Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/38322e32392e3132312e302f32342d3234203d3e2033333230.roa
File: 38322e32392e3132312e302f32342d3234203d3e2033333230.roa (raw, json)
Hash identifier: bQPFwgyTpY0pE5OBwJnramyyVnwij23hmqrn4IJY3Ck=
Subject key identifier: DF:B2:9F:30:63:73:57:C2:37:0D:27:52:BF:67:19:C4:16:6F:7E:B9
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2773EDDC4A786E4A272186B3AF984C771D3956A2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/38322e32392e3132312e302f32342d3234203d3e2033333230.roa
Signing time: Tue 31 Dec 2024 19:28:10 +0000
ROA not before: Tue 31 Dec 2024 19:23:10 +0000
ROA not after: Tue 30 Dec 2025 19:28:10 +0000
asID: 3320
IP address blocks: 82.29.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:73:ed:dc:4a:78:6e:4a:27:21:86:b3:af:98:4c:77:1d:39:56:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 31 19:23:10 2024 GMT
Not After : Dec 30 19:28:10 2025 GMT
Subject: CN=DFB29F30637357C2370D2752BF6719C4166F7EB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:1c:be:5f:8d:42:0c:54:53:db:98:2d:84:
0e:68:d9:98:a5:17:69:41:27:65:65:0d:c6:45:e6:
13:d9:2f:af:b1:d3:82:c9:64:37:ec:6c:7a:5f:d7:
dc:54:d3:91:a0:31:d9:d6:d3:d5:61:01:2a:d4:9e:
28:f6:e5:6f:2b:32:5c:b7:5d:d7:cc:6a:4a:8f:0b:
d2:72:bf:a2:84:db:ca:76:1f:13:c5:9f:3f:2d:b1:
f8:59:4b:dd:d0:a6:10:21:b9:16:29:f0:50:aa:91:
6d:56:a9:33:47:ea:0c:b4:af:a3:89:f9:bc:a3:0a:
4f:00:9a:a6:ed:56:e4:d6:59:74:92:6b:82:bf:b1:
14:e8:54:7f:e6:31:71:f3:d6:78:99:9a:0d:7d:c4:
d1:20:f4:a4:03:ca:9b:5d:b3:5d:77:ec:40:23:10:
e6:f6:c0:7d:f8:fb:6c:bf:98:63:2a:95:68:be:00:
22:73:36:4f:d6:2a:ff:aa:ad:9b:ad:8f:1e:a5:e6:
21:ab:88:45:78:90:af:33:32:fd:6a:a1:55:67:cf:
7c:f0:41:f4:0a:c3:0e:22:6a:2e:78:69:18:cd:dd:
43:38:cf:03:f8:2f:a4:dd:c6:33:34:ee:99:38:c6:
57:6d:d6:f4:91:95:03:df:dc:a2:d5:d1:90:2d:01:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B2:9F:30:63:73:57:C2:37:0D:27:52:BF:67:19:C4:16:6F:7E:B9
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/38322e32392e3132312e302f32342d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.121.0/24
Signature Algorithm: sha256WithRSAEncryption
47:7c:1e:2c:54:b0:bb:c7:28:8b:4d:3d:05:64:7e:46:96:c8:
d9:9c:ea:e4:cb:96:b5:0b:14:7e:59:b3:b8:04:74:74:19:31:
44:af:2b:cf:65:5a:98:23:65:8e:97:fa:ba:75:07:12:ff:ff:
bf:0f:dd:4b:1b:62:90:27:1c:1a:c4:15:35:16:6d:75:87:0c:
bc:a2:c4:0c:17:8f:f6:06:b9:1d:6c:50:e4:44:12:44:44:60:
7a:8b:a1:46:03:33:c5:84:8f:62:00:eb:01:3b:0e:34:10:6c:
43:8e:ca:67:f4:4c:a8:ac:58:43:61:c5:e0:13:aa:5f:33:70:
20:88:3b:a3:23:29:ed:f1:74:df:2f:6c:9e:55:99:34:cf:7e:
80:d6:bd:ef:fb:ab:eb:38:5c:45:82:c6:8c:a0:61:52:b8:c0:
1d:a0:9c:5d:28:d4:b2:1a:e1:01:42:4a:fc:e3:a9:69:7c:11:
b7:31:f7:0d:fe:43:22:d2:0b:78:99:3e:01:77:19:2f:7d:44:
86:bf:51:8f:f2:61:6d:3e:5a:65:3d:b0:f8:91:0b:d6:39:19:
d6:62:87:f1:bc:3a:7e:fb:f8:72:f9:3a:c8:e2:ac:dd:e8:d0:
ad:50:32:a2:45:ec:ed:eb:2c:4d:f5:e0:c7:3b:63:d5:d6:e2:
b5:18:6c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 12:28:09 2025 by rpki-client