Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS213489.roa
File: AS213489.roa (raw, json)
Hash identifier: a1lBXHuTx3mluHjokDlIzMUPF/0MEf5w0kBCytc/qgI=
Subject key identifier: 19:DE:F4:79:50:E7:FD:C1:DA:D8:66:A0:1E:FB:C7:00:65:FE:0F:76
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 3151E0FECB1E15F72F9FBF958CEC3C4DE36915C2
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS213489.roa
Signing time: Thu 13 Feb 2025 09:30:55 +0000
ROA not before: Thu 13 Feb 2025 09:25:55 +0000
ROA not after: Thu 12 Feb 2026 09:30:55 +0000
asID: 213489
IP address blocks: 217.18.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 10:51:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:51:e0:fe:cb:1e:15:f7:2f:9f:bf:95:8c:ec:3c:4d:e3:69:15:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Feb 13 09:25:55 2025 GMT
Not After : Feb 12 09:30:55 2026 GMT
Subject: CN=19DEF47950E7FDC1DAD866A01EFBC70065FE0F76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:ba:cd:2a:45:ec:24:ee:02:5f:75:c7:fd:
43:85:cc:aa:f1:86:52:d2:36:a3:b7:4c:9c:09:92:
9f:4c:f4:5d:ac:b7:69:cb:e0:66:bd:17:40:b1:ea:
5b:16:9d:2b:43:f2:c0:99:bb:dc:aa:26:ad:97:a6:
8e:93:f9:62:cc:ad:48:b1:54:20:0f:86:74:02:b5:
47:9f:07:60:cc:1a:c9:77:80:3c:10:5d:99:7c:6a:
33:9c:f8:76:15:95:00:2e:6e:4d:7b:a5:e5:b6:ca:
9c:58:c5:91:64:22:65:bb:3a:15:61:04:0d:f3:15:
8b:af:86:5c:62:cb:bb:b4:bd:b4:38:f6:9c:6b:02:
60:09:51:6a:82:d0:ca:33:d7:da:21:b6:9e:a1:4b:
a9:44:dc:46:c6:11:c4:a5:31:36:25:b8:7c:af:40:
53:5f:94:f7:3d:72:41:80:e4:19:96:77:23:1b:24:
a0:e4:c8:76:ab:d1:33:02:51:d8:bf:75:cf:79:d4:
4e:30:58:6b:17:23:c7:03:ba:b9:3c:52:60:2a:37:
5e:dc:a8:f4:20:db:4c:17:5f:6d:c2:e1:35:df:74:
00:59:86:a9:6c:46:e2:2e:b7:6c:68:21:02:2e:ea:
a8:a9:a2:c1:c6:9e:b8:6a:3e:cc:fc:5d:d3:ee:e3:
29:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DE:F4:79:50:E7:FD:C1:DA:D8:66:A0:1E:FB:C7:00:65:FE:0F:76
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS213489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.210.0/24
Signature Algorithm: sha256WithRSAEncryption
82:20:c8:16:31:f7:5c:ce:dd:df:e7:0d:34:df:82:84:23:15:
dc:47:ac:a4:8d:3e:14:64:77:a7:ee:19:3e:d4:cf:de:c8:e8:
44:d5:56:d4:e1:3d:cf:83:c8:ee:95:03:9d:ba:f8:24:8b:6e:
f1:a0:69:dc:19:cc:cd:4b:28:8d:a9:5a:30:a2:bc:f5:2b:e3:
63:42:74:d6:70:50:76:1b:1c:5c:99:cd:c5:7f:ab:95:16:8d:
f9:5f:fc:7d:12:cc:b7:25:c8:a6:15:ea:5c:e2:69:6f:4e:c4:
c1:a4:2e:ba:85:55:c9:11:7d:f7:da:16:b5:2d:f9:50:27:bf:
c3:b1:75:b4:d5:88:19:ed:b6:fa:c7:fa:0c:66:95:e4:95:b2:
56:cd:3a:b3:83:9d:cd:50:58:41:93:cb:f1:63:cb:a5:46:c6:
df:d6:77:7c:02:b6:52:9a:59:e3:d0:aa:a5:91:20:41:10:45:
f4:3c:1d:7f:2e:b1:d8:46:72:6d:86:c4:51:94:96:58:43:57:
f6:0f:cf:97:f7:28:37:c6:e1:cd:b1:2c:d4:d7:67:b3:fa:f7:
74:92:a0:ad:e7:00:82:0e:19:3f:4c:bc:4c:1b:44:a0:c8:9c:
e0:3e:ea:aa:63:71:d4:54:00:57:99:7e:72:3e:a1:fc:fc:a5:
78:56:94:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:43 2025 by rpki-client