Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/38322e32392e3132322e302f32342d3234203d3e203231383539.roa
File: 38322e32392e3132322e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: z/WafQ0XDRQ8D/4uw+hbMf4RbaY9VFpLWWvAarZ3kPk=
Subject key identifier: F3:A8:88:7B:EB:BD:DF:3C:D6:46:71:FA:57:AA:70:D8:01:E8:C9:D6
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 56D656F87D0E8AE8C95DE780AA590EA73823C2D8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/38322e32392e3132322e302f32342d3234203d3e203231383539.roa
Signing time: Tue 31 Dec 2024 04:12:57 +0000
ROA not before: Tue 31 Dec 2024 04:07:57 +0000
ROA not after: Tue 30 Dec 2025 04:12:57 +0000
asID: 21859
IP address blocks: 82.29.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:d6:56:f8:7d:0e:8a:e8:c9:5d:e7:80:aa:59:0e:a7:38:23:c2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 31 04:07:57 2024 GMT
Not After : Dec 30 04:12:57 2025 GMT
Subject: CN=F3A8887BEBBDDF3CD64671FA57AA70D801E8C9D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:53:4c:5e:e8:37:90:2c:90:f9:eb:ca:de:
49:2b:7a:25:16:3c:8a:7c:91:d3:e2:75:49:f6:b7:
08:6f:d2:20:5e:b6:13:c5:f8:c3:63:47:9e:5b:a1:
b0:b0:99:a2:a0:bc:b0:6f:88:28:f7:33:6a:39:dc:
d2:d1:07:60:f7:32:94:01:30:cb:9d:35:54:f3:ea:
f2:95:2b:90:4d:52:e1:da:3a:79:92:fd:c2:d1:df:
02:06:67:bf:11:73:a0:82:b3:ad:05:ca:fb:ec:58:
ec:d1:0e:62:88:e6:96:52:78:ba:ae:d0:43:88:24:
5e:c9:7d:86:94:ce:1e:1d:91:af:1f:ed:18:99:ea:
ed:6a:99:02:63:d6:bf:eb:f7:87:b2:1f:4e:36:4d:
02:23:7d:fc:9a:69:b7:42:04:d9:89:d8:4b:29:a2:
5d:dd:13:3a:b2:f6:3d:36:98:51:6f:4e:be:08:ef:
34:9e:b2:cb:83:23:df:14:ce:31:29:94:86:dc:73:
dc:a8:bb:00:54:39:ce:4e:8d:b6:fe:8c:20:78:1d:
19:88:f7:00:9c:a8:35:18:b7:f4:9e:b9:21:85:a9:
30:8e:24:8d:55:7b:11:ab:af:4b:76:b8:7b:f2:40:
c3:78:27:d4:19:12:2c:6e:98:e3:2f:02:7b:14:12:
83:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A8:88:7B:EB:BD:DF:3C:D6:46:71:FA:57:AA:70:D8:01:E8:C9:D6
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/38322e32392e3132322e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.122.0/24
Signature Algorithm: sha256WithRSAEncryption
53:c7:47:a5:b5:0d:40:2b:ab:c9:3e:ae:c9:f4:0c:23:09:52:
e8:a8:ab:b4:88:25:d0:1a:8f:57:65:c3:5a:7e:26:ae:b7:d1:
14:bc:18:6c:5d:04:75:b0:0e:b8:13:f7:52:62:82:6a:0c:6f:
a5:90:8f:aa:2a:ce:ed:10:18:bc:be:f6:c8:c6:04:0a:01:cf:
c1:6f:0b:03:62:25:18:bf:3f:e2:c5:1e:fe:ee:8f:91:3e:49:
fe:f1:59:63:a9:45:35:d6:cd:3a:a0:5f:b1:60:7d:70:e5:9a:
71:ed:7d:93:b9:38:13:86:25:02:78:78:3d:81:4d:c2:97:0f:
56:af:d6:17:7b:da:9d:74:b8:7f:cc:5a:f9:65:91:42:36:f1:
8f:25:d7:ce:29:d2:41:a3:46:b3:51:27:12:e5:f7:fb:ae:10:
c8:cb:98:5a:e7:1f:4c:35:3f:4f:0b:7a:59:96:79:a4:13:de:
79:ed:13:f6:67:2f:18:67:71:e5:00:d7:50:39:97:40:e0:bb:
99:60:72:71:29:6b:40:96:3e:e5:59:72:10:28:21:32:fd:29:
d4:d1:11:af:1c:4d:cd:46:5d:e9:61:02:1b:55:bc:95:fa:e2:
43:58:ff:5f:5a:5d:a5:7c:42:16:af:c2:ef:31:df:47:4b:41:
ff:f7:13:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:15:14 2025 by rpki-client