Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a31643a3a2f34382d3438203d3e20333936333536.roa
File: 326131333a393530303a31643a3a2f34382d3438203d3e20333936333536.roa (raw, json)
Hash identifier: JQrfHVNJOu2j1bNjRRAx0gjCQarSAo/j+ymjDJvxk2s=
Subject key identifier: E6:B9:83:B1:89:88:1D:EE:02:3D:D3:86:46:12:0D:AC:6F:F5:9F:39
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 12A0528794D017B2B1DE8DDA0494342DAF77D7E4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a31643a3a2f34382d3438203d3e20333936333536.roa
Signing time: Fri 27 Dec 2024 09:28:13 +0000
ROA not before: Fri 27 Dec 2024 09:23:13 +0000
ROA not after: Fri 26 Dec 2025 09:28:13 +0000
asID: 396356
IP address blocks: 2a13:9500:1d::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:a0:52:87:94:d0:17:b2:b1:de:8d:da:04:94:34:2d:af:77:d7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 27 09:23:13 2024 GMT
Not After : Dec 26 09:28:13 2025 GMT
Subject: CN=E6B983B189881DEE023DD38646120DAC6FF59F39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:1f:af:03:a9:9f:c6:ab:39:4a:50:1e:fd:
b8:73:e5:f8:31:c5:18:b4:b2:a1:23:a8:9e:d8:7c:
58:7f:d4:0a:5c:9d:00:42:6c:ac:4d:f7:b7:d1:6c:
fd:aa:97:41:52:a7:c5:34:13:5b:22:06:99:c1:c1:
b6:2e:9f:2b:a4:24:3f:27:ea:dc:09:75:17:a0:3d:
9d:e3:33:10:64:1e:22:e5:38:5a:41:ab:88:c4:ba:
44:da:05:d2:64:67:c6:96:16:00:f5:2f:c0:b9:89:
7c:3f:f3:f4:57:01:59:83:8c:1d:5a:dd:48:12:40:
62:db:1b:9a:a2:7f:37:6b:c3:59:be:51:82:1a:fa:
d8:43:bb:25:76:b4:67:e1:96:76:cd:1b:3d:8c:2b:
97:40:d3:c7:8c:c1:78:b7:4d:02:ae:ba:25:24:a4:
f8:40:b2:ee:38:d6:90:6f:64:2b:ff:5f:76:b7:97:
9f:aa:f6:ca:cd:3e:23:c1:b1:b7:48:af:aa:e7:d2:
c2:b3:23:4e:aa:a4:94:f4:f7:92:45:b6:b6:54:05:
6f:cd:7b:a6:05:72:45:ac:d7:7a:49:30:7a:29:da:
34:46:e7:05:3d:08:8b:ff:ba:f0:24:f7:5a:b9:b1:
9b:7c:8e:c3:77:dc:68:a9:75:61:b9:27:61:7e:ec:
b5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B9:83:B1:89:88:1D:EE:02:3D:D3:86:46:12:0D:AC:6F:F5:9F:39
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a31643a3a2f34382d3438203d3e20333936333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1d::/48
Signature Algorithm: sha256WithRSAEncryption
53:2d:ae:56:2e:84:c1:92:0f:a6:63:a5:dc:bb:a6:de:a5:dc:
02:a0:9b:ab:60:09:02:57:94:3c:63:83:9a:30:4e:57:7b:95:
61:10:8b:38:e5:d5:c8:78:21:9e:02:0d:c9:e9:51:c4:00:fa:
5d:bc:a7:4c:63:fb:c6:7c:ff:9a:ef:71:6c:f3:42:03:be:0e:
f1:7b:26:1a:eb:0e:aa:06:e1:5d:4f:aa:47:52:6d:3a:36:72:
fb:3a:23:00:22:21:87:9c:14:77:0a:e7:31:98:da:34:3d:52:
db:3b:94:2a:a1:74:66:2b:77:2d:68:dd:2c:26:f6:ca:d2:ec:
40:25:c8:54:7e:89:89:3c:30:74:be:46:83:2c:e4:3f:a9:f5:
06:8c:7d:11:e4:27:0e:be:5f:ac:12:fa:88:14:df:a7:45:59:
c3:af:cb:4e:8f:20:39:8c:c8:d0:86:bb:49:b5:12:a3:83:b7:
c7:aa:52:5a:cd:db:61:b3:30:32:e6:0f:07:9d:a1:a6:67:27:
7f:73:5a:20:c7:76:df:95:43:06:67:66:80:f4:49:de:18:23:
7a:ec:b5:18:91:20:45:e4:eb:02:cb:3f:a1:cb:35:cd:7f:b9:
a4:fa:25:a1:50:c4:af:ae:ca:bb:57:df:7f:e3:8c:c6:7d:d5:
44:7b:b8:a8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUEqBSh5TQF7Kx3o3aBJQ0La931+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNDEyMjcwOTIzMTNaFw0yNTEyMjYwOTI4MTNaMDMxMTAvBgNV
BAMTKEU2Qjk4M0IxODk4ODFERUUwMjNERDM4NjQ2MTIwREFDNkZGNTlGMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ax+vA6mfxqs5SlAe/bhz5fgx
xRi0sqEjqJ7YfFh/1ApcnQBCbKxN97fRbP2ql0FSp8U0E1siBpnBwbYunyukJD8n
6twJdRegPZ3jMxBkHiLlOFpBq4jEukTaBdJkZ8aWFgD1L8C5iXw/8/RXAVmDjB1a
3UgSQGLbG5qifzdrw1m+UYIa+thDuyV2tGfhlnbNGz2MK5dA08eMwXi3TQKuuiUk
pPhAsu441pBvZCv/X3a3l5+q9srNPiPBsbdIr6rn0sKzI06qpJT095JFtrZUBW/N
e6YFckWs13pJMHop2jRG5wU9CIv/uvAk91q5sZt8jsN33GipdWG5J2F+7LXPAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQU5rmDsYmIHe4CPdOGRhINrG/1nzkwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYt
YjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWExYWY2LzAvMzI2MTMxMzMzYTM5MzUzMDMw
M2EzMTY0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzMzNTM2LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKhOVAAAdMA0GCSqGSIb3DQEBCwUAA4IBAQBTLa5WLoTBkg+mY6Xcu6be
pdwCoJurYAkCV5Q8Y4OaME5Xe5VhEIs45dXIeCGeAg3J6VHEAPpdvKdMY/vGfP+a
73Fs80IDvg7xeyYa6w6qBuFdT6pHUm06NnL7OiMAIiGHnBR3CucxmNo0PVLbO5Qq
oXRmK3ctaN0sJvbK0uxAJchUfomJPDB0vkaDLOQ/qfUGjH0R5CcOvl+sEvqIFN+n
RVnDr8tOjyA5jMjQhrtJtRKjg7fHqlJazdthszAy5g8HnaGmZyd/c1ogx3bflUMG
Z2aA9EneGCN67LUYkSBF5OsCyz+hyzXNf7mk+iWhUMSvrsq7V99/44zGfdVEe7io
-----END CERTIFICATE-----
Generated at Fri Jun 6 22:15:18 2025 by rpki-client