Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635353a3a2f34382d3438203d3e203136353039.roa
File: 326131343a373538303a666635353a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier: 8npGf5qDF4pLIH/wAY2CqeYJBhLS9Szorl119Pqeb1w=
Subject key identifier: 1E:70:E3:EC:67:6D:F4:FA:38:30:C3:FC:1F:93:89:AF:5B:F6:86:40
Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Certificate serial: 39C05D89BD540D3F7F858E042F841DD4F42E7F1B
Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635353a3a2f34382d3438203d3e203136353039.roa
Signing time: Wed 21 May 2025 23:53:00 +0000
ROA not before: Wed 21 May 2025 23:48:00 +0000
ROA not after: Wed 20 May 2026 23:53:00 +0000
asID: 16509
IP address blocks: 2a14:7580:ff55::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 11:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:c0:5d:89:bd:54:0d:3f:7f:85:8e:04:2f:84:1d:d4:f4:2e:7f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Validity
Not Before: May 21 23:48:00 2025 GMT
Not After : May 20 23:53:00 2026 GMT
Subject: CN=1E70E3EC676DF4FA3830C3FC1F9389AF5BF68640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:3b:88:58:ab:c3:b2:59:04:e1:53:80:3b:
17:b7:5c:db:a3:6f:01:41:2b:cc:d1:fa:cc:09:4f:
70:93:e1:03:e8:84:9f:f4:46:17:6a:d2:69:8b:9c:
d9:ba:cd:5e:31:df:b3:84:97:b4:5f:fc:f6:4a:b3:
de:4b:8a:fa:62:a3:37:e3:4c:8b:46:32:a6:2a:d5:
96:f3:7d:1f:53:c2:24:a0:84:cc:8d:4f:ba:dc:e8:
69:c9:6c:86:5c:c4:c5:85:a8:d7:d7:ea:3c:7c:a5:
75:e9:a5:6d:98:46:10:be:87:f9:17:0b:a4:94:e2:
87:69:ad:bb:e9:03:c6:8a:d3:0d:2f:06:1a:df:b5:
4f:56:59:ac:49:db:df:6d:52:c0:f1:0d:e5:a0:fc:
a6:a1:c9:0b:2e:20:57:77:b3:39:5e:71:41:9f:bd:
b1:3c:68:15:ce:b6:24:76:7d:5c:3d:a5:7e:6a:06:
b9:21:43:29:31:67:b7:11:73:91:ab:28:91:ce:3d:
ba:46:94:94:0a:b0:9d:21:5d:ea:fd:40:50:b5:69:
9a:5a:7e:8a:c2:c1:b4:17:2b:d7:7d:10:89:16:f9:
99:3b:5a:e6:4b:d5:e5:5c:68:51:6f:16:c8:a4:80:
4e:51:75:90:00:17:d8:c3:a8:bd:1b:60:c6:d4:9a:
4c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:70:E3:EC:67:6D:F4:FA:38:30:C3:FC:1F:93:89:AF:5B:F6:86:40
X509v3 Authority Key Identifier:
keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635353a3a2f34382d3438203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ff55::/48
Signature Algorithm: sha256WithRSAEncryption
19:e1:39:ea:4b:97:7b:a0:35:e6:a3:07:0a:f2:fd:10:5b:1b:
ec:0e:81:11:d8:64:3b:66:7e:76:a6:86:09:e0:1c:cd:58:99:
bb:62:8f:be:6a:05:14:4a:27:5a:b7:84:a7:5b:76:94:3a:ce:
10:2d:f0:6b:50:7b:2d:e9:2e:f2:c0:aa:cd:a8:e4:18:6e:9f:
80:21:5a:b3:ea:c0:89:05:09:de:bf:58:d2:99:65:5a:65:2f:
0d:76:59:ff:31:54:72:bf:6a:b1:59:c5:7a:72:89:54:4f:df:
e6:46:e7:2e:27:68:6a:c8:34:a3:de:6a:f3:cc:9b:f7:c0:7f:
72:44:f4:cb:52:15:d2:5e:a9:8f:6d:00:6b:a1:15:c3:69:b4:
2f:9c:81:ee:74:ca:c2:71:ec:11:0b:fe:a1:e6:2a:53:a1:dd:
32:a1:06:4b:97:dd:93:b0:12:21:0d:dc:0b:bb:21:6f:4c:95:
08:58:5b:46:9d:92:e5:35:40:13:ea:ac:4c:56:e6:ee:2b:f4:
07:84:93:2b:98:26:2b:a5:a2:bd:bc:eb:c3:09:a7:91:4d:e7:
13:a5:59:c8:fa:6a:83:03:8b:01:68:83:6e:08:b4:62:6d:0f:
9a:a1:3d:e2:80:a5:cf:5c:94:b9:4a:48:f0:71:36:1e:38:c0:
38:36:b4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:53:56 2025 by rpki-client