Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a623a3a2f34382d3438203d3e2039303039.roa
File: 326131333a393530303a623a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier: r0DkwC3ciP5Vf++ONW6RmBecTfFK3paN2rN2xb5K9mU=
Subject key identifier: 9C:F3:FF:77:43:21:89:B6:79:AD:4A:92:E4:57:26:1C:7A:B9:C7:55
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 16F8FE2A4B432B3BB118E9AFAE6ED688514DB98F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a623a3a2f34382d3438203d3e2039303039.roa
Signing time: Fri 27 Dec 2024 09:28:16 +0000
ROA not before: Fri 27 Dec 2024 09:23:16 +0000
ROA not after: Fri 26 Dec 2025 09:28:16 +0000
asID: 9009
IP address blocks: 2a13:9500:b::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:f8:fe:2a:4b:43:2b:3b:b1:18:e9:af:ae:6e:d6:88:51:4d:b9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 27 09:23:16 2024 GMT
Not After : Dec 26 09:28:16 2025 GMT
Subject: CN=9CF3FF77432189B679AD4A92E457261C7AB9C755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:6a:78:6e:0a:06:51:76:b6:b4:03:57:58:
42:e0:20:1d:d2:9b:a5:9c:47:9c:3a:14:ec:01:14:
46:21:c8:44:dc:ca:c6:8b:24:b6:b1:9f:00:ca:1e:
d9:41:12:da:cd:84:63:10:38:52:e5:97:07:49:01:
51:1c:95:e3:eb:3a:cb:72:36:2f:42:87:0b:6f:33:
19:75:88:5f:f4:6b:7d:e8:a1:c1:56:0a:8b:ed:ee:
f2:ad:ac:44:2c:15:6a:da:d3:65:86:13:3a:38:8c:
12:8a:be:3b:a5:42:94:dc:ec:6b:3f:9f:8f:a4:60:
ed:bc:4c:ee:aa:43:60:c2:e3:96:d5:1c:57:3d:7c:
66:a4:d3:9a:40:e5:cf:7e:fd:26:a9:8f:f6:23:d3:
9e:0b:85:f7:d2:93:97:1d:9a:2c:32:53:1e:a3:b6:
16:82:27:4e:65:cf:21:e0:4e:f7:5d:35:bd:11:82:
2d:46:c4:eb:6b:a7:3e:7f:1c:c2:06:03:f6:79:a6:
50:af:19:3f:3c:d0:48:0e:a8:ab:a3:12:f9:e8:53:
47:1e:c5:74:9d:60:08:85:b7:c8:7d:5d:7e:2d:45:
11:af:8a:4a:b6:f6:0c:5f:25:4f:48:8f:b7:f2:6c:
b5:c5:b3:5b:c2:15:63:57:3c:4b:f1:3b:95:e8:be:
e8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F3:FF:77:43:21:89:B6:79:AD:4A:92:E4:57:26:1C:7A:B9:C7:55
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a623a3a2f34382d3438203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:b::/48
Signature Algorithm: sha256WithRSAEncryption
23:e9:e3:f4:c9:fc:42:66:d7:e5:e2:fa:99:82:ae:38:97:55:
15:60:a1:32:49:c5:cd:de:da:fe:f4:0c:34:61:95:9e:93:99:
aa:be:22:f6:31:cd:9d:ed:a2:c1:02:03:cf:c2:ae:df:e2:71:
c6:83:e3:8b:87:ea:17:ad:39:ac:8d:f5:bd:72:63:43:6b:1d:
3e:e4:4d:c8:ea:44:c2:c0:f3:c5:a2:11:d3:26:bd:b3:72:8d:
29:37:0e:69:93:88:fc:20:44:21:c9:8c:4d:48:fc:35:fa:48:
62:e2:94:fe:85:ba:e4:55:ff:32:a5:e9:be:2f:2a:b0:ee:b8:
41:62:74:13:fa:05:f1:4f:78:96:67:3b:28:7c:07:ed:b5:c0:
bf:2d:28:59:18:d4:6a:cd:9e:60:10:5c:99:7b:4c:95:3f:04:
77:ea:df:77:b3:5d:08:38:cc:4b:d7:c0:71:3a:47:84:77:65:
cf:d3:b8:5c:1e:7a:d5:0f:f9:50:da:2d:1c:4c:c8:75:e5:72:
5c:88:fd:d5:e3:49:c2:e1:72:0e:41:0c:92:b4:e4:2c:f3:0c:
ee:4a:5a:c6:fc:1b:08:2d:e2:cd:44:20:3e:00:2a:5d:99:96:
0b:3c:ca:cb:bd:9d:62:7b:56:98:b4:55:37:d2:5c:38:36:7c:
34:4a:46:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:14:13 2025 by rpki-client