Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e31332e3135302e302f32342d3234203d3e20383334.roa
File: 34352e31332e3135302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: eZKN9tsWJ/f84YqN5wNmSeqaJC7Jm2d/kIgT7pxxUsM=
Subject key identifier: 78:23:C3:01:2E:3C:17:92:A6:98:5F:34:3F:2E:33:BC:FB:85:86:6E
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 248FF5F0DBEACF24777AAFEB87BCBB98BA07B6C1
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e31332e3135302e302f32342d3234203d3e20383334.roa
Signing time: Sun 29 Jun 2025 12:26:36 +0000
ROA not before: Sun 29 Jun 2025 12:21:36 +0000
ROA not after: Sun 28 Jun 2026 12:26:36 +0000
asID: 834
IP address blocks: 45.13.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Jul 2025 13:57:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:8f:f5:f0:db:ea:cf:24:77:7a:af:eb:87:bc:bb:98:ba:07:b6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Jun 29 12:21:36 2025 GMT
Not After : Jun 28 12:26:36 2026 GMT
Subject: CN=7823C3012E3C1792A6985F343F2E33BCFB85866E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f3:3c:db:f8:da:38:f6:25:b8:83:db:6e:9e:
25:6e:ea:07:99:a7:eb:97:c4:d6:65:f4:80:d0:1f:
13:14:88:d1:98:58:11:ed:63:f9:3d:b0:6d:94:24:
83:e1:e8:06:c9:6c:f5:24:cf:2a:fa:7c:0f:3d:42:
d8:d4:e1:a3:a6:83:8d:18:71:af:bb:b4:93:0f:6c:
70:83:a7:2c:bf:6a:63:63:53:56:1c:f3:02:23:6a:
fc:cd:05:df:80:8a:55:1e:f3:d2:e2:e7:db:b1:b9:
b9:c1:82:f4:f5:3c:fc:a6:7f:5f:d2:66:12:d9:e7:
d3:95:4c:5c:75:1d:f4:8a:32:c7:e7:0f:d4:2f:85:
9d:da:f8:f4:23:98:c4:65:13:ca:2f:46:f6:6e:e4:
69:f8:44:23:fa:ce:97:83:32:51:8c:cf:76:53:f2:
81:87:c7:4e:4f:ec:1a:88:42:4b:b3:7f:2d:8e:18:
2e:78:cb:69:10:45:57:c7:94:7f:7b:0b:82:f9:5b:
13:9d:d9:f2:5b:42:88:d4:7b:04:5c:cb:dc:8a:03:
e6:af:48:4b:80:33:a2:0f:c7:0c:d7:07:3c:f4:7c:
02:06:a9:9a:09:83:3c:91:65:c7:0d:3f:08:e8:24:
09:27:8a:4d:fc:ea:5f:11:39:9f:53:be:d5:56:c7:
2c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:23:C3:01:2E:3C:17:92:A6:98:5F:34:3F:2E:33:BC:FB:85:86:6E
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e31332e3135302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.150.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:2e:00:28:76:6d:e1:22:f0:ba:95:02:e3:01:06:b4:c7:95:
5f:1c:37:f7:4b:be:cf:99:f6:8c:bc:5f:7c:1d:2f:b1:ef:e3:
c7:00:a9:9d:d7:53:14:93:e7:58:7e:ee:ca:62:ca:07:e0:41:
0a:db:d5:b3:6f:28:0e:92:13:d4:73:bf:47:68:3e:63:2f:ea:
76:2f:6a:b0:c3:c2:ab:e6:a3:0f:66:0c:48:e6:88:c1:4d:6b:
0b:51:8d:9e:89:d2:ff:36:ab:03:b0:84:f2:f4:e8:5c:5d:b1:
7f:88:b8:b7:13:57:8c:2e:6c:3c:db:d1:8e:7f:c0:aa:46:92:
20:5b:8f:74:83:62:21:36:30:7e:cb:ad:f1:e8:6f:e2:3d:ab:
2c:48:4e:21:70:a4:3e:57:c1:3c:30:df:65:fd:cd:fc:ba:08:
4a:cf:b2:ad:f1:85:2a:86:5c:4e:57:b0:7c:25:01:74:cc:73:
e9:6e:db:c2:36:9f:ed:47:13:f9:65:d0:ec:79:17:0f:4d:7a:
d2:38:1f:ff:bc:2d:ac:41:30:35:f9:8a:38:ee:54:28:cd:a8:
b3:2d:28:f8:11:a0:07:a0:09:19:f3:eb:2c:84:4c:72:c4:62:
dc:2b:d8:2b:07:e2:41:cf:89:03:b2:d5:41:8a:e7:67:1b:c3:
d9:93:2b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:58:35 2025 by rpki-client