Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/38322e32392e37352e302f32342d3234203d3e2039333034.roa
File: 38322e32392e37352e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: RtRjJa/8v6GHh6fpYzuBv2RRJZChqe642wkPM2b6UVA=
Subject key identifier: 1D:E6:80:41:EB:F8:BF:EE:28:CF:0C:09:4C:AD:64:5E:E5:FC:73:EA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 06F33A2364E371730462174D8E28F4FF54BBDF26
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/38322e32392e37352e302f32342d3234203d3e2039333034.roa
Signing time: Mon 30 Dec 2024 09:43:33 +0000
ROA not before: Mon 30 Dec 2024 09:38:33 +0000
ROA not after: Mon 29 Dec 2025 09:43:33 +0000
asID: 9304
IP address blocks: 82.29.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:f3:3a:23:64:e3:71:73:04:62:17:4d:8e:28:f4:ff:54:bb:df:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 30 09:38:33 2024 GMT
Not After : Dec 29 09:43:33 2025 GMT
Subject: CN=1DE68041EBF8BFEE28CF0C094CAD645EE5FC73EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7c:48:b4:6e:8f:e6:d0:eb:d0:82:e4:02:e2:
b0:54:be:0f:3e:74:1d:92:48:43:c7:57:9a:12:56:
35:b6:f8:60:a3:70:19:dc:4d:79:81:5a:75:30:d4:
27:60:72:c5:c6:a7:71:18:c9:42:37:99:58:e7:de:
7b:18:96:b3:c8:4f:77:40:1b:4f:88:84:2b:ab:2b:
ab:d5:9f:95:ad:31:71:2b:58:9b:1e:6e:8a:b7:e6:
1b:d7:ed:95:68:9e:b4:a9:0f:64:33:e5:4a:85:9f:
51:22:04:e3:b7:5e:67:8c:af:f7:97:65:51:e8:00:
c8:56:7e:a2:bc:2f:0c:fd:90:36:40:41:fd:fb:10:
d3:bf:38:5d:cf:70:cb:28:2b:de:bb:2a:98:bf:51:
08:1a:e7:02:30:c4:f8:f6:1a:1b:a1:7a:23:72:99:
80:b6:68:7d:67:43:59:03:93:4b:f7:89:de:d8:e2:
00:8c:63:30:14:82:6d:07:85:65:b9:69:0e:6a:87:
9c:50:45:28:af:8c:51:84:91:7c:a8:2e:7b:20:1d:
07:0a:7e:7a:40:4d:70:aa:f0:ea:00:b3:aa:86:fb:
e1:0d:4b:33:91:c8:9a:5d:c9:9f:8b:2a:ab:c1:ab:
46:a9:11:ea:45:e9:00:9a:da:f5:4c:0f:54:02:fc:
04:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E6:80:41:EB:F8:BF:EE:28:CF:0C:09:4C:AD:64:5E:E5:FC:73:EA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/38322e32392e37352e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.75.0/24
Signature Algorithm: sha256WithRSAEncryption
42:7f:a6:4b:4a:6d:e7:87:5e:86:ce:31:b4:38:ba:58:66:32:
66:52:5f:58:28:8d:d5:41:71:dd:57:cb:c7:0c:d4:bf:fc:08:
51:80:fb:37:69:29:17:85:c0:39:dc:99:d1:c6:fc:6a:39:4c:
06:e6:e7:7a:1a:77:d7:63:22:63:97:67:93:20:80:22:ae:a8:
72:e3:67:bb:57:91:07:eb:2c:c8:c5:88:8a:cf:04:e0:b5:72:
a8:7e:fa:94:ee:5c:3f:d8:63:ca:1e:60:e7:68:98:d7:1b:21:
a1:09:98:24:02:f5:3f:92:d2:f8:4a:f8:fd:66:c4:c8:b9:ed:
59:2c:4a:7b:d2:c1:03:0e:46:0f:af:32:f6:f5:e9:4d:c3:63:
eb:7c:16:74:ed:ff:c8:b3:a7:fa:a2:27:ff:93:68:a6:ed:14:
f1:3d:8c:30:c7:9d:1d:f6:58:10:a5:ec:61:25:d8:63:a9:71:
04:2b:8e:47:cf:e8:db:d3:f5:14:01:4f:da:32:cb:52:be:3d:
67:92:38:3c:de:f6:9f:a3:43:2d:7f:c5:dc:e4:1a:c4:44:3b:
eb:c2:88:63:37:72:99:2b:5d:c6:70:53:c8:b5:f1:7b:9a:e7:
3b:75:62:a1:78:be:4a:02:0b:c6:45:9e:49:13:12:65:7c:9c:
6d:b3:e7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:03:15 2025 by rpki-client