Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS1.roa
File: AS1.roa (raw, json)
Hash identifier: X08K0HWKvo3WPgCG8YY40aCO7AEW0mz70c4i+cEHXu0=
Subject key identifier: AA:4F:F9:8E:C8:F2:96:00:7E:3A:7C:26:6A:7E:A5:C9:5B:0B:F0:79
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 5983320BB714D4C09F11B33B0DE822E36452718B
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS1.roa
Signing time: Wed 25 Jun 2025 08:38:41 +0000
ROA not before: Wed 25 Jun 2025 08:33:41 +0000
ROA not after: Wed 24 Jun 2026 08:38:41 +0000
asID: 1
IP address blocks: 193.38.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Jun 2025 17:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:83:32:0b:b7:14:d4:c0:9f:11:b3:3b:0d:e8:22:e3:64:52:71:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jun 25 08:33:41 2025 GMT
Not After : Jun 24 08:38:41 2026 GMT
Subject: CN=AA4FF98EC8F296007E3A7C266A7EA5C95B0BF079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:12:94:97:85:28:52:aa:75:7f:d6:54:9f:
66:57:29:c2:e2:36:df:65:e0:fe:98:70:0f:83:1f:
2e:50:4f:04:72:67:dd:23:e2:1d:a4:a1:8f:47:f9:
e3:15:08:25:2b:7a:4c:fd:33:ec:bf:fb:16:a3:8c:
cc:d0:68:3d:27:cc:2f:7c:ba:08:d7:12:35:f2:a8:
7f:da:20:63:6e:63:2e:b3:ca:50:7f:ee:d4:68:4c:
48:cb:2b:11:57:02:56:a2:cd:3a:2f:ad:77:71:84:
cf:5c:89:9f:79:8b:c7:4a:bf:c3:c4:37:04:0b:5e:
5b:96:ce:a1:4c:ea:d3:8b:bc:ce:8f:e9:fd:74:78:
46:bd:29:a8:a1:92:b2:59:0c:d5:8b:b3:a5:82:33:
b1:68:c3:e1:0c:95:16:b8:44:1e:8c:84:53:65:7e:
89:30:ec:e8:25:9b:bd:26:06:95:97:11:ce:fa:88:
d7:9e:e5:4b:80:fb:9f:7c:2a:9a:d3:57:cf:f2:c5:
d7:b9:f5:f8:84:ee:dc:97:2c:ed:dc:91:7a:9d:30:
70:86:10:04:d3:a8:f4:14:50:03:8e:32:f0:54:4e:
21:39:30:84:5f:f9:1d:f7:a5:fc:ba:79:7b:6f:66:
39:ca:98:71:24:b8:cf:51:03:fe:ba:7a:76:0c:7f:
1c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4F:F9:8E:C8:F2:96:00:7E:3A:7C:26:6A:7E:A5:C9:5B:0B:F0:79
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS1.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.46.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ca:12:8c:9d:0d:24:2d:60:ab:9e:28:41:51:6d:99:bc:3f:
6a:ec:cd:dd:d3:b7:36:ec:26:5c:fd:e2:e1:aa:45:5e:78:56:
87:5e:81:5f:7a:41:d1:70:2d:1a:4d:e2:96:30:78:51:98:66:
7e:a0:68:6e:7b:fc:4d:58:4a:d2:d7:20:b2:f5:46:c5:17:be:
08:a4:d5:41:4a:52:f9:1a:a4:2f:07:d3:77:b8:b0:1b:eb:49:
e1:93:5a:95:63:55:63:1b:f5:ce:49:6a:61:58:50:05:6e:a4:
03:f3:cc:4b:79:e8:1b:94:67:90:12:da:98:3b:ff:d9:4f:25:
56:94:41:93:ec:be:d3:fc:72:a7:2d:90:82:27:d4:e7:de:2e:
41:8e:63:b3:48:8e:a2:ac:6e:35:1d:b5:72:a4:74:cd:ff:a3:
09:5d:aa:6d:c4:ed:2a:8a:05:a1:46:99:ad:39:1c:a3:2d:f8:
6d:26:cc:a3:e7:65:3f:2b:e0:bf:93:fd:31:bc:d5:d2:09:e9:
e9:96:1b:0b:9f:ef:cf:5f:24:7f:44:3f:80:b4:13:f3:64:5d:
d2:f3:f3:23:b0:21:d6:4c:4b:dc:12:4d:f0:69:71:40:05:1f:
06:49:53:52:9b:5d:0c:11:89:22:14:7b:31:cd:f1:92:65:7e:
16:06:95:a6
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUWYMyC7cU1MCfEbM7Degi42RScYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy
ZjJmNDE1YjAeFw0yNTA2MjUwODMzNDFaFw0yNjA2MjQwODM4NDFaMDMxMTAvBgNV
BAMTKEFBNEZGOThFQzhGMjk2MDA3RTNBN0MyNjZBN0VBNUM5NUIwQkYwNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtoxKUl4UoUqp1f9ZUn2ZXKcLi
Nt9l4P6YcA+DHy5QTwRyZ90j4h2koY9H+eMVCCUrekz9M+y/+xajjMzQaD0nzC98
ugjXEjXyqH/aIGNuYy6zylB/7tRoTEjLKxFXAlaizTovrXdxhM9ciZ95i8dKv8PE
NwQLXluWzqFM6tOLvM6P6f10eEa9KaihkrJZDNWLs6WCM7Fow+EMlRa4RB6MhFNl
fokw7Oglm70mBpWXEc76iNee5UuA+598KprTV8/yxde59fiE7tyXLO3ckXqdMHCG
EATTqPQUUAOOMvBUTiE5MIRf+R33pfy6eXtvZjnKmHEkuM9RA/66enYMfxxNAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUqk/5jsjylgB+Onwman6lyVsL8HkwHwYDVR0j
BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0
ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4
dlFWcy5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt
NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEmLjANBgkq
hkiG9w0BAQsFAAOCAQEAN8oSjJ0NJC1gq54oQVFtmbw/auzN3dO3NuwmXP3i4apF
XnhWh16BX3pB0XAtGk3iljB4UZhmfqBobnv8TVhK0tcgsvVGxRe+CKTVQUpS+Rqk
LwfTd7iwG+tJ4ZNalWNVYxv1zklqYVhQBW6kA/PMS3noG5RnkBLamDv/2U8lVpRB
k+y+0/xypy2QgifU594uQY5js0iOoqxuNR21cqR0zf+jCV2qbcTtKooFoUaZrTkc
oy34bSbMo+dlPyvgv5P9MbzV0gnp6ZYbC5/vz18kf0Q/gLQT82Rd0vPzI7Ah1kxL
3BJN8GlxQAUfBklTUptdDBGJIhR7Mc3xkmV+FgaVpg==
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:30 2025 by rpki-client