Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a663a3a2f34382d3438203d3e2039303039.roa
File: 326131333a393530303a663a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier: +Jc2z3Xp1v+skdFtXlXhpBJXUarldJbsvPwpoix6yMc=
Subject key identifier: 7B:BB:65:72:4D:1E:1F:62:B3:B9:4C:F1:88:34:3B:47:4D:7E:35:D0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6FF536A6B6333F1D90BFF5B886DDF69984998151
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a663a3a2f34382d3438203d3e2039303039.roa
Signing time: Fri 27 Dec 2024 09:28:11 +0000
ROA not before: Fri 27 Dec 2024 09:23:11 +0000
ROA not after: Fri 26 Dec 2025 09:28:11 +0000
asID: 9009
IP address blocks: 2a13:9500:f::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:f5:36:a6:b6:33:3f:1d:90:bf:f5:b8:86:dd:f6:99:84:99:81:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 27 09:23:11 2024 GMT
Not After : Dec 26 09:28:11 2025 GMT
Subject: CN=7BBB65724D1E1F62B3B94CF188343B474D7E35D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:33:f1:a4:b8:b5:6a:91:0d:5d:c1:34:6a:
a9:cd:75:8f:b2:91:00:b9:a0:af:dc:a7:71:01:2f:
f7:9a:d1:9b:b9:6e:cb:0f:48:b2:2a:ab:77:57:7c:
7f:af:18:a5:f0:de:a5:f5:2f:60:9c:84:9a:37:ac:
80:32:b8:b7:84:8d:2e:a2:06:ca:cd:90:73:1a:d4:
ea:8a:84:62:d9:cf:2a:04:6a:af:28:a4:91:18:85:
5f:21:c9:d8:76:02:72:c5:93:91:f8:87:ac:46:e8:
ed:1f:0d:96:ec:e5:38:a7:56:e4:9d:a1:a0:87:5c:
4c:c7:46:bf:a4:8f:3d:14:d4:76:21:ea:e5:e3:9b:
75:d1:8f:a3:66:d7:0e:76:39:52:7a:df:29:29:3d:
38:a3:b9:54:33:0f:6a:ef:c0:7c:2c:f1:cb:b2:d4:
e3:5a:39:9d:e5:8c:11:23:b5:8a:46:13:49:c9:b0:
ea:f3:d3:4a:76:db:56:d8:7f:bf:e6:2c:71:b0:a7:
56:87:00:90:a7:7b:cb:1b:0f:a7:0a:a7:e1:96:40:
49:ac:8d:fa:ab:e0:08:fe:f9:eb:49:39:f2:14:40:
35:b9:ac:08:ed:50:a4:0f:9c:63:1a:79:2d:3c:9d:
58:3e:fe:5a:09:e6:4e:7c:0c:0a:67:f1:ca:c7:ce:
57:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BB:65:72:4D:1E:1F:62:B3:B9:4C:F1:88:34:3B:47:4D:7E:35:D0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a663a3a2f34382d3438203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:f::/48
Signature Algorithm: sha256WithRSAEncryption
59:05:1f:25:b6:09:49:cf:03:c0:b4:7d:2e:06:08:60:2d:73:
e3:ee:52:a5:63:72:58:4c:eb:03:f1:af:30:9b:d6:0a:cd:66:
bf:94:85:f2:3c:2e:02:95:26:f4:32:2e:9f:a3:eb:42:b7:3e:
e8:7e:18:c7:20:a7:15:b7:e4:e8:db:f6:8c:9d:d1:4a:98:f8:
e1:d5:63:a5:84:f4:90:13:4d:49:9e:3e:17:2d:97:09:22:c0:
2c:3a:b6:03:46:bb:87:c9:c6:93:49:bf:80:6e:56:1a:10:39:
0f:03:ea:18:cb:0d:29:10:e0:bc:67:6d:b6:2c:64:11:14:fb:
1e:31:03:70:5a:73:f9:8a:bc:ad:17:98:88:f0:7f:58:2a:e4:
dd:e2:73:cd:6f:7a:e1:ae:f8:ed:1f:55:a8:c2:e3:f6:0f:2b:
de:0d:92:9b:ec:cc:44:6c:1f:72:30:ef:98:90:89:be:e2:e4:
c0:58:c2:d1:5c:3b:9e:4a:17:09:bb:7d:82:56:98:86:d3:ed:
f6:26:55:2b:a4:21:be:ea:cc:77:e7:8a:cf:d2:6a:ab:f2:0b:
d8:ac:b9:7f:69:ed:58:4a:16:ba:d2:d5:7b:e8:a4:90:7b:19:
fc:83:93:36:f8:5e:46:54:16:eb:fa:18:66:2d:d3:12:9a:60:
af:a6:ad:9f
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUb/U2prYzPx2Qv/W4ht32mYSZgVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNDEyMjcwOTIzMTFaFw0yNTEyMjYwOTI4MTFaMDMxMTAvBgNV
BAMTKDdCQkI2NTcyNEQxRTFGNjJCM0I5NENGMTg4MzQzQjQ3NEQ3RTM1RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ejPxpLi1apENXcE0aqnNdY+y
kQC5oK/cp3EBL/ea0Zu5bssPSLIqq3dXfH+vGKXw3qX1L2CchJo3rIAyuLeEjS6i
BsrNkHMa1OqKhGLZzyoEaq8opJEYhV8hydh2AnLFk5H4h6xG6O0fDZbs5TinVuSd
oaCHXEzHRr+kjz0U1HYh6uXjm3XRj6Nm1w52OVJ63ykpPTijuVQzD2rvwHws8cuy
1ONaOZ3ljBEjtYpGE0nJsOrz00p221bYf7/mLHGwp1aHAJCne8sbD6cKp+GWQEms
jfqr4Aj++etJOfIUQDW5rAjtUKQPnGMaeS08nVg+/loJ5k58DApn8crHzlfNAgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUe7tlck0eH2KzuUzxiDQ7R01+NdAwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYt
YjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWExYWY2LzAvMzI2MTMxMzMzYTM5MzUzMDMw
M2E2NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM5MzAzMDM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA
KhOVAAAPMA0GCSqGSIb3DQEBCwUAA4IBAQBZBR8ltglJzwPAtH0uBghgLXPj7lKl
Y3JYTOsD8a8wm9YKzWa/lIXyPC4ClSb0Mi6fo+tCtz7ofhjHIKcVt+To2/aMndFK
mPjh1WOlhPSQE01Jnj4XLZcJIsAsOrYDRruHycaTSb+AblYaEDkPA+oYyw0pEOC8
Z222LGQRFPseMQNwWnP5irytF5iI8H9YKuTd4nPNb3rhrvjtH1WowuP2DyveDZKb
7MxEbB9yMO+YkIm+4uTAWMLRXDueShcJu32CVpiG0+32JlUrpCG+6sx354rP0mqr
8gvYrLl/ae1YSha60tV76KSQexn8g5M2+F5GVBbr+hhmLdMSmmCvpq2f
-----END CERTIFICATE-----
Generated at Tue May 6 23:57:56 2025 by rpki-client