Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130342e302f32342d3234203d3e203634323637.roa
File: 33312e32322e3130342e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier: DxQtQ5ZOZXctXf9Xjz6yIOzXf+xxl1g5kg59Egii/os=
Subject key identifier: 5B:A1:A7:3C:92:C2:07:D5:F9:4D:A5:74:6E:9D:E7:46:0E:C5:10:35
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 2BBC0F8E636AE78F57F8E44426F92C850F6B54E4
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130342e302f32342d3234203d3e203634323637.roa
Signing time: Mon 16 Dec 2024 14:55:33 +0000
ROA not before: Mon 16 Dec 2024 14:50:33 +0000
ROA not after: Mon 15 Dec 2025 14:55:33 +0000
asID: 64267
IP address blocks: 31.22.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 14:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:bc:0f:8e:63:6a:e7:8f:57:f8:e4:44:26:f9:2c:85:0f:6b:54:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Dec 16 14:50:33 2024 GMT
Not After : Dec 15 14:55:33 2025 GMT
Subject: CN=5BA1A73C92C207D5F94DA5746E9DE7460EC51035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:ff:13:40:b5:f1:a1:5f:52:cf:97:cf:e9:
f0:85:0c:f9:8a:2b:27:fe:80:d7:fa:c4:d9:64:07:
fb:7a:b8:6a:70:4b:9d:eb:24:70:61:1a:0e:23:d5:
02:a6:5e:ce:6a:ce:95:7b:3a:9f:22:03:1e:cf:ce:
07:bd:ae:64:d1:a0:68:33:18:65:d8:6f:d7:a3:83:
a1:a6:b5:2a:4f:8e:1b:46:49:df:fb:66:cd:e7:6a:
f5:f0:e2:4e:fd:a8:21:95:b6:7e:38:f1:dc:5a:b5:
96:88:e3:64:46:0a:6a:bf:22:30:4e:c3:33:20:4c:
75:fe:29:74:c0:52:ce:95:c3:b0:a9:2a:81:e9:ff:
dd:b7:22:fe:c7:46:fb:d8:11:65:85:20:0e:87:34:
8e:c8:34:c9:27:1f:86:ae:af:0f:91:3a:e1:46:99:
69:1e:a6:55:92:c4:6d:58:0d:70:0a:00:64:12:88:
a9:e5:bd:16:16:67:2e:ff:aa:fd:f8:bd:9b:e1:35:
fc:8e:30:14:fd:c4:c9:c4:8f:5a:52:68:25:3c:88:
49:a9:6b:80:d1:07:bc:39:89:1f:1b:c5:58:72:51:
27:8d:e8:8f:c2:7c:34:ae:f5:c2:68:7e:de:ec:e9:
a9:c9:3e:9e:f3:71:0a:bb:b8:17:ed:f4:6e:8a:59:
56:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A1:A7:3C:92:C2:07:D5:F9:4D:A5:74:6E:9D:E7:46:0E:C5:10:35
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130342e302f32342d3234203d3e203634323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.104.0/24
Signature Algorithm: sha256WithRSAEncryption
82:d1:bd:58:f6:b9:2a:e7:cb:bf:91:cb:45:60:9c:cc:78:ac:
bf:1c:47:1c:90:15:95:5f:2b:84:1f:93:95:83:59:53:b0:1c:
53:5f:42:f7:bc:3d:87:02:ea:9b:be:f8:a9:5e:4a:e0:24:30:
e4:21:9b:3b:ec:37:8b:87:e6:5f:c8:65:af:ea:76:37:df:67:
79:9a:60:77:e8:0f:6f:9d:66:19:9f:5f:d6:71:5f:21:3a:f2:
67:ec:4f:2d:14:cf:6f:13:de:12:69:02:1d:86:86:0d:e4:06:
ee:3d:c9:7d:94:26:a8:a1:56:2c:9c:6b:c2:c8:6c:4c:a3:b1:
ce:93:5d:6b:2e:d3:d8:28:5f:44:64:1e:a1:53:52:6b:3a:62:
5d:ab:af:55:ec:81:a0:97:d9:d2:3e:75:7e:df:da:6c:e3:90:
12:8d:9e:68:2a:c4:92:98:31:1c:22:34:2c:1f:27:80:c9:09:
0e:90:28:9c:66:83:a1:c1:8d:11:7a:6c:fb:d6:f9:17:6f:9e:
df:76:c0:7d:d9:20:b5:b8:89:d1:af:5f:9a:f1:c8:38:4a:fc:
bd:a5:db:e4:05:d8:6d:87:7e:41:e9:86:01:12:40:3f:72:45:
fc:89:c1:47:b3:06:96:39:df:5f:fd:ca:65:35:c7:33:ce:97:
51:cc:39:08
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUK7wPjmNq549X+OREJvkshQ9rVOQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw
YWVhYjI5ZDAeFw0yNDEyMTYxNDUwMzNaFw0yNTEyMTUxNDU1MzNaMDMxMTAvBgNV
BAMTKDVCQTFBNzNDOTJDMjA3RDVGOTREQTU3NDZFOURFNzQ2MEVDNTEwMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtu/8TQLXxoV9Sz5fP6fCFDPmK
Kyf+gNf6xNlkB/t6uGpwS53rJHBhGg4j1QKmXs5qzpV7Op8iAx7Pzge9rmTRoGgz
GGXYb9ejg6GmtSpPjhtGSd/7Zs3navXw4k79qCGVtn448dxatZaI42RGCmq/IjBO
wzMgTHX+KXTAUs6Vw7CpKoHp/923Iv7HRvvYEWWFIA6HNI7INMknH4aurw+ROuFG
mWkeplWSxG1YDXAKAGQSiKnlvRYWZy7/qv34vZvhNfyOMBT9xMnEj1pSaCU8iEmp
a4DRB7w5iR8bxVhyUSeN6I/CfDSu9cJoft7s6anJPp7zcQq7uBft9G6KWVYpAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUW6GnPJLCB9X5TaV0bp3nRg7FEDUwHwYDVR0j
BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2
NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy
cXNwMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQt
NmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2NjIwLzAvMzMzMTJlMzIzMjJlMzEzMDM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzNDMyMzYzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB8W
aDANBgkqhkiG9w0BAQsFAAOCAQEAgtG9WPa5KufLv5HLRWCczHisvxxHHJAVlV8r
hB+TlYNZU7AcU19C97w9hwLqm774qV5K4CQw5CGbO+w3i4fmX8hlr+p2N99neZpg
d+gPb51mGZ9f1nFfITryZ+xPLRTPbxPeEmkCHYaGDeQG7j3JfZQmqKFWLJxrwshs
TKOxzpNday7T2ChfRGQeoVNSazpiXauvVeyBoJfZ0j51ft/abOOQEo2eaCrEkpgx
HCI0LB8ngMkJDpAonGaDocGNEXps+9b5F2+e33bAfdkgtbiJ0a9fmvHIOEr8vaXb
5AXYbYd+QemGARJAP3JF/InBR7MGljnfX/3KZTXHM86XUcw5CA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:41:32 2025 by rpki-client