Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635353a3a2f34382d3438203d3e203134363138.roa
File: 326131343a373538303a666635353a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier: epQew1SZG0EU5GQf2FtvKCpww1hxSAZZTV1ZBQwqMnM=
Subject key identifier: 7F:D5:27:D7:4A:97:F2:A1:E6:E0:E3:47:2A:78:97:41:64:8D:5A:53
Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Certificate serial: 23CB96AC7DC2C8995E7261BFC68305BB05D8B1D5
Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635353a3a2f34382d3438203d3e203134363138.roa
Signing time: Wed 21 May 2025 23:53:46 +0000
ROA not before: Wed 21 May 2025 23:48:46 +0000
ROA not after: Wed 20 May 2026 23:53:46 +0000
asID: 14618
IP address blocks: 2a14:7580:ff55::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 11:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:cb:96:ac:7d:c2:c8:99:5e:72:61:bf:c6:83:05:bb:05:d8:b1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Validity
Not Before: May 21 23:48:46 2025 GMT
Not After : May 20 23:53:46 2026 GMT
Subject: CN=7FD527D74A97F2A1E6E0E3472A789741648D5A53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ac:9f:95:ff:61:ef:6f:69:00:06:5d:fc:1b:
0e:e7:aa:4b:36:f7:84:50:cf:57:a1:35:5a:fd:ce:
06:46:e8:27:f9:81:a9:29:ec:78:ea:85:67:19:4c:
79:cd:d0:c6:c8:fc:12:23:c4:0f:af:99:98:ba:22:
57:fc:9c:88:08:d1:d1:be:63:26:8c:a4:83:8b:4b:
e8:13:a9:ad:b7:60:ce:c6:64:87:47:bd:f7:4b:17:
14:82:64:36:0a:69:87:72:60:69:ee:0f:bb:b8:e2:
2d:3b:be:07:8f:1f:4a:85:58:96:05:2a:2c:7c:ae:
a7:13:e4:10:4c:9d:ba:fb:c6:64:79:d8:e6:10:57:
ac:10:14:b9:5a:b9:83:2d:50:e8:4f:62:2e:9f:ca:
cd:cc:b9:fb:25:54:de:c2:6d:e1:ca:d0:93:e1:73:
64:6c:ba:17:80:2d:ab:f2:f0:c2:7e:ec:7f:09:ee:
86:26:67:a3:83:bf:32:cb:f2:69:2a:fb:d9:9f:21:
da:13:32:b8:78:3b:4b:a7:77:2c:16:0d:31:b8:ad:
11:4d:e3:d9:d8:a7:33:3b:d0:de:c4:99:a5:01:80:
55:6a:8d:c5:72:38:c9:9e:e0:fb:6e:76:bf:33:e5:
9b:8e:ab:88:06:e4:3d:46:77:f7:6e:d9:f5:fc:15:
f7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D5:27:D7:4A:97:F2:A1:E6:E0:E3:47:2A:78:97:41:64:8D:5A:53
X509v3 Authority Key Identifier:
keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635353a3a2f34382d3438203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ff55::/48
Signature Algorithm: sha256WithRSAEncryption
11:b2:ad:d1:47:19:ca:ec:6c:4c:3c:83:d4:f4:d1:47:ff:a2:
c7:33:f7:05:83:55:41:7f:f4:89:82:2b:e9:16:80:9f:c4:c1:
36:d8:8a:72:96:cc:a8:59:64:be:59:bd:25:c3:37:cc:c3:55:
58:4e:66:07:25:61:49:c0:5d:98:72:6b:f1:34:e1:b5:53:45:
4f:00:68:1a:5d:40:9d:cd:9b:e0:d6:1b:0f:88:cf:92:fc:9d:
49:99:9b:ca:ba:c0:e2:83:b9:f6:eb:a1:cb:31:bd:21:fc:ae:
aa:8a:63:33:2d:28:02:48:13:27:3c:90:e2:8d:63:43:2b:85:
a0:8a:65:61:f2:bd:10:72:fb:77:5f:87:c3:bf:e1:76:b7:50:
c4:9d:24:8c:ed:f0:08:88:04:4a:42:89:4f:c3:90:93:54:31:
39:7c:a5:53:df:83:dc:1d:71:3b:f9:5b:27:79:e6:18:3f:50:
de:43:35:d4:88:88:85:cf:31:ca:75:98:25:84:d5:a7:b8:92:
e9:77:ae:3c:a0:49:fc:08:92:06:87:85:04:18:24:57:0b:03:
54:47:22:1d:99:88:22:a9:6c:b7:db:19:86:b2:ba:18:f3:79:
7c:ad:c9:2c:ef:64:7b:09:9a:fd:4f:3a:66:8d:21:65:5c:53:
8a:40:83:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:58:53 2025 by rpki-client