Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/38322e32392e302e302f31372d3234203d3e20383334.roa
File: 38322e32392e302e302f31372d3234203d3e20383334.roa (raw, json)
Hash identifier: 2X/Ui08U28r6LguuiFtly/AA6VoopFh7sCxG/erTk1Y=
Subject key identifier: 5A:5E:2B:67:7F:67:59:39:C2:13:48:D1:AE:E4:A7:07:0F:2F:D1:4E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7E3FAC9305595C5A298F1A91FE701395D3AEAC8A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/38322e32392e302e302f31372d3234203d3e20383334.roa
Signing time: Fri 27 Dec 2024 10:06:57 +0000
ROA not before: Fri 27 Dec 2024 10:01:57 +0000
ROA not after: Fri 26 Dec 2025 10:06:57 +0000
asID: 834
IP address blocks: 82.29.0.0/17 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Dec 2024 11:22:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:3f:ac:93:05:59:5c:5a:29:8f:1a:91:fe:70:13:95:d3:ae:ac:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 27 10:01:57 2024 GMT
Not After : Dec 26 10:06:57 2025 GMT
Subject: CN=5A5E2B677F675939C21348D1AEE4A7070F2FD14E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:1e:85:1d:6f:19:33:08:2c:96:3b:35:25:
3f:47:54:62:39:bd:2b:b0:c5:74:59:17:be:7c:2a:
d9:10:72:81:d5:5c:f1:74:db:c6:23:df:6a:82:d3:
2b:2e:6f:e0:9e:7f:e7:07:85:48:02:99:b2:de:55:
28:f6:bc:38:50:04:63:9e:d0:d7:48:31:13:48:1f:
e2:4d:3e:b9:8d:2a:04:c5:f7:6c:f3:95:76:cc:d9:
2d:88:87:dd:87:ea:b4:e9:38:83:6c:9a:4d:7e:b1:
4a:fe:f3:eb:83:9b:2d:3f:79:91:4a:00:b8:44:1e:
f5:64:a8:b6:2f:08:83:c9:b2:25:03:3c:77:01:e5:
57:7d:82:9f:6b:38:c0:93:90:55:32:51:0f:74:02:
ba:dc:05:50:a4:43:93:c1:70:ea:6c:88:26:ae:d5:
c8:27:7b:3e:6c:7f:59:bc:a6:31:6f:12:04:31:de:
da:4c:9e:ed:a8:47:ca:77:b6:da:dc:2b:99:a1:ad:
b3:f6:5f:e6:ef:b1:59:db:d7:bf:de:b3:7b:9f:f7:
28:c7:f0:da:1c:c0:fd:b4:35:28:7f:25:64:65:ff:
fc:e9:26:66:d2:78:61:00:3d:76:00:0c:cc:86:3e:
52:01:08:f1:05:5d:c7:69:65:6c:9d:83:87:02:3b:
2d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5E:2B:67:7F:67:59:39:C2:13:48:D1:AE:E4:A7:07:0F:2F:D1:4E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/38322e32392e302e302f31372d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.0.0/17
Signature Algorithm: sha256WithRSAEncryption
46:7a:98:5f:98:25:b9:fd:9c:c7:de:9a:b6:8a:25:66:a1:30:
1c:4b:39:0f:f9:93:6b:c1:ea:d7:89:41:20:68:d9:32:60:52:
3d:fd:ac:b5:c6:00:e5:1e:bb:b8:e0:cc:11:9d:bd:19:34:63:
05:5a:37:4a:c0:08:20:6e:0d:20:e9:4e:6e:6a:0d:e0:78:af:
6f:8e:34:26:dc:4c:23:85:76:8f:3e:5d:01:05:2f:37:6a:d2:
2e:dc:ab:29:60:f3:84:62:68:7b:d5:ed:98:8a:df:01:9d:62:
01:06:c5:20:15:95:5f:65:49:96:ea:15:16:de:f7:7e:5b:d7:
e4:aa:32:61:35:7e:28:71:c8:64:f0:0e:ba:76:e8:ba:d6:16:
52:34:6a:93:46:35:d3:fa:3c:5e:f1:51:4a:0c:3f:3e:8b:c4:
a3:6b:ad:c0:b8:72:d0:3b:ce:c7:92:a4:44:9a:da:59:0c:77:
d0:26:22:61:81:07:8d:61:0e:61:0e:b2:9a:04:97:5b:03:10:
a6:79:3e:d1:13:3b:ee:66:19:29:ee:15:e3:f9:84:e3:79:dd:
a7:86:1e:1c:f2:23:51:02:38:d4:9d:b9:63:34:47:06:b2:4c:
2a:78:27:60:05:c1:d4:38:2b:86:d4:c0:e8:8e:1b:b4:cd:0c:
9c:96:04:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:15:35 2025 by rpki-client