Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS203915.roa
File: AS203915.roa (raw, json)
Hash identifier: udYCXnXX/kDXY+U4OB4URynpMP9VeK+Xa2S5uFVGeCw=
Subject key identifier: 2B:E9:A4:FC:A0:F2:56:F9:70:DB:85:50:9E:22:9F:CB:DA:E4:55:8B
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2AA6BBA5E2D6C317DAB36BCDA5B6A3DB31FC6CB5
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS203915.roa
Signing time: Thu 03 Jul 2025 05:39:50 +0000
ROA not before: Thu 03 Jul 2025 05:34:50 +0000
ROA not after: Thu 02 Jul 2026 05:39:50 +0000
asID: 203915
IP address blocks: 2a14:7580:ff70::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 09 Jul 2025 09:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:a6:bb:a5:e2:d6:c3:17:da:b3:6b:cd:a5:b6:a3:db:31:fc:6c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 3 05:34:50 2025 GMT
Not After : Jul 2 05:39:50 2026 GMT
Subject: CN=2BE9A4FCA0F256F970DB85509E229FCBDAE4558B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:57:f5:90:86:16:bf:1c:5e:14:85:bc:0a:
20:f7:ed:65:62:a0:5f:f9:58:8f:5d:08:0d:51:06:
51:17:57:e4:45:2f:15:c1:83:0e:ba:81:8e:9c:c9:
b3:c0:8c:5f:15:59:b7:71:53:27:7f:8f:e2:d1:6b:
95:55:2d:e9:b1:0f:cb:ec:d6:07:de:2a:ac:72:94:
65:3c:5c:6a:b4:98:9d:59:27:17:d5:5d:6d:90:46:
5b:1b:3e:7e:29:ad:c6:f1:d6:97:20:11:31:12:15:
4a:3c:14:04:11:70:39:1e:4d:fa:fe:77:10:de:f7:
30:d6:ac:08:11:77:02:33:6d:6f:f7:e4:a8:39:32:
1f:68:ea:6c:5f:74:87:2c:69:1a:05:e3:03:50:42:
91:33:ac:72:2c:85:b6:12:ed:a6:d0:60:29:cd:75:
2e:16:6c:3c:f4:8f:83:a3:e4:1a:4d:b8:01:9b:00:
f6:1d:9c:07:ca:d5:e1:1a:e6:92:64:dd:c0:a1:1f:
3f:fc:5f:d1:37:cb:4e:49:3a:e0:df:d3:82:58:c0:
e0:16:4a:b5:e9:9e:bf:0e:5d:a4:95:a1:4d:99:69:
e0:4f:5d:80:09:0b:b1:8d:a0:b5:07:0b:cb:94:5b:
d2:6c:b6:76:a0:91:8c:dd:4f:36:4c:91:cc:df:16:
f0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E9:A4:FC:A0:F2:56:F9:70:DB:85:50:9E:22:9F:CB:DA:E4:55:8B
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS203915.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ff70::/44
Signature Algorithm: sha256WithRSAEncryption
75:2a:c3:4c:8b:66:c1:29:43:42:22:ae:39:2c:1f:ee:8d:90:
9f:a5:98:fe:b5:9b:dc:8f:8c:57:ea:59:49:3c:4c:6f:7e:b5:
4e:51:b0:18:39:be:85:99:4d:2a:ea:f1:a6:19:96:0e:59:03:
dc:c8:27:90:57:44:12:c2:5f:3a:fc:36:51:e6:35:33:f6:1c:
7d:1d:9c:53:62:77:d0:33:5b:3b:b8:65:eb:6e:5f:ed:2f:a8:
48:74:65:ee:cd:a3:1e:93:17:df:68:a0:93:fb:94:f7:56:93:
1d:4e:b1:f0:5d:ce:70:fb:3a:70:24:26:a2:80:b1:8f:6d:b6:
43:1c:17:37:af:42:20:f2:f5:e0:c7:f3:8c:ec:a0:05:6a:3f:
cb:76:5c:70:40:30:73:0b:05:f8:dc:98:1b:b9:c7:ee:3d:15:
53:73:3a:ed:18:17:6e:db:2e:29:1c:d2:6e:d2:4a:14:c2:59:
cd:a5:49:fc:b9:24:93:71:a7:1d:4d:9f:4d:64:a1:a3:92:ed:
99:8e:4d:43:e1:45:57:38:92:ce:03:e1:2c:cc:8c:33:76:37:
3a:68:bc:4a:c5:d0:c9:9b:79:b7:21:dc:e6:cf:f2:33:70:90:
14:98:6f:29:96:16:06:dc:0e:c1:cc:18:11:cf:a2:6f:e5:0a:
8e:14:69:38
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUKqa7peLWwxfas2vNpbaj2zH8bLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNTA3MDMwNTM0NTBaFw0yNjA3MDIwNTM5NTBaMDMxMTAvBgNV
BAMTKDJCRTlBNEZDQTBGMjU2Rjk3MERCODU1MDlFMjI5RkNCREFFNDU1OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6YVf1kIYWvxxeFIW8CiD37WVi
oF/5WI9dCA1RBlEXV+RFLxXBgw66gY6cybPAjF8VWbdxUyd/j+LRa5VVLemxD8vs
1gfeKqxylGU8XGq0mJ1ZJxfVXW2QRlsbPn4prcbx1pcgETESFUo8FAQRcDkeTfr+
dxDe9zDWrAgRdwIzbW/35Kg5Mh9o6mxfdIcsaRoF4wNQQpEzrHIshbYS7abQYCnN
dS4WbDz0j4Oj5BpNuAGbAPYdnAfK1eEa5pJk3cChHz/8X9E3y05JOuDf04JYwOAW
SrXpnr8OXaSVoU2ZaeBPXYAJC7GNoLUHC8uUW9JstnagkYzdTzZMkczfFvBLAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUK+mk/KDyVvlw24VQniKfy9rkVYswHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjAzOTE1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1
gP9wMA0GCSqGSIb3DQEBCwUAA4IBAQB1KsNMi2bBKUNCIq45LB/ujZCfpZj+tZvc
j4xX6llJPExvfrVOUbAYOb6FmU0q6vGmGZYOWQPcyCeQV0QSwl86/DZR5jUz9hx9
HZxTYnfQM1s7uGXrbl/tL6hIdGXuzaMekxffaKCT+5T3VpMdTrHwXc5w+zpwJCai
gLGPbbZDHBc3r0Ig8vXgx/OM7KAFaj/LdlxwQDBzCwX43JgbucfuPRVTczrtGBdu
2y4pHNJu0koUwlnNpUn8uSSTcacdTZ9NZKGjku2Zjk1D4UVXOJLOA+EszIwzdjc6
aLxKxdDJm3m3Idzmz/IzcJAUmG8plhYG3A7BzBgRz6Jv5QqOFGk4
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:28:09 2025 by rpki-client