Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a633a3a2f34382d3438203d3e203239383032.roa
File: 326131333a393530303a633a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier: eiQpTsHS6m7GwhLUlJ9feNw4Km40PznIrHeKr8gbD8E=
Subject key identifier: 61:38:89:F6:8B:50:B3:29:A2:EC:5D:6F:0B:A3:44:34:F4:C5:EC:AE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6FE73155C1D4DA14749304F0066446EA49F1A527
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a633a3a2f34382d3438203d3e203239383032.roa
Signing time: Fri 27 Dec 2024 09:28:15 +0000
ROA not before: Fri 27 Dec 2024 09:23:15 +0000
ROA not after: Fri 26 Dec 2025 09:28:15 +0000
asID: 29802
IP address blocks: 2a13:9500:c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:e7:31:55:c1:d4:da:14:74:93:04:f0:06:64:46:ea:49:f1:a5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 27 09:23:15 2024 GMT
Not After : Dec 26 09:28:15 2025 GMT
Subject: CN=613889F68B50B329A2EC5D6F0BA34434F4C5ECAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:de:c1:2f:a6:4f:ba:75:7e:34:67:f5:df:58:
31:92:79:b5:a5:dd:16:59:36:be:05:bf:96:c9:dd:
b1:75:e9:eb:2a:4c:1e:e1:4e:b0:4e:52:c9:6c:f6:
d8:2c:a3:a4:57:80:7e:cd:a7:26:67:52:e4:74:07:
79:7e:51:0e:fb:07:67:25:75:67:fb:58:76:ba:83:
16:d1:4b:0f:c9:0c:f0:10:f5:b6:65:f5:44:ea:66:
eb:c4:8d:8e:51:ec:1a:a0:d0:9a:8b:fb:4c:06:6a:
72:a3:f7:1f:0b:44:a4:19:51:50:82:98:5b:ad:7d:
dc:7f:90:42:8d:3c:8f:c9:3e:50:86:a4:33:15:aa:
4b:ed:ee:54:33:1d:f2:2e:a0:c3:80:42:f4:56:62:
57:9a:11:26:c4:38:b0:2d:f4:a0:26:5a:39:a1:a4:
4e:62:02:cb:8e:30:4d:0a:b6:2e:e6:cc:60:0c:0b:
42:8a:89:c6:2e:bf:0e:b4:26:38:fd:79:31:37:2e:
49:57:35:67:26:9a:1b:42:50:43:47:a0:fe:67:37:
a5:11:8f:12:2a:46:ee:58:ee:6f:8c:a5:4e:5b:40:
5d:42:49:85:22:17:82:c1:8a:e8:a5:59:a9:f6:d3:
1b:99:12:af:14:1a:89:96:92:74:10:72:a0:77:7c:
18:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:38:89:F6:8B:50:B3:29:A2:EC:5D:6F:0B:A3:44:34:F4:C5:EC:AE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a633a3a2f34382d3438203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:c::/48
Signature Algorithm: sha256WithRSAEncryption
80:b7:7b:61:e9:f5:f3:ac:d6:e5:33:cf:38:2f:d0:1d:e7:e7:
4e:3c:c1:b4:bd:03:0f:a5:bc:df:de:10:4a:6e:26:fa:2a:f8:
1e:29:6e:ad:2c:59:af:d7:21:05:fc:b8:77:62:17:f3:d2:29:
bc:c3:1d:ea:dd:ce:bd:05:f9:65:e3:d4:17:6c:b3:08:78:dc:
99:eb:35:a8:4c:7f:ac:cf:3d:23:8e:73:c4:5c:7d:56:7c:38:
9a:40:f4:63:b9:a3:4a:b1:81:61:31:29:f1:f9:c1:cb:7d:7c:
a2:23:3f:6e:08:39:3d:b6:e8:06:f0:1e:30:cb:d3:c7:47:65:
59:86:72:42:67:df:b6:29:21:31:ad:da:dc:31:02:45:1b:62:
99:ef:e2:37:5f:11:81:d7:53:a7:dc:7a:8f:28:63:f8:9d:6c:
4a:0a:be:f7:2a:2d:e6:f4:ea:14:6e:43:0a:55:7b:9d:79:c9:
f7:d7:84:15:0c:65:ff:92:82:92:88:3d:95:a5:f2:25:a5:2e:
73:a1:fb:84:2a:ad:b2:b2:0a:c5:51:b1:b6:d3:90:0b:8d:71:
2e:a1:30:3b:06:08:0d:67:bb:c6:bf:73:a6:bc:1c:05:95:39:
cd:ca:5b:60:e1:a1:3e:29:26:40:14:d2:86:c9:db:55:2a:20:
2a:ff:bd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:40:42 2025 by rpki-client