Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a323a3a2f34382d3438203d3e203230343733.roa
File: 326131333a393530303a323a3a2f34382d3438203d3e203230343733.roa (raw, json)
Hash identifier: WZhTHfdA6819Bgs10T74fZ9okR8iQxGZMOpEXDXoiDM=
Subject key identifier: B6:75:40:55:DA:2E:13:BF:61:08:9F:77:7E:52:74:57:0E:9E:E3:25
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4BDFBFA0138971A482E460FA3FBEA5A1309D96C7
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a323a3a2f34382d3438203d3e203230343733.roa
Signing time: Fri 27 Dec 2024 09:28:15 +0000
ROA not before: Fri 27 Dec 2024 09:23:15 +0000
ROA not after: Fri 26 Dec 2025 09:28:15 +0000
asID: 20473
IP address blocks: 2a13:9500:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:df:bf:a0:13:89:71:a4:82:e4:60:fa:3f:be:a5:a1:30:9d:96:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 27 09:23:15 2024 GMT
Not After : Dec 26 09:28:15 2025 GMT
Subject: CN=B6754055DA2E13BF61089F777E5274570E9EE325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dd:75:f7:f6:d7:ca:dc:23:c7:30:b4:19:8d:
d5:09:2e:7e:be:29:d2:4f:54:f1:d1:0b:4a:d7:90:
95:e2:1e:d6:5e:a3:45:9a:10:b7:4f:b9:0b:87:07:
35:7c:d0:1e:6a:96:24:f3:58:38:bf:72:77:58:71:
f2:72:26:66:f4:e0:40:65:a6:4b:c4:91:b2:b9:48:
64:3c:2b:ff:1c:05:8c:b3:50:b0:b1:3b:90:14:3a:
76:57:ea:93:79:0e:a6:27:d3:59:2c:69:c5:84:eb:
aa:54:35:b1:a0:e4:09:a5:70:b0:1d:aa:13:8c:62:
91:11:ef:d6:af:03:38:57:89:54:dd:1b:ab:a7:09:
ba:7f:3b:5d:42:21:ca:8c:30:04:fc:e1:ed:7b:1b:
20:64:ba:d2:49:5b:92:60:f0:69:93:68:22:74:30:
e2:b3:18:a5:98:f7:8d:9e:d5:6a:1e:fe:69:fb:28:
4b:68:78:ea:e4:f6:44:14:57:6a:67:d8:ee:d3:89:
a0:49:cd:d5:a0:e5:05:00:38:8a:17:1e:f7:8b:11:
a8:a1:a8:ff:b3:4c:d4:61:f6:47:1d:05:3f:19:bc:
eb:5d:6f:48:b0:cf:aa:d5:45:83:56:14:0b:b0:69:
78:a0:65:0f:93:ed:d5:55:c7:5b:a3:c6:39:a9:b1:
a5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:75:40:55:DA:2E:13:BF:61:08:9F:77:7E:52:74:57:0E:9E:E3:25
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a323a3a2f34382d3438203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:2::/48
Signature Algorithm: sha256WithRSAEncryption
a5:96:b5:5d:9c:20:45:b9:3d:c6:9e:fb:3d:c3:32:13:3d:5b:
02:64:4d:76:50:8a:3a:2e:74:af:0d:c5:64:be:7f:76:50:29:
68:9c:e1:64:3b:96:a6:d4:fa:cf:e5:63:0a:5d:e2:03:2b:08:
45:a0:82:2e:9f:39:c3:48:28:45:7c:aa:04:82:47:dd:4a:bb:
b1:d4:ac:0b:87:9e:a2:f4:a3:eb:d2:33:e7:7f:be:1c:65:02:
46:7e:47:d0:c8:b3:1d:23:ab:9b:9b:3a:8c:09:e1:6f:51:f8:
c3:2c:c0:47:a9:66:dc:5b:6a:bd:5c:af:ae:7e:a2:ef:b5:88:
5a:76:4e:74:f6:4f:da:6c:e1:3d:43:df:f1:4b:50:1e:e9:1b:
74:6b:bf:58:71:e7:68:a7:bc:45:6d:5e:90:c4:0d:a5:c3:e5:
e4:6a:a1:38:46:22:9f:cf:9f:6f:0c:a3:48:67:7d:fb:3d:56:
3e:05:a7:f2:4d:ce:7a:a7:f3:1a:3f:c5:5e:05:a5:af:5d:7f:
a0:5c:61:c1:fc:d6:f8:7f:75:15:96:53:0f:99:b0:63:4d:85:
ed:f6:40:3c:d9:ad:a9:c3:20:19:69:e1:18:0c:65:2f:a3:7d:
02:31:89:7c:93:53:4a:29:54:93:6b:c4:51:6d:e2:a0:a7:08:
50:3f:93:79
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUS9+/oBOJcaSC5GD6P76loTCdlscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNDEyMjcwOTIzMTVaFw0yNTEyMjYwOTI4MTVaMDMxMTAvBgNV
BAMTKEI2NzU0MDU1REEyRTEzQkY2MTA4OUY3NzdFNTI3NDU3MEU5RUUzMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV3XX39tfK3CPHMLQZjdUJLn6+
KdJPVPHRC0rXkJXiHtZeo0WaELdPuQuHBzV80B5qliTzWDi/cndYcfJyJmb04EBl
pkvEkbK5SGQ8K/8cBYyzULCxO5AUOnZX6pN5DqYn01ksacWE66pUNbGg5AmlcLAd
qhOMYpER79avAzhXiVTdG6unCbp/O11CIcqMMAT84e17GyBkutJJW5Jg8GmTaCJ0
MOKzGKWY942e1Woe/mn7KEtoeOrk9kQUV2pn2O7TiaBJzdWg5QUAOIoXHveLEaih
qP+zTNRh9kcdBT8ZvOtdb0iwz6rVRYNWFAuwaXigZQ+T7dVVx1ujxjmpsaW/AgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUtnVAVdouE79hCJ93flJ0Vw6e4yUwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYt
YjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWExYWY2LzAvMzI2MTMxMzMzYTM5MzUzMDMw
M2EzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAqE5UAAAIwDQYJKoZIhvcNAQELBQADggEBAKWWtV2cIEW5Pcae+z3DMhM9WwJk
TXZQijoudK8NxWS+f3ZQKWic4WQ7lqbU+s/lYwpd4gMrCEWggi6fOcNIKEV8qgSC
R91Ku7HUrAuHnqL0o+vSM+d/vhxlAkZ+R9DIsx0jq5ubOowJ4W9R+MMswEepZtxb
ar1cr65+ou+1iFp2TnT2T9ps4T1D3/FLUB7pG3Rrv1hx52invEVtXpDEDaXD5eRq
oThGIp/Pn28Mo0hnffs9Vj4Fp/JNznqn8xo/xV4Fpa9df6BcYcH81vh/dRWWUw+Z
sGNNhe32QDzZranDIBlp4RgMZS+jfQIxiXyTU0opVJNrxFFt4qCnCFA/k3k=
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:03:43 2025 by rpki-client