Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/38322e32392e3132382e302f31372d3234203d3e20383334.roa
File: 38322e32392e3132382e302f31372d3234203d3e20383334.roa (raw, json)
Hash identifier: ppwEM72CkEDhMG16B5Ad+BjK3qdH7BUiw21p1Beks+8=
Subject key identifier: D9:C9:2B:78:B5:EF:A8:22:5B:8D:74:2C:CD:6E:FB:1B:DD:07:92:9B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 70B5F6E02BDECA14E9F09F37319FBA70ABAD9A1F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/38322e32392e3132382e302f31372d3234203d3e20383334.roa
Signing time: Fri 27 Dec 2024 10:07:07 +0000
ROA not before: Fri 27 Dec 2024 10:02:07 +0000
ROA not after: Fri 26 Dec 2025 10:07:07 +0000
asID: 834
IP address blocks: 82.29.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Dec 2024 11:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:b5:f6:e0:2b:de:ca:14:e9:f0:9f:37:31:9f:ba:70:ab:ad:9a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 27 10:02:07 2024 GMT
Not After : Dec 26 10:07:07 2025 GMT
Subject: CN=D9C92B78B5EFA8225B8D742CCD6EFB1BDD07929B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c8:09:d4:0e:5e:02:07:a8:43:d2:d0:62:be:
04:6d:ab:f7:b3:6d:93:fd:07:af:61:d4:72:16:c6:
e3:8d:40:c1:70:40:c3:c5:45:39:2d:0c:a0:60:5d:
eb:cd:eb:52:ec:b7:30:41:0e:4f:b2:fa:c2:0b:fb:
42:60:ec:e4:fb:af:2a:4e:9c:61:86:c0:11:cb:ec:
86:c3:a2:c0:3c:83:94:b5:e2:7a:fe:82:93:d9:fd:
c8:19:01:18:ad:6c:c4:bf:58:39:43:b8:09:e8:81:
5e:43:22:18:ec:a7:08:e7:14:b3:b1:bf:13:e3:78:
0e:05:e4:fe:22:ce:29:36:42:d0:7f:5e:2b:ef:78:
c4:e1:e4:6c:54:12:9f:20:6f:6d:97:93:94:83:d9:
94:f2:73:49:f3:b1:65:6a:e2:12:21:8e:5e:7c:99:
7b:47:a4:5e:b3:e8:73:27:b6:5b:be:5e:a2:c4:55:
8a:4b:05:26:e9:ef:11:df:f3:96:d6:47:ff:fa:60:
7e:a1:5b:7e:23:26:15:40:d3:5f:9a:c6:9a:44:5e:
75:b3:09:cf:87:77:7f:5a:b0:4f:50:b1:09:94:7e:
f4:3a:0d:fb:f5:87:fc:d5:64:98:2f:14:a6:46:d5:
2b:63:72:e5:ae:6c:7d:41:d1:04:51:4f:3c:3a:c8:
0d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C9:2B:78:B5:EF:A8:22:5B:8D:74:2C:CD:6E:FB:1B:DD:07:92:9B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/38322e32392e3132382e302f31372d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.128.0/17
Signature Algorithm: sha256WithRSAEncryption
52:17:af:bc:62:4c:69:16:8d:c2:d5:6a:f5:e6:02:a5:dd:9a:
f9:08:39:90:76:b7:43:48:64:0d:53:81:74:31:e3:78:66:fd:
ac:1e:06:3c:ba:7a:53:f2:20:e7:35:24:6d:6f:80:d0:0c:02:
7d:db:f4:c8:bc:67:a0:56:34:70:b0:d2:af:b4:07:0b:27:a7:
64:97:6b:ca:6f:b0:79:80:45:9a:1f:56:2a:aa:a6:ba:10:eb:
17:7d:13:1c:85:5e:1f:46:4d:20:bb:fa:08:5c:92:94:a8:13:
e2:28:03:40:1c:19:be:ef:ce:ea:25:b4:e3:cc:03:1b:8b:da:
62:47:bd:cd:c6:20:0c:95:6a:da:a1:db:58:1f:38:71:3f:3e:
90:7b:62:3e:b2:a2:08:15:14:4b:1b:1b:c3:e5:76:0b:df:cd:
01:24:0c:4f:80:76:47:e1:67:88:fe:e1:a6:b3:90:9c:5e:bd:
16:21:8d:a5:48:b1:d9:c6:c3:69:13:dc:75:26:75:d6:c4:c1:
79:c3:4e:aa:5a:cf:b7:20:ac:bf:97:71:5b:ce:03:09:ed:ff:
cd:45:ec:99:63:5c:ba:a3:b7:71:b8:0d:eb:02:e1:f3:e1:05:
7e:5f:b1:ff:af:a7:7e:23:9d:8b:4b:74:40:48:48:76:3b:45:
fe:54:d1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:43:07 2025 by rpki-client