Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3233392e302f32342d3234203d3e2035303635.roa
File: 3134332e32302e3233392e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier: 05akVBJLmBjXhQeqrFALGhlymjzNr+oInZgYQEd5NE8=
Subject key identifier: 69:EB:44:9C:80:78:57:75:E0:1D:9C:4D:0D:75:C8:2C:56:DD:8D:71
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 478FF3A81A562B5B86062D6F2D702543E5E531E1
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3233392e302f32342d3234203d3e2035303635.roa
Signing time: Tue 06 May 2025 06:35:11 +0000
ROA not before: Tue 06 May 2025 06:30:11 +0000
ROA not after: Tue 05 May 2026 06:35:11 +0000
asID: 5065
IP address blocks: 143.20.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 17:39:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:8f:f3:a8:1a:56:2b:5b:86:06:2d:6f:2d:70:25:43:e5:e5:31:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 6 06:30:11 2025 GMT
Not After : May 5 06:35:11 2026 GMT
Subject: CN=69EB449C80785775E01D9C4D0D75C82C56DD8D71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:a4:a2:5c:f0:61:e3:1f:f0:81:16:9c:02:
b7:16:ad:6f:57:35:cb:09:38:6d:c8:16:7b:43:a5:
05:12:a5:6e:bd:4d:c8:da:e3:8c:93:f6:1a:88:6d:
27:39:5c:38:ac:16:70:29:d3:19:ac:ac:87:a7:c3:
24:ee:40:04:27:a5:20:32:82:b6:b7:80:10:c2:ff:
84:47:70:cf:7b:3c:e7:62:cb:f6:90:be:77:be:5e:
7b:cd:ed:21:5b:58:ed:5c:76:f2:a1:ce:b7:8c:23:
b6:96:0c:8d:7c:3f:a5:b1:54:c6:8c:78:f2:cd:ae:
75:5f:b2:0d:ee:eb:a4:5d:8c:da:40:90:0f:57:71:
1e:81:9f:d1:26:bd:2c:f0:23:54:e8:fd:08:d2:58:
82:ee:03:95:a8:d5:27:cf:61:b1:77:e2:7b:68:35:
01:84:8f:c4:78:f1:37:a7:01:00:02:54:b9:81:2a:
bb:a1:9a:33:e1:b8:22:11:40:6f:ff:be:b6:93:cd:
e9:7b:d1:70:36:8d:f5:1b:15:50:51:18:e8:3c:2d:
dd:c6:3e:50:9f:19:4c:e6:3f:9a:c3:ef:53:30:4b:
68:86:8a:62:b2:4c:3b:7a:53:38:fa:41:15:4c:32:
9d:39:eb:1e:28:b6:14:70:1c:2d:9d:d2:f9:3e:0b:
5a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EB:44:9C:80:78:57:75:E0:1D:9C:4D:0D:75:C8:2C:56:DD:8D:71
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3233392e302f32342d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.239.0/24
Signature Algorithm: sha256WithRSAEncryption
25:63:87:4e:e1:c7:97:b2:04:1d:65:96:6b:ce:d5:fa:27:8c:
6e:a4:52:53:db:ca:aa:63:1e:ef:b6:1d:3e:30:10:2c:6f:af:
29:04:ab:c3:f4:7e:8e:e8:8c:9b:59:13:29:fe:7a:a5:56:68:
f1:26:48:16:d6:25:67:d3:34:27:64:fa:80:2c:ef:56:89:97:
aa:95:6b:0e:1b:e2:1b:76:f5:16:e4:e4:7b:ca:f3:91:a7:c6:
f6:ab:23:30:7d:d8:c7:82:a6:ac:e6:22:cd:1a:5b:cf:a0:12:
c9:3e:89:38:7a:0f:83:35:4e:e4:e4:78:f1:2a:37:bd:4c:1c:
21:9d:5d:48:49:9e:2b:90:9d:e2:fd:d2:67:e9:f2:8b:4c:c4:
ca:d3:43:b4:5c:2d:38:80:0f:3f:a3:cc:36:72:71:03:b8:0e:
a6:a3:74:bc:f6:77:fc:ef:3d:1e:f0:73:c8:ba:87:82:e4:13:
c7:e3:bd:2e:17:6c:0d:7e:2e:a1:7d:e8:d5:e3:77:94:f5:55:
bb:36:99:d3:50:32:86:d0:c6:fc:bf:22:ad:a2:eb:d3:49:71:
0e:69:33:92:9b:15:e2:55:10:cb:ed:fd:b3:e6:11:fc:6a:0a:
ea:35:66:aa:92:5d:22:3f:23:ea:77:57:04:80:5e:43:0a:67:
77:75:c7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:00:17 2025 by rpki-client