Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/3137302e33392e34392e302f32342d3234203d3e20333936393933.roa
File: 3137302e33392e34392e302f32342d3234203d3e20333936393933.roa (raw, json)
Hash identifier: jmnzYQHOtUTHKpJhNJRG7sx1uyV3ViP1cj26zZXBLy4=
Subject key identifier: 59:97:EA:C1:9E:4E:29:69:01:23:38:78:0B:CC:A2:61:38:C7:12:44
Certificate issuer: /CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071
Certificate serial: 7FD846C42D5869397C14F8F935C41EBE5494DFA5
Authority key identifier: 93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/3137302e33392e34392e302f32342d3234203d3e20333936393933.roa
Signing time: Fri 27 Jun 2025 08:24:44 +0000
ROA not before: Fri 27 Jun 2025 08:19:44 +0000
ROA not after: Fri 26 Jun 2026 08:24:44 +0000
asID: 396993
IP address blocks: 170.39.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jun 2025 09:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:d8:46:c4:2d:58:69:39:7c:14:f8:f9:35:c4:1e:be:54:94:df:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071
Validity
Not Before: Jun 27 08:19:44 2025 GMT
Not After : Jun 26 08:24:44 2026 GMT
Subject: CN=5997EAC19E4E2969012338780BCCA26138C71244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:7a:9c:e9:ae:74:fc:1d:48:1a:0d:11:9c:
29:f7:88:b6:81:57:46:67:82:8c:04:b0:08:25:a3:
c0:2a:56:5c:fc:c1:2a:e5:72:dc:6a:d7:8b:c4:d1:
74:94:30:8a:e9:41:78:be:4d:84:1f:d9:4b:4f:53:
8f:98:f0:81:86:c5:38:f7:f4:e4:f2:b4:1d:44:3b:
15:22:57:79:e9:79:48:13:1e:8f:e9:8b:25:25:55:
9a:24:a6:31:97:f5:02:12:18:1f:97:b0:74:c2:28:
f0:5b:22:ab:ea:0b:5b:b2:a3:a3:5f:d0:3a:66:f8:
55:9c:6f:d4:b7:ef:1b:1b:70:49:0a:4d:e0:cd:b7:
57:7e:e3:ab:73:88:50:cd:30:c6:82:fd:cc:6f:70:
e6:a5:e0:86:7d:52:07:51:e2:9f:e3:cb:1c:72:b8:
c9:2a:cb:ae:67:ba:87:da:0c:23:fa:db:5a:76:da:
cb:b3:cb:d4:8b:23:7e:45:f9:ba:21:89:31:db:4d:
46:07:cc:bb:72:4e:e7:69:b2:f2:19:21:ce:1d:43:
0f:d9:98:10:88:a5:d3:91:43:15:d6:7a:6b:a0:30:
23:97:5a:d0:51:a1:87:f2:81:f9:f7:d1:41:6b:6f:
6b:dd:98:11:d7:d7:cb:05:ee:94:ce:60:b3:70:0c:
da:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:97:EA:C1:9E:4E:29:69:01:23:38:78:0B:CC:A2:61:38:C7:12:44
X509v3 Authority Key Identifier:
keyid:93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/3137302e33392e34392e302f32342d3234203d3e20333936393933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.39.49.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:37:b5:66:c6:a7:f3:e6:8f:28:6c:71:01:98:65:4a:ab:ee:
61:71:73:60:b0:08:64:d3:47:37:11:b5:8f:d9:12:c9:36:d4:
ca:99:6d:e0:ea:fa:1c:32:6d:26:a9:cc:72:d9:2b:25:30:82:
5c:d1:fd:6b:1f:b1:28:7f:9f:d8:02:c9:50:80:f8:3f:7d:23:
b7:b8:1f:1b:74:8a:fd:7f:dc:3d:b5:23:30:94:32:43:4b:42:
2e:16:6b:03:28:79:03:69:0c:fa:74:5a:69:20:3e:17:cb:c7:
9e:f7:22:e9:74:c9:ec:ac:af:4a:c0:d8:30:6e:11:b1:f0:f0:
e2:dc:75:f6:46:df:2a:65:82:e2:ad:62:19:c0:58:d2:78:9c:
81:16:e5:5b:ad:11:8b:be:48:e2:a0:30:f1:48:31:84:e3:32:
cd:0e:31:aa:89:ae:31:47:78:2a:dc:aa:43:3b:cd:27:b2:5a:
bf:d6:4e:3b:f0:71:17:90:29:a7:d4:cd:cf:f3:25:a2:4a:ae:
72:98:44:65:96:4e:ab:82:2b:0a:49:e1:74:cc:e5:e3:45:aa:
5e:cf:4d:cc:97:e9:1e:9b:b4:70:2a:d1:b7:76:45:b3:14:62:
1a:0a:f5:95:ef:ac:bf:d9:96:b8:de:ee:79:c1:42:22:0d:2e:
5d:a0:9a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:16:28 2025 by rpki-client