Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38362e302f32332d3234203d3e20383334.roa
File: 34332e3233302e38362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: W85P02jh+mnPIuiat9h/TF6oIJ9MRVKLAvKJzmnWvNo=
Subject key identifier: AC:D1:DE:34:B9:3D:F1:57:8D:4A:52:2B:5D:58:E6:08:24:0C:7A:27
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 0D14F8984D16A0F5818C873E0D3F8FDC297562BA
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38362e302f32332d3234203d3e20383334.roa
Signing time: Mon 17 Mar 2025 11:15:46 +0000
ROA not before: Mon 17 Mar 2025 11:10:46 +0000
ROA not after: Mon 16 Mar 2026 11:15:46 +0000
asID: 834
IP address blocks: 43.230.86.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 03:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:14:f8:98:4d:16:a0:f5:81:8c:87:3e:0d:3f:8f:dc:29:75:62:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Mar 17 11:10:46 2025 GMT
Not After : Mar 16 11:15:46 2026 GMT
Subject: CN=ACD1DE34B93DF1578D4A522B5D58E608240C7A27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:72:65:87:09:00:e9:15:73:6a:7e:3b:ce:46:
2d:1a:20:b9:f0:2f:5b:2a:45:46:e7:19:45:a4:4c:
e6:cf:9a:58:27:6e:81:83:73:ba:84:60:a3:1e:2c:
33:76:d7:50:11:ba:f5:04:6d:8f:1f:c6:53:ae:0e:
45:b2:cd:2b:e7:1f:88:1c:b6:71:a2:3b:ab:95:4a:
d3:15:cd:d7:6c:4c:6a:e5:ed:e1:c8:2d:fb:c8:fc:
1d:b9:e5:51:62:a9:d9:71:0a:35:76:16:ad:57:31:
1e:61:7a:f6:cf:0c:f7:00:4c:58:f8:86:ea:23:78:
c0:90:3d:6d:27:40:df:0b:06:f7:d1:13:1b:01:f4:
72:ba:c5:34:83:85:da:5e:96:1f:2d:68:f9:e9:76:
df:88:c4:74:68:62:d7:e5:e8:25:e8:6e:2c:a4:a0:
78:2e:8d:9c:af:cf:33:70:10:46:d0:25:89:eb:b1:
46:82:2e:b0:06:1f:07:94:48:46:37:eb:6a:5e:03:
f8:7a:8b:53:2d:8a:0c:15:e1:82:c4:4a:74:42:b1:
d3:4b:86:b7:54:45:92:cf:c8:2d:6a:12:e0:6d:8b:
28:71:c3:25:ed:84:3d:9a:7b:91:93:65:21:8e:74:
87:01:3d:27:52:56:54:46:7e:fc:e9:0c:3e:e9:85:
f6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D1:DE:34:B9:3D:F1:57:8D:4A:52:2B:5D:58:E6:08:24:0C:7A:27
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.86.0/23
Signature Algorithm: sha256WithRSAEncryption
19:b3:fe:40:15:5a:66:e1:71:e4:9b:51:ce:08:45:bb:06:8d:
33:3a:08:02:22:52:13:cb:67:60:28:ea:4b:7b:20:df:e1:a2:
a4:cb:6b:e1:ce:0f:2b:12:3f:3e:85:22:9b:3b:58:17:6a:06:
b0:28:6c:88:cd:85:ce:27:c5:af:a8:15:aa:f3:51:1d:f5:62:
0d:b5:ba:a1:e4:b3:c9:ef:6a:24:74:89:77:f0:11:6f:20:c0:
c0:d2:ca:9b:d2:b8:bb:50:3e:cf:7c:04:bb:75:db:65:f8:d8:
3f:9d:b4:85:ae:26:09:a6:e5:30:e9:8a:5d:10:87:46:cb:f5:
3b:98:4f:e2:3d:a1:90:16:ef:48:e6:4d:c5:9a:b7:84:0c:38:
05:3a:c8:0c:5a:74:25:1f:b3:d7:dc:42:b4:4f:c0:dd:94:30:
a9:e2:0f:19:fb:52:ab:76:7a:5f:c0:13:71:e1:2e:49:47:12:
61:fd:a6:2a:cb:1f:a0:0a:cc:a7:2b:95:8a:8f:b6:a4:c4:8d:
10:df:04:7b:42:24:61:31:d4:ac:ef:4d:d8:7d:6e:64:0f:cb:
7a:70:b1:1f:2e:58:0c:ae:2d:b2:a1:cb:e3:c4:b2:e1:20:a9:
dd:b8:e3:56:dc:8e:e3:93:35:2e:3e:b5:81:29:3b:23:00:5a:
f5:fa:79:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:02:08 2025 by rpki-client