Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a31303a3a2f34382d3438203d3e203239383032.roa
File: 326131333a393530303a31303a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier: OYK7tRL1fZbQhIJZ6JQNG7AiX+C0hm2cJzNT8nL90cc=
Subject key identifier: 75:58:94:08:9A:D7:1B:D4:17:0D:C5:0B:09:F2:9C:DE:39:BB:2D:07
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7B35779C4DC7EAC2363C6E1A869CB8E41D214E70
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a31303a3a2f34382d3438203d3e203239383032.roa
Signing time: Fri 27 Dec 2024 09:28:13 +0000
ROA not before: Fri 27 Dec 2024 09:23:13 +0000
ROA not after: Fri 26 Dec 2025 09:28:13 +0000
asID: 29802
IP address blocks: 2a13:9500:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:35:77:9c:4d:c7:ea:c2:36:3c:6e:1a:86:9c:b8:e4:1d:21:4e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 27 09:23:13 2024 GMT
Not After : Dec 26 09:28:13 2025 GMT
Subject: CN=755894089AD71BD4170DC50B09F29CDE39BB2D07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:7d:6a:dc:6f:13:f2:d3:67:f2:02:27:40:
2c:85:c3:9e:16:fa:9c:78:d1:b5:ad:7e:00:b6:4f:
2d:e3:6c:ec:5c:74:85:f3:50:28:1a:9f:69:2c:da:
ce:d4:54:75:a6:c0:3a:30:cd:37:51:81:d0:39:2c:
c1:46:5e:2f:78:47:98:53:22:44:6d:94:71:61:f3:
14:5f:89:53:a1:6a:e0:a3:18:96:7c:fd:85:88:ee:
d1:9f:d2:eb:47:af:52:66:e7:14:fb:6c:9c:90:27:
b1:fc:07:cf:76:c9:a7:b5:be:8e:80:1b:26:1b:83:
7d:c5:ed:45:bb:0a:9f:46:ef:6e:8a:84:4d:a1:49:
40:34:80:23:be:db:65:b5:b0:d6:62:ea:eb:a0:2b:
51:67:f1:de:89:1c:a0:7b:9c:1a:1a:80:a0:d1:53:
e3:6e:62:0e:25:44:72:ee:9b:e7:bf:64:8f:c0:15:
6e:4a:a7:d3:22:7b:96:21:26:96:41:b8:7f:ab:d9:
10:c2:54:1b:c8:44:4d:a7:f4:fe:30:c1:42:90:39:
01:50:47:67:f6:92:d1:26:67:81:70:02:fb:7e:c1:
a2:b9:ba:d7:30:21:92:6f:51:cb:37:18:43:fa:69:
9b:54:8d:c9:21:c1:07:95:f1:bb:3a:58:39:c9:5d:
d2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:58:94:08:9A:D7:1B:D4:17:0D:C5:0B:09:F2:9C:DE:39:BB:2D:07
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a31303a3a2f34382d3438203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:10::/48
Signature Algorithm: sha256WithRSAEncryption
81:6e:e0:f5:f3:87:da:1e:b6:44:01:6c:bf:9b:37:f9:30:dc:
1c:90:29:d3:dc:38:5b:2b:df:5f:94:dd:13:fa:06:05:b7:84:
01:48:cb:6f:99:ad:f1:db:c3:12:0b:5b:c0:c0:bb:f9:49:88:
fb:d9:86:4d:1a:a2:1e:c1:16:77:ec:36:dd:87:e3:3a:9a:4c:
3f:14:b2:c1:6f:04:07:25:2a:91:ea:5c:ee:5c:e9:ee:e4:3d:
58:c7:69:79:b8:bf:7f:d1:d9:67:cd:ce:71:55:b5:9b:31:a1:
48:a4:40:b9:ad:a0:5f:89:34:b8:55:c2:21:28:ea:32:06:4b:
9b:1e:39:a9:38:d0:a6:60:1c:0b:54:d7:a5:94:dd:72:ad:a7:
37:59:49:c7:e1:4d:de:11:ff:eb:1a:02:90:36:32:3d:bb:76:
31:85:39:a4:47:c6:91:f9:37:49:98:4c:16:41:07:70:87:57:
04:9e:34:74:d1:2e:0c:04:61:4c:c4:fa:fb:1a:f8:d5:7b:8c:
f1:9e:d8:6b:f7:43:d0:43:cd:43:47:1e:95:6c:e0:6d:86:53:
90:d8:44:d3:09:c4:5f:6d:fe:e0:d4:58:a7:f1:6e:ae:ea:5d:
10:8f:5e:9a:e5:22:d1:c2:04:79:99:84:67:ad:71:92:81:cf:
25:ea:ef:49
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 6 22:15:14 2025 by rpki-client