Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: UtrvGg1tekKOWBGTG255nYFjdFoIOwAo0u316gbKbMY=
Subject key identifier: B2:6E:CC:8A:A1:0A:AA:AF:46:2B:B4:4A:8C:2B:E2:A8:C5:0E:AE:AE
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 4FB45D4A5A1B9D7A93350FB7B87DCF5C2E00C2DA
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS834.roa
Signing time: Wed 09 Jul 2025 14:15:17 +0000
ROA not before: Wed 09 Jul 2025 14:10:17 +0000
ROA not after: Wed 08 Jul 2026 14:15:17 +0000
asID: 834
IP address blocks: 193.32.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Jul 2025 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:b4:5d:4a:5a:1b:9d:7a:93:35:0f:b7:b8:7d:cf:5c:2e:00:c2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jul 9 14:10:17 2025 GMT
Not After : Jul 8 14:15:17 2026 GMT
Subject: CN=B26ECC8AA10AAAAF462BB44A8C2BE2A8C50EAEAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:21:50:ad:87:eb:40:50:a1:e2:08:84:3a:10:
3a:da:5d:e2:62:29:00:5e:48:7b:12:52:5f:84:f5:
f0:13:b8:11:35:05:bd:a3:4f:6d:e1:03:d2:86:0e:
0a:5d:1c:92:fd:23:d8:55:0f:91:88:39:07:37:f0:
9a:5a:4e:02:df:4f:6f:08:4f:58:5b:76:f8:5d:fe:
6f:5f:47:93:5a:ad:d3:74:52:25:df:02:46:39:d3:
38:50:2a:ce:1d:a7:99:cf:58:e1:1d:56:09:4a:a1:
78:28:c5:61:9f:96:05:b8:7d:98:7f:dc:0c:e6:d6:
e8:03:56:ac:f1:07:83:af:45:22:aa:61:31:6e:f3:
81:26:fe:fa:b5:fd:98:2c:4d:6f:c8:64:d0:ac:8c:
d7:d0:13:3c:30:c1:a8:89:62:6c:73:05:77:2e:f0:
d2:93:98:c8:1b:04:c9:20:f1:1e:91:0b:da:0d:5f:
d1:14:ed:e7:b6:94:82:b0:b8:4c:21:19:c2:3b:27:
a9:cc:2b:1d:9e:ae:74:07:4a:7b:34:53:ae:3f:17:
6c:46:a3:35:70:86:a9:2f:20:86:a3:81:6f:32:6d:
71:de:ff:6a:88:a4:db:20:02:b5:82:9c:bc:87:38:
be:3f:b7:8e:1e:90:03:48:87:82:22:1a:cf:bd:b0:
0e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6E:CC:8A:A1:0A:AA:AF:46:2B:B4:4A:8C:2B:E2:A8:C5:0E:AE:AE
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.205.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:87:a2:66:c4:62:7b:1b:b2:80:44:91:3d:8c:b5:40:cb:71:
c4:e7:fd:41:17:fe:e5:18:9b:8c:4d:9f:f7:1d:a7:96:3d:7a:
96:42:85:96:ba:a7:81:7e:71:9d:c7:f6:09:ae:9f:67:c6:86:
0f:a4:90:b0:8c:a3:5b:dc:60:2f:d1:88:73:ea:d9:77:ec:b7:
72:6f:67:fb:cb:11:a3:c2:3e:2a:0a:23:4b:32:b3:44:ad:86:
96:ab:cc:f4:95:e4:07:41:f1:00:50:de:12:a0:c3:3d:ac:7e:
b5:17:43:75:f3:3c:ad:4c:b5:93:ef:e3:a2:ad:56:90:08:7f:
15:ea:60:15:33:0f:e6:d8:b1:73:a8:6f:eb:06:ac:39:ab:f1:
6c:6f:e8:a4:7d:22:e2:10:c9:b2:c5:c3:79:dc:4b:2d:1e:a6:
65:e8:99:cd:69:b2:51:65:e8:ae:05:a2:0e:33:51:09:1a:85:
07:69:a3:0c:be:2b:4e:5a:28:53:d3:9f:d2:d9:53:75:c9:2a:
1a:ab:2f:89:62:62:d1:8e:18:42:49:9c:08:a4:5b:78:a5:60:
8d:4c:0e:19:f9:64:10:df:3a:b8:31:a8:3b:0e:0a:5d:c4:15:
87:14:f7:9c:65:cc:85:85:91:b2:73:f9:10:a8:37:0c:f1:1f:
80:03:80:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:33 2025 by rpki-client