Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e20383334.roa
File: 34332e3233302e38342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: CYKVdW8tFfFdrmMBTEcD/3hvXloWNga7cc5dEDblxUA=
Subject key identifier: D8:17:89:F9:87:A8:6D:41:8E:DA:A4:56:3F:86:0D:FD:41:AE:E5:87
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 5BDA24C2D506729051957685B622122D82A675FE
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e20383334.roa
Signing time: Tue 14 Jan 2025 17:54:17 +0000
ROA not before: Tue 14 Jan 2025 17:49:17 +0000
ROA not after: Tue 13 Jan 2026 17:54:17 +0000
asID: 834
IP address blocks: 43.230.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 17:56:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:da:24:c2:d5:06:72:90:51:95:76:85:b6:22:12:2d:82:a6:75:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Jan 14 17:49:17 2025 GMT
Not After : Jan 13 17:54:17 2026 GMT
Subject: CN=D81789F987A86D418EDAA4563F860DFD41AEE587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c6:d4:6c:02:b9:d3:14:84:b4:02:26:ad:03:
a6:42:fa:c7:00:52:ce:1c:a8:0f:11:62:e2:30:2e:
14:6e:f6:f4:da:86:f1:9f:fd:47:64:cd:e6:a9:0b:
24:21:be:c9:23:c2:eb:e7:3a:50:10:66:dd:44:dd:
01:db:4e:29:65:d7:04:3c:2b:57:17:76:a3:bb:e5:
3f:47:04:a8:dd:da:d6:b7:58:e9:e0:5c:41:38:d7:
35:08:da:2b:e9:77:eb:11:d5:2e:de:90:3f:f8:b0:
b7:f4:bf:e0:47:76:45:4e:6a:fb:8c:74:26:96:41:
c1:6b:87:1b:67:98:89:c0:d9:45:f8:1a:30:5f:27:
be:db:83:10:f9:6e:bc:e8:2f:b2:cc:b8:8f:a1:05:
29:0d:84:79:36:fd:82:4d:d7:90:94:53:dd:8e:69:
50:00:51:c6:94:14:86:7b:df:ec:6a:1c:8d:d3:bf:
be:d3:93:86:77:38:b6:8b:db:d4:5e:e8:ca:52:1f:
98:cd:3e:c7:fc:25:d5:38:3d:92:23:08:72:7c:29:
69:42:1a:e6:f1:39:ea:51:6f:b6:c4:27:30:63:4d:
dc:ae:8d:b4:8d:79:dd:5d:dd:ef:c0:36:58:55:a1:
3d:b8:65:77:cf:b1:db:e8:e0:d4:9f:7c:89:df:85:
c3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:17:89:F9:87:A8:6D:41:8E:DA:A4:56:3F:86:0D:FD:41:AE:E5:87
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.84.0/24
Signature Algorithm: sha256WithRSAEncryption
91:91:ce:83:02:24:fa:70:6e:24:83:d0:01:1a:9b:db:f1:4b:
63:56:88:e7:06:c0:3c:86:37:57:a2:0b:4d:c2:a9:e8:56:22:
b2:e7:65:bc:b2:c3:24:08:0b:ac:e8:f8:4a:f5:14:d1:ef:13:
d2:5c:9a:24:78:82:4a:56:64:56:6c:86:ef:0c:26:05:17:88:
79:5e:a1:17:92:1e:50:52:b8:ad:ca:20:46:22:f2:39:6d:ce:
f8:82:f3:26:c3:e8:44:67:b1:20:e2:72:03:07:8d:ab:9d:cd:
a9:28:ba:c5:18:df:6e:6a:4f:80:19:cd:f8:9d:3b:6c:4d:df:
5c:20:99:de:5a:7f:c6:3d:01:fb:68:41:15:01:e7:72:12:00:
5c:4e:07:41:f2:ff:ce:9e:93:3e:c3:9b:53:5e:f8:c9:9f:b7:
68:a5:2a:e5:08:f7:c3:72:1f:db:1e:4e:b0:ad:c5:7f:e8:0e:
b6:48:2f:18:0b:2c:fe:79:9e:22:85:77:fb:47:f2:c2:85:08:
7d:4d:0b:15:be:c3:34:20:07:de:58:d1:2e:38:c7:7c:3f:be:
ca:f2:df:3d:67:6b:2d:5c:31:d7:38:7e:fa:2c:3f:f6:4f:ef:
ee:56:18:47:0a:f8:c0:2e:58:23:5d:f6:e4:9f:b8:9d:23:63:
c2:7d:65:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:46:13 2025 by rpki-client