Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/38322e32392e3131352e302f32342d3234203d3e203231383539.roa
File: 38322e32392e3131352e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: d6yW9SJm+l+bX9dE2SlfdlFrtGwmq6LnU133MAGUIM0=
Subject key identifier: 62:79:32:32:ED:B2:EC:6B:94:CC:20:2B:73:B4:4B:53:CA:8F:22:6F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4C1578438EB105044D7EC0B0B4513638C21FEE2B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/38322e32392e3131352e302f32342d3234203d3e203231383539.roa
Signing time: Tue 31 Dec 2024 04:12:57 +0000
ROA not before: Tue 31 Dec 2024 04:07:57 +0000
ROA not after: Tue 30 Dec 2025 04:12:57 +0000
asID: 21859
IP address blocks: 82.29.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:15:78:43:8e:b1:05:04:4d:7e:c0:b0:b4:51:36:38:c2:1f:ee:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 31 04:07:57 2024 GMT
Not After : Dec 30 04:12:57 2025 GMT
Subject: CN=62793232EDB2EC6B94CC202B73B44B53CA8F226F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:59:e8:e7:c2:82:dc:6a:0a:1d:a8:9b:5f:
ed:00:50:e7:66:09:13:3b:30:89:6f:4c:b5:a4:ca:
e4:9a:ee:89:6a:03:52:02:89:8f:13:ba:2a:ad:08:
d5:32:7e:3f:dd:28:0d:4e:da:52:bf:7b:67:bf:bb:
be:b4:36:c5:ff:cd:a4:e6:c7:a4:9a:19:78:b0:59:
10:7b:75:69:bf:b0:b8:4b:f1:d9:43:06:9c:43:4d:
71:2d:89:82:af:71:1f:37:f6:f1:c5:8d:c6:a1:a3:
21:d4:62:06:9b:92:19:23:54:4d:27:68:be:95:2c:
c6:b4:02:3c:7d:d9:6b:80:6a:e4:07:b1:a1:13:70:
4d:c8:16:08:a3:6d:1d:84:8f:03:a2:df:c4:dc:ea:
99:53:41:bb:46:c2:ed:db:b5:38:b5:5e:2a:70:32:
31:1b:3b:cb:f6:23:e7:aa:fc:80:ac:33:99:8c:55:
fa:71:15:fc:93:8d:40:ee:43:77:15:de:5c:af:a5:
c9:46:6f:9d:b0:69:3c:c5:f2:a4:67:d2:c2:78:c9:
23:90:b6:38:2e:1c:74:f8:b4:af:5e:c0:77:b8:2f:
41:8e:f1:4b:07:52:97:af:4f:13:61:e6:f2:46:8a:
e4:a2:35:19:2a:46:81:53:0e:58:e6:e3:71:6e:51:
1c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:79:32:32:ED:B2:EC:6B:94:CC:20:2B:73:B4:4B:53:CA:8F:22:6F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/38322e32392e3131352e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.115.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:36:79:80:50:1e:3d:d9:65:73:35:c2:bf:21:8c:8b:b5:0c:
98:ec:6a:81:d5:29:11:09:e4:44:cb:35:00:76:4a:9b:ac:0e:
28:22:9c:ed:bd:cd:a2:e2:2a:5d:6f:06:e2:48:95:b7:18:99:
86:4b:0d:05:cb:a4:4d:66:89:ca:af:18:9a:96:98:27:41:13:
0d:ca:13:92:d7:0c:e7:13:42:43:f4:c0:04:ed:5d:fe:d6:44:
18:4c:54:c1:50:60:25:2a:d5:11:1a:d7:57:9a:3a:73:e0:27:
73:e2:cd:29:3e:49:75:57:a6:44:fd:0e:4e:3d:1f:ac:27:ec:
1d:d3:33:56:7c:15:ec:95:b7:15:89:74:77:b1:a6:23:d1:b0:
c7:44:d9:fa:05:a8:c8:38:24:ee:80:79:3e:dc:24:67:42:a6:
9e:23:91:07:2d:da:ea:42:4a:42:d9:06:26:ef:4d:47:f9:5e:
b9:01:94:c5:66:77:af:ce:b9:99:55:1b:a0:94:dd:39:b9:e4:
e1:2b:2e:64:5c:75:b3:34:ad:29:61:44:93:0a:ec:d5:34:d0:
f2:ae:82:0d:7e:41:1d:23:bb:fe:8b:c6:7c:44:ec:20:19:1c:
87:97:59:f0:66:ee:f7:2c:f4:0e:d0:da:45:a6:a5:df:39:d4:
26:79:ce:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:22:05 2025 by rpki-client