Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38352e302f32342d3234203d3e20383334.roa
File: 34332e3233302e38352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: WM1ZjOcpP9++5BDqVrDRT1SIzV1l5vHIyOPTtj4BMos=
Subject key identifier: C7:75:A5:64:DC:18:08:AB:AF:21:48:B3:2C:49:CE:EF:3E:25:5C:CB
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 4951D80C6D698E22AF47738DC597B792F1A26A5C
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38352e302f32342d3234203d3e20383334.roa
Signing time: Mon 17 Mar 2025 11:15:46 +0000
ROA not before: Mon 17 Mar 2025 11:10:46 +0000
ROA not after: Mon 16 Mar 2026 11:15:46 +0000
asID: 834
IP address blocks: 43.230.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Mar 2025 08:38:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:51:d8:0c:6d:69:8e:22:af:47:73:8d:c5:97:b7:92:f1:a2:6a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Mar 17 11:10:46 2025 GMT
Not After : Mar 16 11:15:46 2026 GMT
Subject: CN=C775A564DC1808ABAF2148B32C49CEEF3E255CCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:aa:0e:af:57:75:13:e7:4b:d6:99:c4:65:91:
4c:35:fb:c0:7d:25:80:28:86:b4:9f:b3:00:3a:af:
ee:63:09:8a:d3:03:37:df:92:e8:6b:dd:e7:de:f0:
85:57:cb:e5:39:23:45:46:36:26:5b:7b:ac:c4:1a:
2d:9d:a6:88:3b:80:4c:a1:f0:e5:ed:db:f5:8c:31:
c8:85:5c:fb:83:db:8c:0a:9f:31:33:88:bf:6d:4a:
f5:be:46:86:53:b7:df:62:9f:07:31:cd:25:55:a3:
9c:68:13:5f:3b:7f:7c:9d:64:03:57:81:8d:ce:88:
5f:9a:8d:fe:b8:ee:03:aa:52:4d:71:c8:96:13:05:
c6:83:3f:0a:c2:0c:16:a9:de:a2:54:66:58:ea:af:
e7:71:e4:77:ad:c4:30:b1:44:3d:49:53:b6:be:c9:
2d:98:d7:fe:cd:0c:64:ee:60:2b:d1:45:8e:46:cb:
89:c4:60:50:af:e7:ad:a6:a7:b4:d9:54:21:e8:1c:
4c:38:d5:1d:4d:b8:94:00:83:ef:9c:9b:ea:8f:ec:
65:3d:e9:45:a8:3d:37:e0:f9:5a:8e:80:0a:f8:3c:
a5:6b:d9:22:6b:b3:95:bf:d0:59:dc:7e:4c:9a:3c:
ac:5b:84:e0:da:b5:8d:03:64:d3:05:73:3a:41:ad:
55:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:75:A5:64:DC:18:08:AB:AF:21:48:B3:2C:49:CE:EF:3E:25:5C:CB
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.85.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:45:6d:a6:d2:e2:1b:61:22:18:2f:fc:7f:55:d5:fe:c1:fb:
3d:81:4e:ec:32:c4:67:39:63:44:31:5f:8a:2e:24:c2:7e:3c:
29:81:97:81:b1:75:89:a3:37:43:c8:c1:65:e9:59:54:f0:7a:
77:8b:b4:68:66:80:73:46:8f:dd:3d:0c:c6:3d:4b:f0:b1:00:
e9:55:c6:71:bd:35:05:6c:df:9d:fd:cd:99:cb:a3:8a:58:33:
69:b1:19:16:01:63:3a:d1:5a:65:b7:53:23:67:74:02:53:44:
0d:84:b3:8a:84:d5:38:eb:f8:89:e0:bf:83:8d:0d:92:68:7a:
2c:07:44:17:7f:96:5e:72:d6:8a:29:27:bd:c0:6d:d4:90:7c:
20:79:e2:38:b6:d9:ad:7c:30:16:7c:01:ef:77:de:d5:9a:83:
01:4b:45:f7:fa:37:a4:4d:17:b4:fe:5d:9b:20:fe:e8:01:a6:
eb:56:2d:7f:24:e8:af:94:68:c6:cd:3b:12:91:8d:1d:ae:d3:
f6:42:b3:6f:8c:5c:c3:70:d1:97:30:38:95:f8:12:7d:71:90:
f7:52:3e:b8:96:28:e4:21:04:48:89:50:22:65:85:c5:26:0e:
83:69:4b:fe:88:56:20:fb:ef:52:96:90:ef:4e:27:66:e5:ca:
f6:d3:20:e5
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUSVHYDG1pjiKvR3ONxZe3kvGialwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw
YWVhYjI5ZDAeFw0yNTAzMTcxMTEwNDZaFw0yNjAzMTYxMTE1NDZaMDMxMTAvBgNV
BAMTKEM3NzVBNTY0REMxODA4QUJBRjIxNDhCMzJDNDlDRUVGM0UyNTVDQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvqg6vV3UT50vWmcRlkUw1+8B9
JYAohrSfswA6r+5jCYrTAzffkuhr3efe8IVXy+U5I0VGNiZbe6zEGi2dpog7gEyh
8OXt2/WMMciFXPuD24wKnzEziL9tSvW+RoZTt99inwcxzSVVo5xoE187f3ydZANX
gY3OiF+ajf647gOqUk1xyJYTBcaDPwrCDBap3qJUZljqr+dx5HetxDCxRD1JU7a+
yS2Y1/7NDGTuYCvRRY5Gy4nEYFCv562mp7TZVCHoHEw41R1NuJQAg++cm+qP7GU9
6UWoPTfg+VqOgAr4PKVr2SJrs5W/0FncfkyaPKxbhODatY0DZNMFczpBrVXNAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUx3WlZNwYCKuvIUizLEnO7z4lXMswHwYDVR0j
BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2
NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy
cXNwMC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQt
NmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2NjIwLzAvMzQzMzJlMzIzMzMwMmUzODM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK+ZVMA0G
CSqGSIb3DQEBCwUAA4IBAQCcRW2m0uIbYSIYL/x/VdX+wfs9gU7sMsRnOWNEMV+K
LiTCfjwpgZeBsXWJozdDyMFl6VlU8Hp3i7RoZoBzRo/dPQzGPUvwsQDpVcZxvTUF
bN+d/c2Zy6OKWDNpsRkWAWM60Vplt1MjZ3QCU0QNhLOKhNU46/iJ4L+DjQ2SaHos
B0QXf5ZectaKKSe9wG3UkHwgeeI4ttmtfDAWfAHvd97VmoMBS0X3+jekTRe0/l2b
IP7oAabrVi1/JOivlGjGzTsSkY0drtP2QrNvjFzDcNGXMDiV+BJ9cZD3Uj64lijk
IQRIiVAiZYXFJg6DaUv+iFYg++9SlpDvTidm5cr20yDl
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:47:59 2025 by rpki-client