP address blocks: 2a13:9500:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:72:52:a2:c3:9d:1d:3c:76:9d:b3:44:ae:e4:bb:e1:11:17:d3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 27 09:23:10 2024 GMT
Not After : Dec 26 09:28:10 2025 GMT
Subject: CN=3F976556A3CA6A75A6512175FA48275AEC7B6570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:42:17:d2:c1:79:df:2e:41:79:89:57:1f:84:
ca:ad:7c:0d:57:1b:23:eb:62:9f:58:22:77:68:ed:
02:13:72:27:be:e7:c4:cd:4f:cf:9a:ef:41:38:16:
4c:3e:af:82:c6:54:d7:1b:47:57:63:b1:83:9b:98:
a8:32:4d:a2:10:01:b3:7e:93:cf:bc:72:83:a7:88:
c1:d6:30:ae:e4:73:e8:5a:62:64:89:2f:98:fd:f9:
ea:bc:69:f5:3e:89:d2:27:5a:e3:ec:ac:d7:fc:84:
a5:58:69:d2:a7:73:36:4c:4f:b5:01:cf:3b:de:a0:
d0:a0:16:8d:b9:fd:b2:bc:ab:ad:2c:7c:24:48:3f:
4c:06:c7:79:89:ab:f8:a5:05:72:f2:ac:5b:a6:d3:
9f:81:2c:73:68:33:99:d6:3b:f3:61:ed:6b:a0:6e:
53:3b:c7:47:bf:fb:3e:da:1c:3d:85:82:19:d0:0f:
e5:e8:72:77:cc:8e:f8:47:42:bc:27:4e:a5:85:52:
40:b2:6a:09:58:74:44:04:81:b1:7a:f2:87:cc:aa:
a4:42:d8:7c:1b:31:8e:75:51:41:43:4a:6b:02:9f:
78:49:ad:05:c3:48:94:05:01:5f:5b:72:22:e8:9d:
45:e2:8e:34:9f:b9:e0:f0:f9:1f:4c:b2:83:e8:96:
a6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:97:65:56:A3:CA:6A:75:A6:51:21:75:FA:48:27:5A:EC:7B:65:70
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a373a3a2f34382d3438203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:7::/48
Signature Algorithm: sha256WithRSAEncryption
99:d0:bb:ab:e4:8e:db:eb:f7:6a:51:ec:18:ce:18:44:75:d2:
de:a9:21:32:2f:5c:bb:cc:f6:c1:1a:19:be:a9:d5:9c:8f:d4:
69:39:a2:d4:d7:25:f1:04:53:31:f1:7b:25:94:97:88:40:02:
a2:59:c4:6d:74:8d:8c:2e:07:6c:4a:3d:23:47:65:0b:cc:cc:
4d:2f:28:17:1e:61:fe:af:70:7c:6b:0b:79:c8:d8:ff:93:61:
52:8f:92:b1:76:e3:1d:df:47:63:6c:f7:50:ef:e2:49:5e:41:
c4:54:1e:91:8d:2e:e5:f0:e5:2a:43:d9:12:71:f1:e8:72:63:
23:38:a9:71:48:3d:36:22:de:67:42:ea:ac:e3:ef:02:1e:a2:
94:74:1f:a1:1d:67:ec:70:d1:cf:99:5e:fe:4e:93:90:29:39:
08:58:96:4d:93:10:9b:dd:09:91:bc:31:b3:b1:24:83:26:b8:
84:4f:96:fc:01:a6:a5:71:c6:6d:2f:01:8d:16:1b:0a:4f:0b:
36:90:09:cb:4a:d2:66:13:42:a2:91:56:d8:a1:12:9f:10:9c:
74:80:db:bf:76:31:1e:ca:13:9a:44:32:b4:40:53:d5:88:85:
42:21:1d:0b:5e:27:64:69:fb:e0:e3:46:da:99:85:23:55:17:
14:65:54:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:59:05 2025 by rpki-client