Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/322e35392e36322e302f32342d3234203d3e20383334.roa
File: 322e35392e36322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: l0TtjMrtpTedGIw3qhmFubTknzxWLjEQ7HltIVO7f0U=
Subject key identifier: 50:70:B2:BF:67:D9:C7:BD:70:4B:B0:C6:E8:F8:12:CF:99:A5:1F:CA
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 4A17C5612EB7142F7FC1763E9BE9F1C168D8D74E
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/322e35392e36322e302f32342d3234203d3e20383334.roa
Signing time: Sun 29 Jun 2025 10:17:24 +0000
ROA not before: Sun 29 Jun 2025 10:12:24 +0000
ROA not after: Sun 28 Jun 2026 10:17:24 +0000
asID: 834
IP address blocks: 2.59.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jun 2025 05:58:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:17:c5:61:2e:b7:14:2f:7f:c1:76:3e:9b:e9:f1:c1:68:d8:d7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jun 29 10:12:24 2025 GMT
Not After : Jun 28 10:17:24 2026 GMT
Subject: CN=5070B2BF67D9C7BD704BB0C6E8F812CF99A51FCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bb:4a:24:10:69:fc:93:bc:14:90:71:73:6c:
5d:9f:e1:9d:ec:f6:2e:4a:64:cd:77:d4:fe:74:2b:
76:d6:1d:52:61:8d:78:4b:ad:02:b6:50:2e:29:77:
aa:bd:da:9f:eb:ea:a9:b2:d5:ca:d6:1c:ff:b3:19:
2b:c2:0e:0c:55:a8:c8:e5:db:56:7a:f7:2b:7b:66:
ae:a3:47:f1:dc:56:93:07:ba:47:ff:a4:8e:c3:dc:
64:bc:ef:80:7e:8f:d1:b0:f9:93:d9:d3:95:d6:28:
65:82:73:34:31:6b:f3:f4:88:67:78:ed:c9:35:30:
37:c8:6f:e9:4a:40:db:3a:5f:9f:a5:b2:6c:0b:72:
83:82:fb:db:ad:e7:04:bf:5d:10:f0:1b:be:4d:a3:
fb:53:0a:ed:a0:df:31:53:18:79:83:ce:5c:08:7a:
21:14:f6:2b:19:46:33:57:58:63:9b:96:b7:e6:50:
4d:de:6d:3b:2c:5c:c8:f4:a2:8c:7d:fe:b6:69:e7:
08:24:34:ce:be:54:e5:f1:a7:cc:16:b9:78:6b:28:
bc:ed:08:12:6f:8e:f8:31:a0:56:d9:ed:b0:e8:7c:
05:cf:2d:db:2d:5e:9c:f5:ef:dd:17:7f:b4:56:c0:
f0:99:1a:a1:97:ad:06:d3:c8:f8:94:0d:d8:ed:69:
df:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:70:B2:BF:67:D9:C7:BD:70:4B:B0:C6:E8:F8:12:CF:99:A5:1F:CA
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/322e35392e36322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.62.0/24
Signature Algorithm: sha256WithRSAEncryption
85:97:22:08:35:59:45:ad:a7:0e:ff:d8:7d:37:dc:7a:b2:e8:
cc:9f:a1:83:65:cc:ca:86:00:d0:cd:4e:5a:b2:07:d5:ad:8e:
37:f5:4a:99:72:10:af:9f:e8:8d:70:47:fa:45:ed:2c:b9:4b:
ee:75:9a:9c:19:91:c1:30:b4:eb:90:2c:1b:7f:cb:8c:4c:c8:
cf:e1:5f:c7:70:a5:f6:41:19:3c:2a:e3:0c:bb:39:58:be:6d:
8f:35:14:87:0a:e2:6d:7f:9a:68:a6:21:93:ba:72:ae:07:a6:
71:be:cd:c2:8f:57:59:b2:39:23:8a:cf:9d:79:c5:d5:9b:fc:
f5:bb:30:50:a9:74:fa:b1:84:ea:2b:60:28:21:dd:6a:38:14:
3d:0c:47:06:7b:ec:fa:cf:7d:30:04:37:93:28:5f:e4:18:a0:
98:9b:23:11:e9:78:0e:3f:b4:50:cc:89:de:bb:0c:52:c5:96:
aa:5e:ec:68:fe:9d:9b:51:9f:71:de:06:af:e9:91:0f:c8:e9:
05:12:d8:a2:89:12:b9:08:90:8e:a0:21:b3:15:0a:61:6e:e5:
1b:2b:17:2f:4e:e0:84:33:70:0b:46:ed:c5:9e:f0:df:f4:71:
f1:62:ea:1e:67:74:f4:5c:e5:f5:1c:49:c5:f7:f4:9a:12:32:
63:08:65:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 03:56:05 2025 by rpki-client