Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214432.roa
File: AS214432.roa (raw, json)
Hash identifier: FcdpDKd7dZLSjXZJqkjgz8S6XmWqZ+82LSs0Cth6bPw=
Subject key identifier: 5C:9C:8F:B8:FE:AC:36:F0:5F:D0:49:1D:85:19:C2:4F:E8:11:D3:57
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5F526B52E5B5FC76E37A71B46FA2D00C18B7522E
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214432.roa
Signing time: Wed 16 Jul 2025 10:38:02 +0000
ROA not before: Wed 16 Jul 2025 10:33:02 +0000
ROA not after: Wed 15 Jul 2026 10:38:02 +0000
asID: 214432
IP address blocks: 143.20.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Jul 2025 00:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:52:6b:52:e5:b5:fc:76:e3:7a:71:b4:6f:a2:d0:0c:18:b7:52:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 16 10:33:02 2025 GMT
Not After : Jul 15 10:38:02 2026 GMT
Subject: CN=5C9C8FB8FEAC36F05FD0491D8519C24FE811D357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:96:fd:e7:4d:4f:bb:39:92:39:d7:19:1a:e2:
92:16:01:6f:2e:f8:4a:df:52:d8:b3:22:4c:da:48:
4b:9d:c1:52:a2:b3:4c:6f:d4:17:2a:4e:7a:83:52:
71:38:d2:90:b5:70:d3:1b:9c:3e:54:80:5c:19:e7:
62:d4:7f:7e:88:f1:4a:7a:5a:10:3f:51:ff:92:a6:
d0:23:b9:67:cc:02:de:06:e7:97:aa:9f:fc:7a:1c:
73:8c:a5:27:47:e3:2d:ef:fe:a3:15:a8:33:55:1b:
24:a8:61:43:f5:01:9f:87:f2:40:3e:69:31:47:24:
d4:fa:09:30:12:43:fb:d5:bd:05:34:22:ed:0b:f8:
ad:bd:e0:da:ad:a9:c8:5c:3f:e7:07:63:e7:3f:d9:
0a:5c:b5:6f:6b:c2:ec:9c:cd:ce:66:f2:72:ca:24:
d3:5f:42:bf:b5:c2:28:0f:5d:c6:fd:f6:ca:30:1b:
c4:13:cf:ea:91:50:44:54:36:1c:66:46:f6:92:4b:
ad:55:c8:c6:40:e7:a1:84:41:90:e5:cb:3f:4d:2d:
5c:17:cf:fa:18:cf:c9:c0:86:b9:2e:ab:5c:5d:78:
52:5f:43:76:f1:c0:00:38:e6:58:52:a3:47:c9:aa:
83:27:de:27:7d:c4:a7:44:da:0c:0c:cd:56:58:a1:
53:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9C:8F:B8:FE:AC:36:F0:5F:D0:49:1D:85:19:C2:4F:E8:11:D3:57
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.11.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:ca:d4:95:4b:a5:96:eb:e3:57:ba:3e:9a:2f:0c:35:27:cc:
93:e5:a4:7a:51:0d:15:7f:88:ec:7c:cb:2b:29:85:05:11:16:
8b:87:87:b1:5f:0e:e6:7b:9a:b9:e8:60:b3:90:89:a2:c2:86:
a5:bf:44:3c:d0:a9:d6:83:07:0c:20:52:15:b8:57:3b:4b:b8:
f6:0a:4a:1c:b2:f6:10:2d:52:26:2b:8f:97:3a:f3:6d:53:b2:
93:7d:21:6f:eb:6b:cb:98:68:68:a7:d1:da:0c:4f:55:3d:b4:
bb:fc:8a:c2:f4:64:0b:b3:96:7a:55:af:e1:68:9c:f3:44:4c:
16:75:0c:6f:a3:2c:82:6f:a9:72:58:c6:39:fa:06:7f:9d:db:
a0:a0:78:08:1e:a7:f9:56:6a:17:57:f1:40:d2:dc:34:ac:63:
ac:75:b2:6d:ac:51:8b:76:45:1d:79:7f:18:31:73:85:6e:9a:
4b:13:b3:35:87:d2:e4:96:30:49:fe:fa:2b:45:63:13:73:5b:
1c:29:3f:51:55:64:60:f8:27:87:4e:87:0d:aa:2d:6e:bd:44:
68:5c:50:11:a9:df:7a:21:57:78:99:17:01:57:31:fa:23:39:
56:3e:ea:aa:dc:e2:0b:be:a2:6d:7a:d4:0f:d7:50:51:04:06:
e0:0a:b0:f8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUX1JrUuW1/HbjenG0b6LQDBi3Ui4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNTA3MTYxMDMzMDJaFw0yNjA3MTUxMDM4MDJaMDMxMTAvBgNV
BAMTKDVDOUM4RkI4RkVBQzM2RjA1RkQwNDkxRDg1MTlDMjRGRTgxMUQzNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5lv3nTU+7OZI51xka4pIWAW8u
+ErfUtizIkzaSEudwVKis0xv1BcqTnqDUnE40pC1cNMbnD5UgFwZ52LUf36I8Up6
WhA/Uf+SptAjuWfMAt4G55eqn/x6HHOMpSdH4y3v/qMVqDNVGySoYUP1AZ+H8kA+
aTFHJNT6CTASQ/vVvQU0Iu0L+K294NqtqchcP+cHY+c/2QpctW9rwuyczc5m8nLK
JNNfQr+1wigPXcb99sowG8QTz+qRUERUNhxmRvaSS61VyMZA56GEQZDlyz9NLVwX
z/oYz8nAhrkuq1xdeFJfQ3bxwAA45lhSo0fJqoMn3id9xKdE2gwMzVZYoVPvAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUXJyPuP6sNvBf0EkdhRnCT+gR01cwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjE0NDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxQL
MA0GCSqGSIb3DQEBCwUAA4IBAQDYytSVS6WW6+NXuj6aLww1J8yT5aR6UQ0Vf4js
fMsrKYUFERaLh4exXw7me5q56GCzkImiwoalv0Q80KnWgwcMIFIVuFc7S7j2Ckoc
svYQLVImK4+XOvNtU7KTfSFv62vLmGhop9HaDE9VPbS7/IrC9GQLs5Z6Va/haJzz
REwWdQxvoyyCb6lyWMY5+gZ/ndugoHgIHqf5VmoXV/FA0tw0rGOsdbJtrFGLdkUd
eX8YMXOFbppLE7M1h9LkljBJ/vorRWMTc1scKT9RVWRg+CeHTocNqi1uvURoXFAR
qd96IVd4mRcBVzH6IzlWPuqq3OILvqJtetQP11BRBAbgCrD4
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:28:14 2025 by rpki-client