Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa
File: 326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa (raw, json)
Hash identifier: dc8s5VXhlFDZTm3Tc0BkNSY8Nrr3+lEpuQBDMaWpXfY=
Subject key identifier: 95:34:17:69:13:52:71:82:2D:25:72:6D:18:7C:B7:84:C8:F7:D4:83
Certificate issuer: /CN=13DDCFA128DC141F076EB7B60F46359286489D55
Certificate serial: 195D3833768FB10F73AAC75033C209FD2E761C4F
Authority key identifier: 13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa
Signing time: Sat 03 May 2025 15:12:48 +0000
ROA not before: Sat 03 May 2025 15:07:48 +0000
ROA not after: Sat 02 May 2026 15:12:48 +0000
asID: 31898
IP address blocks: 2a0a:6040:a103::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 12 May 2025 02:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:5d:38:33:76:8f:b1:0f:73:aa:c7:50:33:c2:09:fd:2e:76:1c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13DDCFA128DC141F076EB7B60F46359286489D55
Validity
Not Before: May 3 15:07:48 2025 GMT
Not After : May 2 15:12:48 2026 GMT
Subject: CN=95341769135271822D25726D187CB784C8F7D483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:83:39:f5:e6:52:39:5b:d0:d5:27:0d:5e:2e:
2b:cc:ab:94:86:11:5e:2b:9d:d1:b1:fe:91:15:cb:
12:b6:3e:66:72:b4:5b:32:a5:4c:45:c8:e4:fe:8b:
91:b5:ac:a9:3f:e3:fc:03:be:41:34:db:68:9c:53:
02:85:f8:19:80:67:d3:2e:b5:55:9f:70:47:7c:ce:
85:7e:00:0a:a3:6b:7e:31:d8:fc:76:1a:14:b1:fa:
65:82:21:7e:53:7e:47:88:70:bf:42:33:5e:80:ca:
53:bf:40:e2:79:9f:22:c9:aa:86:9b:4d:9a:69:e0:
44:81:d6:0b:af:fc:bf:48:e2:4d:36:04:19:8e:3c:
9f:9e:eb:2e:23:3e:c4:47:d6:82:bc:8d:f2:70:24:
81:3f:41:f2:63:b1:2d:e1:ad:24:8e:0f:82:05:7a:
36:24:19:a2:21:9d:5b:1a:76:6a:7e:a0:07:a6:30:
68:33:3a:0d:6e:80:f0:41:46:4d:a6:0f:54:9b:56:
11:ca:e9:e5:74:96:17:9a:2b:38:6e:88:4b:28:ae:
da:53:17:b8:32:bb:b1:5f:be:38:d3:18:04:f8:5a:
ac:64:12:55:4a:ec:3c:29:8d:e2:5c:be:ac:87:74:
26:2a:95:7d:be:52:27:be:03:c1:2a:8c:0b:f7:f9:
41:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:34:17:69:13:52:71:82:2D:25:72:6D:18:7C:B7:84:C8:F7:D4:83
X509v3 Authority Key Identifier:
keyid:13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:a103::/48
Signature Algorithm: sha256WithRSAEncryption
93:2a:4e:8b:e9:ed:fb:c5:3f:76:f6:d9:b2:68:59:95:7a:0f:
fa:e7:91:1d:f3:73:79:3c:f6:5f:b3:5d:2c:21:7b:f6:ea:ca:
2a:64:25:c9:2e:f2:a8:62:c2:cd:16:8c:ec:a0:6a:87:61:41:
b4:1a:cf:79:65:9c:f1:fe:8a:b5:8e:d1:f9:d7:37:88:55:88:
20:55:f0:b2:59:ae:3c:b1:07:b7:c4:5d:cc:3e:af:ee:f7:29:
64:e0:50:7f:52:d0:cc:e6:2c:5d:bd:2f:a2:c7:c5:35:f0:61:
df:fd:58:b2:bf:51:b0:9a:64:bd:4d:8b:6d:56:7b:e6:14:26:
bf:e2:8c:6b:75:17:66:fe:17:21:bd:6f:4c:6e:5c:9a:e4:70:
64:1a:07:ef:25:68:33:87:ed:17:d9:38:5b:9f:ec:d1:7c:11:
72:91:79:14:21:34:3b:f8:0a:a1:48:ca:28:da:20:8b:16:1d:
46:47:d1:a7:ad:08:7b:d6:2c:39:f8:ca:9b:eb:0c:9d:5a:af:
4c:9d:c3:cb:63:2b:f2:ce:32:2f:ab:e6:42:b1:7d:2e:71:e8:
15:ca:15:b2:a8:bb:bf:45:f8:9a:3f:a4:71:6c:c4:83:5d:13:
bc:75:15:7f:82:06:fc:d1:ec:f0:45:88:a8:e3:74:1b:61:d1:
db:07:40:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:37:58 2025 by rpki-client