Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS50673.roa
File: AS50673.roa (raw, json)
Hash identifier: isZrjcBdWefe+j7iiMz+ig3KYS0TTx1LhE3E4KGlgaA=
Subject key identifier: 80:51:CB:61:19:C8:11:73:44:B0:18:F2:09:D3:DB:37:0F:A5:5B:12
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 77E31E37B475300AB7E2DC747DD4D46D458FDE09
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS50673.roa
Signing time: Fri 21 Mar 2025 13:58:22 +0000
ROA not before: Fri 21 Mar 2025 13:53:22 +0000
ROA not after: Fri 20 Mar 2026 13:58:22 +0000
asID: 50673
IP address blocks: 82.22.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 16:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:e3:1e:37:b4:75:30:0a:b7:e2:dc:74:7d:d4:d4:6d:45:8f:de:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 21 13:53:22 2025 GMT
Not After : Mar 20 13:58:22 2026 GMT
Subject: CN=8051CB6119C8117344B018F209D3DB370FA55B12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:20:23:60:a1:59:46:17:e4:45:fd:08:79:
6d:ac:b8:8b:90:4d:ae:87:16:4f:25:7f:d2:da:90:
93:a8:f6:a4:b5:d8:7d:c5:e9:5b:9f:d4:e9:73:4d:
f7:20:fd:1c:d4:51:61:11:09:e3:40:47:92:63:9b:
e8:38:e2:40:9d:61:2a:32:6d:7d:a8:3b:85:21:60:
10:d4:d0:42:90:65:39:c4:6d:c2:29:49:be:86:8b:
b4:6d:b2:ea:07:43:06:75:97:1c:dd:f4:a4:f0:c6:
71:8b:dc:cf:0f:8b:14:b0:93:9d:57:df:bd:cf:8f:
c1:48:17:c3:4a:b4:33:8e:1a:d5:d3:3b:26:e1:31:
9c:08:73:17:bf:97:3f:b9:fd:32:c9:2d:37:61:7d:
10:5c:c9:8c:99:a4:a2:a4:ef:83:54:b8:a6:f5:72:
8d:39:41:1a:4c:d3:b8:f3:5f:26:9f:c0:e6:a8:9a:
b1:99:27:fc:68:e0:1e:79:00:bd:1f:c9:78:36:91:
f5:46:08:34:c6:fa:8c:5e:e4:18:47:e7:45:0d:bf:
f1:93:d1:c6:ec:8b:8f:ab:45:b2:5f:af:cd:ad:0f:
6f:25:d9:8b:cf:10:26:c5:83:31:67:42:ed:16:b8:
45:10:90:af:20:29:42:fe:93:08:fd:4b:19:c6:81:
50:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:51:CB:61:19:C8:11:73:44:B0:18:F2:09:D3:DB:37:0F:A5:5B:12
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS50673.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.82.0/24
Signature Algorithm: sha256WithRSAEncryption
44:c6:f9:b4:82:3f:c9:94:29:98:63:3b:75:7e:0c:2c:1c:1b:
83:52:7c:1a:4e:41:76:ac:2e:f8:60:64:3c:c8:cc:8d:8d:b6:
33:c1:a6:37:e6:c7:b0:cf:97:76:41:5d:9c:d6:13:eb:7d:1d:
40:a1:89:80:f6:c3:d6:57:3f:22:e9:e9:20:9d:12:3b:3f:c8:
f6:42:09:f1:61:0e:01:ec:43:f0:e0:93:3a:cc:d5:27:79:5a:
d2:c7:86:bb:99:af:0c:44:14:d1:1a:37:d4:77:4e:ca:04:33:
57:08:30:ae:eb:6a:9b:f4:ca:98:ab:28:1e:5b:fb:6d:c1:88:
e2:5a:de:4a:a3:6d:3f:79:64:b8:41:0f:34:41:fe:c2:f9:b1:
09:4b:84:11:bf:a2:2e:ae:63:41:17:fb:4a:67:7f:82:d2:62:
44:c9:7c:2b:bd:3f:8a:c2:a8:2a:96:54:f7:0b:c4:4b:b3:39:
1e:f2:18:85:be:34:4e:2c:7c:76:55:48:b1:ff:f9:1d:6d:df:
41:a4:79:54:9b:e5:a7:11:2f:24:e0:e3:88:59:f4:af:3c:11:
35:ee:00:c2:95:d5:11:54:d1:9c:36:cf:b5:be:b7:23:b5:cb:
56:df:92:18:f2:22:ad:35:e0:18:0a:54:83:39:d0:84:3d:70:
45:42:04:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:54:15 2025 by rpki-client