Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/38322e32392e3132362e302f32342d3234203d3e203634323637.roa
File: 38322e32392e3132362e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier: npKgCoe786gjtU82QS2PK9aXP0SC1ExhJoHBBxCJlNE=
Subject key identifier: 71:5A:4E:36:FC:90:82:7E:DC:4F:11:EA:55:E2:54:E3:9F:9A:3F:5B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3DF8FDB13F34734B410721AAD76197F3EB4C4405
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/38322e32392e3132362e302f32342d3234203d3e203634323637.roa
Signing time: Mon 30 Dec 2024 08:09:17 +0000
ROA not before: Mon 30 Dec 2024 08:04:17 +0000
ROA not after: Mon 29 Dec 2025 08:09:17 +0000
asID: 64267
IP address blocks: 82.29.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f8:fd:b1:3f:34:73:4b:41:07:21:aa:d7:61:97:f3:eb:4c:44:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 30 08:04:17 2024 GMT
Not After : Dec 29 08:09:17 2025 GMT
Subject: CN=715A4E36FC90827EDC4F11EA55E254E39F9A3F5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ca:f4:bd:6c:85:08:19:9c:f7:93:3a:70:e1:
ce:9a:61:96:a6:80:87:c8:12:53:ba:b1:0b:3c:69:
f6:e8:e1:be:e3:d4:cd:15:35:57:ab:84:aa:4e:a0:
35:c6:75:db:5e:12:d8:1e:40:a6:59:63:9b:95:46:
28:c4:be:d1:78:e7:af:b6:c3:e0:4c:72:2b:53:88:
d5:88:ca:ee:a1:37:99:7f:7d:d9:2c:6d:5a:85:0d:
13:a3:e0:f0:5c:f2:a7:2d:45:58:32:12:94:ac:8c:
8d:7b:4a:f9:3a:da:66:2d:09:62:48:90:d4:4f:c5:
2c:9a:06:ed:57:ed:65:89:22:50:a0:cd:ce:5c:e4:
ce:0e:26:2d:70:f4:3c:31:d2:92:53:7e:dd:f6:67:
49:d6:37:d0:69:a5:d3:b2:9a:23:74:00:b1:34:d4:
72:69:52:f3:dd:73:d7:3b:16:c1:d7:82:58:71:75:
d9:7c:e6:06:c9:b1:67:3d:20:9b:50:71:ba:f4:a0:
9d:96:2b:e0:5e:c8:2a:25:90:1c:46:d9:7a:c8:b7:
a0:c1:7e:3c:8c:41:49:9e:f1:a5:4a:8c:a5:f4:7e:
b2:b0:0b:50:d9:82:c1:e5:59:92:53:3d:f8:1b:a6:
b4:74:6a:c6:f5:8b:3b:31:bf:5c:9c:63:cd:12:bf:
29:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5A:4E:36:FC:90:82:7E:DC:4F:11:EA:55:E2:54:E3:9F:9A:3F:5B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/38322e32392e3132362e302f32342d3234203d3e203634323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.126.0/24
Signature Algorithm: sha256WithRSAEncryption
64:8b:cf:1b:b0:5e:59:ea:0e:2f:9a:cd:22:09:43:47:2b:68:
b6:37:be:54:f0:f8:75:ff:2f:da:49:38:b8:0b:c4:e2:80:38:
33:e3:fc:67:26:57:11:fe:bb:3c:81:62:3e:fb:53:54:1f:3b:
88:4b:ca:4c:11:c4:ad:18:1d:07:91:6d:01:fc:b2:b6:0a:26:
2a:c6:68:85:4f:1e:97:eb:ac:fa:a3:93:49:86:a8:52:a9:0d:
04:73:61:7a:9a:fa:cf:f7:10:9b:b9:4d:6b:4a:31:fc:2b:72:
42:a5:e0:8b:aa:59:f0:e1:42:75:9d:40:6e:29:ca:be:43:98:
b2:fe:e2:15:49:bf:2a:93:4c:a6:e1:1c:e5:3a:93:19:bf:de:
e1:b9:85:7d:e4:74:a4:91:08:13:24:e4:9f:0d:2d:55:09:9c:
68:fc:b4:bb:ae:69:b1:75:b5:0e:78:b1:1d:6f:da:a7:da:a3:
50:b8:8c:45:57:8f:f7:74:5b:b8:9a:b8:89:48:65:6b:97:0f:
31:f4:24:12:16:29:af:48:f5:8e:2c:9f:9b:24:72:ba:b6:bf:
9f:6a:e5:cd:cd:57:45:4e:70:2f:f3:17:fd:c0:bf:da:fb:7f:
28:97:b0:62:76:0c:28:34:4b:7a:14:46:c4:b0:a3:5d:47:91:
04:5d:5c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:13:46 2025 by rpki-client