Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235342e302f32332d3234203d3e20383334.roa
File: 3139342e33342e3235342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: QwqA+f7O4pLZnvTOqsnwrVPLVIkf7tk0tzxM1HgZ4yI=
Subject key identifier: 75:34:E2:82:08:EF:70:6A:94:B5:6E:BD:56:8B:6E:9F:7F:6C:99:CE
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 61DBEB7B28E2B906B64C73BD16F0372B6492A601
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235342e302f32332d3234203d3e20383334.roa
Signing time: Sun 29 Jun 2025 10:20:28 +0000
ROA not before: Sun 29 Jun 2025 10:15:28 +0000
ROA not after: Sun 28 Jun 2026 10:20:28 +0000
asID: 834
IP address blocks: 194.34.254.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Jun 2025 17:18:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:db:eb:7b:28:e2:b9:06:b6:4c:73:bd:16:f0:37:2b:64:92:a6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jun 29 10:15:28 2025 GMT
Not After : Jun 28 10:20:28 2026 GMT
Subject: CN=7534E28208EF706A94B56EBD568B6E9F7F6C99CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:71:f0:1b:f5:0e:64:d5:2b:41:c6:99:58:
11:7b:35:af:5d:b4:9a:8a:20:d9:13:4f:42:87:fc:
ad:f0:3b:04:99:a4:2a:43:70:29:0d:7c:f2:60:f9:
71:fc:b2:ad:95:c2:76:ef:f3:57:c0:f4:ee:3a:bf:
a3:65:be:58:5f:0c:f2:30:83:e2:0a:25:9c:11:92:
25:99:eb:a4:f9:7c:7b:af:7f:4a:57:16:da:2b:cf:
5e:51:9d:f1:0a:39:ad:d4:cd:1e:6d:2f:74:d6:7a:
70:86:e3:e1:07:46:a4:c9:c9:65:4d:02:4f:04:ca:
98:d4:be:e5:d2:d9:f7:60:b4:b7:01:eb:32:40:28:
e7:d0:4f:fa:0a:fc:15:8c:bb:90:69:2b:f3:85:a5:
34:ef:6f:97:82:7d:e2:f6:44:7c:e0:9c:b1:33:f9:
97:bc:a1:e5:13:ec:0d:cb:28:61:49:a1:99:9b:e7:
64:44:81:9a:40:b7:aa:62:bb:2f:72:db:4d:3d:f6:
c1:1e:0f:78:7c:bd:46:3d:52:d2:20:b2:94:10:fe:
93:00:b1:76:06:a0:74:f8:54:e5:1a:45:eb:b5:b9:
ec:9d:ec:77:92:83:88:c4:cc:fd:96:40:1d:6f:ff:
9f:59:8d:bf:3c:fb:e1:07:eb:c5:75:80:72:90:e5:
e9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:34:E2:82:08:EF:70:6A:94:B5:6E:BD:56:8B:6E:9F:7F:6C:99:CE
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.254.0/23
Signature Algorithm: sha256WithRSAEncryption
89:7f:3e:2d:d2:30:d1:e6:d9:54:e5:98:b4:c2:f4:21:08:ea:
b2:4e:fd:75:a3:81:75:0d:57:8f:92:02:06:91:7a:d3:70:90:
62:06:13:d0:15:fb:9e:69:16:ad:1d:bf:41:9b:a9:78:79:83:
2e:9b:be:fe:34:af:ee:08:01:b8:e2:80:46:5b:77:20:46:c7:
11:1a:31:b2:53:ce:e9:17:fe:27:9c:96:c0:5a:8c:00:a9:cc:
14:15:b6:b4:3c:4f:b7:d1:14:53:e8:72:1b:6c:11:86:16:ed:
fa:cc:7e:cd:1f:20:bb:bf:af:9c:f0:46:15:1a:9e:5c:28:cf:
53:dd:e2:7b:a1:75:39:88:5a:22:28:a6:0d:a8:0a:e0:5a:16:
9a:ed:d4:5a:fd:24:de:9f:6c:a3:9a:71:3f:56:ac:33:8d:77:
8c:e9:de:06:4a:f6:91:21:64:34:e6:51:bb:9e:a1:d3:7a:a0:
82:29:16:61:12:ac:71:84:dc:96:c9:da:17:3c:a5:7d:57:46:
35:14:06:62:80:7b:8a:49:7f:f0:00:a5:9d:25:a3:8a:17:34:
55:ad:37:86:f8:21:fc:8f:94:8e:66:09:0a:34:7d:a0:d2:c1:
19:33:9e:4c:63:b4:33:09:70:3f:29:60:54:4e:d3:e5:66:c5:
6b:7d:86:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:58:31 2025 by rpki-client