Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a31633a3a2f34382d3438203d3e20333936333536.roa
File: 326131333a393530303a31633a3a2f34382d3438203d3e20333936333536.roa (raw, json)
Hash identifier: XTk3/26MVua2y5leuULU5dERFjGxWqrGiZFxZtRlPpE=
Subject key identifier: C1:E5:94:81:CC:47:CC:D5:A1:6E:D6:10:95:99:2D:3A:5D:AC:24:FD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 16E779796959E80E27EAAC51FB304B53E62ADAC6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a31633a3a2f34382d3438203d3e20333936333536.roa
Signing time: Fri 27 Dec 2024 09:28:10 +0000
ROA not before: Fri 27 Dec 2024 09:23:10 +0000
ROA not after: Fri 26 Dec 2025 09:28:10 +0000
asID: 396356
IP address blocks: 2a13:9500:1c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:e7:79:79:69:59:e8:0e:27:ea:ac:51:fb:30:4b:53:e6:2a:da:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 27 09:23:10 2024 GMT
Not After : Dec 26 09:28:10 2025 GMT
Subject: CN=C1E59481CC47CCD5A16ED61095992D3A5DAC24FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:5f:4b:28:41:12:33:94:2e:62:f5:53:3c:
1d:48:81:3e:b9:1b:2b:f8:1d:cf:76:83:cd:a6:a2:
97:23:41:d1:25:cb:a1:f7:dd:51:b2:ec:58:ac:3b:
e5:1d:55:f5:27:dc:98:33:55:a7:4f:6c:a1:66:56:
b3:59:ed:8d:9a:06:4d:42:ad:42:98:97:54:4c:08:
33:25:a6:56:5e:30:b5:c2:55:1c:77:53:b3:c9:db:
63:4f:60:fa:ff:a2:83:5d:12:df:20:c1:ea:b9:f5:
7e:72:78:22:c9:15:b1:e8:dd:a5:df:96:f9:70:ce:
e8:11:66:80:46:51:ea:80:dd:b6:77:75:0a:1b:84:
6f:ea:f1:28:00:4f:b7:9d:01:28:1f:b4:c5:33:0e:
20:5d:9a:79:0f:c9:89:4a:ef:fb:14:c8:22:d4:ea:
b2:38:82:19:cc:4a:86:02:fd:74:7b:bd:25:00:8a:
70:c8:a5:f8:69:1e:cd:86:f4:09:7c:78:30:37:2e:
4d:93:b8:89:57:6b:f9:59:45:18:f3:55:9e:52:67:
cb:72:15:62:33:db:ce:22:32:f1:ec:f0:4d:71:8a:
20:13:b0:9f:ae:03:b6:06:89:35:61:a0:32:43:8f:
c1:71:f4:0f:2b:2a:f9:15:ea:11:77:e8:6b:b7:f7:
47:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E5:94:81:CC:47:CC:D5:A1:6E:D6:10:95:99:2D:3A:5D:AC:24:FD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a31633a3a2f34382d3438203d3e20333936333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1c::/48
Signature Algorithm: sha256WithRSAEncryption
96:b3:04:86:7c:48:a2:f6:ee:cf:98:48:b8:cf:ff:fc:52:ea:
6e:fb:49:5b:aa:73:94:09:ae:73:6a:4d:7f:f5:75:c2:f3:bb:
51:d3:c8:45:b2:8a:c8:60:aa:07:b1:31:49:11:77:4b:d8:59:
82:a4:46:ba:d0:78:ec:8f:c5:3f:6f:ce:d2:51:f5:13:08:73:
24:d4:10:8a:a8:7d:90:40:55:3d:ac:59:5c:4b:14:a7:ad:fa:
3c:23:6c:5b:5c:05:a3:9b:1a:89:30:1c:1a:4d:0c:61:7c:5c:
89:47:c9:86:6a:43:f5:66:1c:dc:45:a2:b4:05:46:d6:2d:0c:
64:46:e3:a0:a0:6b:9c:1d:b0:e9:a4:68:ce:04:3d:4b:a8:fb:
1e:c2:00:ee:a1:60:86:98:40:2a:a8:2a:f0:bb:cf:08:88:72:
46:8d:12:0a:e8:81:75:c4:1a:33:8e:b1:51:2c:bc:12:92:d5:
0c:17:2f:7e:d4:13:27:63:61:f4:3d:7b:69:57:af:1d:bc:d6:
7d:74:ab:f0:83:4a:14:50:a4:8a:cf:32:5d:f9:87:d7:75:84:
00:29:3f:0c:2b:18:da:e9:93:72:36:15:9d:80:96:78:af:ff:
5b:73:8f:d0:d8:d2:fc:bd:f0:28:2d:ca:c7:5d:67:e2:71:d8:
34:56:7e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:13:44 2025 by rpki-client