Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/3130392e3130372e34382e302f32312d3231203d3e20333935373933.roa
File: 3130392e3130372e34382e302f32312d3231203d3e20333935373933.roa (raw, json)
Hash identifier: XCETZiEqNXWyU+2FC6cC/THHiE6ZjWuxqHTHhRNPDWY=
Subject key identifier: 75:E1:6F:97:F9:00:19:88:24:31:4C:2C:E7:1E:77:8D:5D:72:1F:1D
Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial: 5DC8C485FC76F61C02CA39E088E45DF8BB9212B4
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/3130392e3130372e34382e302f32312d3231203d3e20333935373933.roa
Signing time: Wed 11 Jun 2025 10:12:00 +0000
ROA not before: Wed 11 Jun 2025 10:07:00 +0000
ROA not after: Wed 10 Jun 2026 10:12:00 +0000
asID: 395793
IP address blocks: 109.107.48.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 17 Jun 2025 14:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:c8:c4:85:fc:76:f6:1c:02:ca:39:e0:88:e4:5d:f8:bb:92:12:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Validity
Not Before: Jun 11 10:07:00 2025 GMT
Not After : Jun 10 10:12:00 2026 GMT
Subject: CN=75E16F97F900198824314C2CE71E778D5D721F1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:07:72:c3:53:fb:a1:7f:0a:bc:5c:98:df:
5e:92:a1:30:13:d9:c6:98:23:57:09:a5:38:0c:ef:
7e:d6:f9:46:55:47:06:05:2b:fd:80:94:61:a4:89:
d8:a1:89:f9:f7:01:66:28:ff:2f:84:26:37:29:82:
c2:67:0e:fb:71:a7:a7:b8:6d:7a:01:5c:d9:2c:04:
51:1b:83:d2:33:fa:9a:c2:f5:f8:83:93:70:a3:03:
fa:0b:5a:97:28:ab:4b:3a:15:68:ac:7a:04:91:a0:
51:18:99:74:24:0a:0f:0b:7f:bd:e9:ca:5d:46:2d:
0e:f5:2c:99:c9:ff:1e:ec:51:b4:33:63:fb:80:e9:
c5:1c:c2:a3:c2:e5:1e:81:84:03:34:8c:27:c6:81:
61:b9:c8:fa:89:88:05:a1:e7:e9:36:1e:ab:da:d2:
55:3a:ba:dc:49:75:53:5c:b2:de:4d:2c:34:9b:14:
fa:94:e5:c1:83:04:cf:33:fd:6a:a7:0a:b6:f2:cc:
d1:8b:90:37:50:a0:f2:ba:cf:93:90:4b:ce:8e:e9:
b9:ab:af:31:17:56:34:91:42:d2:a4:61:1c:65:2c:
fd:bc:75:f7:ca:6c:83:9e:aa:b9:77:43:09:cf:4f:
1d:7b:e4:83:0a:a8:a4:5c:55:e8:d9:03:86:5a:45:
5c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E1:6F:97:F9:00:19:88:24:31:4C:2C:E7:1E:77:8D:5D:72:1F:1D
X509v3 Authority Key Identifier:
keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/3130392e3130372e34382e302f32312d3231203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.48.0/21
Signature Algorithm: sha256WithRSAEncryption
24:fc:63:28:95:72:32:00:fe:0e:d4:e2:50:4d:df:47:0a:b5:
a1:03:f3:f4:17:43:87:28:d9:15:25:6f:cf:58:15:80:4b:24:
cd:37:71:24:90:35:73:e2:23:c4:99:37:bf:cc:e6:76:97:d1:
61:8f:8c:dc:e0:76:7e:96:9c:b9:06:17:40:ad:cd:fa:9b:97:
51:b7:73:80:c5:80:c1:e6:ec:9c:2d:89:74:cc:b7:9c:a7:54:
cf:7a:2c:d9:5a:94:35:74:7a:e8:2f:68:76:67:42:dd:d9:47:
eb:92:62:99:37:46:41:17:7b:f5:2f:25:24:f4:02:7f:4d:f5:
a3:6e:9b:e8:ae:0c:62:12:4e:ed:32:5a:e4:97:9e:a8:75:63:
cc:32:8f:f8:f6:13:f6:7c:82:1a:69:ad:c4:e4:f7:11:c1:bd:
38:46:2e:9a:bc:c6:af:7f:ba:5c:15:b2:ec:80:57:67:19:a3:
d4:e7:b9:91:df:8d:09:b7:28:31:85:bb:28:7b:04:db:20:44:
62:de:21:32:ad:81:4b:26:4e:93:b9:29:2f:15:46:f1:35:ef:
ae:f8:02:c1:8b:99:59:0d:31:92:12:5f:6c:5a:76:87:44:4d:
b6:12:43:6a:02:e2:9e:7e:03:8c:e3:14:bf:c6:fa:a9:d7:9c:
f6:f2:1f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:15:19 2025 by rpki-client