Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32313a3a2f34382d3438203d3e20323632323837.roa
File: 326131333a393530303a32313a3a2f34382d3438203d3e20323632323837.roa (raw, json)
Hash identifier: tY3mQz4zgnJetufUgE8tG30BbTNxtyuT8z3/BvPsPbk=
Subject key identifier: 14:8A:47:BE:5F:95:09:E5:A9:9E:1A:79:20:93:11:E8:72:7E:0A:09
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3B714A5F2B48C085C4541A3068A9B2DF51A6507C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32313a3a2f34382d3438203d3e20323632323837.roa
Signing time: Fri 27 Dec 2024 09:28:18 +0000
ROA not before: Fri 27 Dec 2024 09:23:18 +0000
ROA not after: Fri 26 Dec 2025 09:28:18 +0000
asID: 262287
IP address blocks: 2a13:9500:21::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:71:4a:5f:2b:48:c0:85:c4:54:1a:30:68:a9:b2:df:51:a6:50:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 27 09:23:18 2024 GMT
Not After : Dec 26 09:28:18 2025 GMT
Subject: CN=148A47BE5F9509E5A99E1A79209311E8727E0A09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:93:6a:d8:7c:cf:7f:6c:d0:48:60:91:54:ed:
e9:4b:e2:e2:88:64:0b:91:79:75:63:69:09:ac:80:
0a:cc:39:3f:6a:42:cb:69:a3:ac:9e:90:24:49:7b:
55:f1:4e:ec:06:9a:4d:f1:ba:13:b3:a4:88:7b:f2:
0c:bf:9b:89:83:8b:9c:2e:13:bb:84:f4:6e:fa:1e:
53:5f:2e:27:7c:ab:e8:75:69:c1:c0:00:39:85:25:
1c:8f:e1:f2:47:58:c3:07:db:b8:1b:f8:91:15:b7:
84:58:d3:e7:92:45:00:dd:00:f0:10:aa:b1:4d:a4:
57:8f:09:33:73:22:6e:b7:c0:e6:02:2c:e6:ad:00:
e4:e6:49:e1:e7:88:e9:18:52:87:7f:b2:9c:85:f4:
96:6c:37:09:fa:fe:c9:0a:ed:68:18:61:1e:c5:10:
13:14:f3:ca:ef:1a:d7:6a:e7:dd:85:b9:e1:4d:5c:
2b:9a:c6:59:37:63:23:a6:80:15:a2:3e:00:70:18:
19:5a:d8:c8:0f:98:96:12:b9:47:22:f1:68:48:3b:
a1:f4:68:e8:5d:b2:6c:8b:f7:26:6a:ff:46:39:ab:
72:ca:67:ca:07:e1:1a:10:6b:12:c1:91:5b:17:6b:
1b:67:e0:72:97:ab:36:d5:a6:6b:78:57:71:4a:21:
1a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8A:47:BE:5F:95:09:E5:A9:9E:1A:79:20:93:11:E8:72:7E:0A:09
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32313a3a2f34382d3438203d3e20323632323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:21::/48
Signature Algorithm: sha256WithRSAEncryption
a5:d4:76:9b:d0:17:65:9c:bd:3d:7b:5c:a6:a7:dd:c0:14:2e:
c5:c8:f9:47:9f:db:05:81:91:d5:95:e6:5e:d1:a6:63:b0:56:
84:8d:5d:55:5d:ef:4e:d8:6d:e1:8c:25:92:ee:18:82:7a:dc:
ea:79:61:3d:56:2b:a6:3c:b0:f3:0a:9c:b9:67:07:84:86:84:
f3:a3:f6:a4:e5:40:86:3b:0d:f0:db:b3:10:78:36:f2:f2:a2:
11:7c:49:48:23:07:cf:27:d5:4b:a3:de:17:97:a1:da:e0:2c:
a2:fa:54:6b:a5:ae:05:cc:a2:43:b2:12:ff:d9:9a:2b:0c:af:
e8:0f:6b:27:1c:dd:71:82:13:f2:d3:07:db:78:b2:6e:a3:ec:
6d:ca:88:7f:a5:d8:ff:bc:7f:ac:a8:84:77:bb:b8:7f:60:20:
ec:99:77:af:76:70:0e:b8:df:33:9f:69:ae:65:8c:79:14:f1:
e4:2a:0d:62:b0:aa:6d:6c:c3:a7:bd:28:2b:55:ed:c4:fd:10:
f3:d5:7e:9c:35:b7:00:67:bc:b4:7c:0d:8d:1f:b9:e7:e3:48:
73:3b:24:46:94:ca:97:1a:74:8e:4f:94:a7:42:a9:01:5d:8a:
a3:c4:0d:7b:e2:db:43:43:6e:1b:be:67:e4:fa:7e:41:fa:07:
c1:50:ae:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:05:33 2025 by rpki-client