Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e33302e302f32332d3234203d3e203631333137.roa
File: 3231372e3231372e33302e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier: n0P/TTsD9JLqxrWY4fX8Zgh1v6KHpKl7lZM7+CjsPc8=
Subject key identifier: 9B:76:3F:2F:BE:06:E2:97:8E:B6:27:DD:88:C0:B4:F1:D5:A8:2A:5E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 188F12358B419C8FDDEDE42A0D107DEC1C8279B4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e33302e302f32332d3234203d3e203631333137.roa
Signing time: Wed 23 Jul 2025 11:31:42 +0000
ROA not before: Wed 23 Jul 2025 11:26:42 +0000
ROA not after: Wed 22 Jul 2026 11:31:42 +0000
asID: 61317
IP address blocks: 217.217.30.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Jul 2025 10:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:8f:12:35:8b:41:9c:8f:dd:ed:e4:2a:0d:10:7d:ec:1c:82:79:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 11:26:42 2025 GMT
Not After : Jul 22 11:31:42 2026 GMT
Subject: CN=9B763F2FBE06E2978EB627DD88C0B4F1D5A82A5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:20:cb:03:cf:56:50:b5:e8:4f:09:71:b3:b0:
11:a9:fb:39:a3:c4:cc:9a:d9:54:8d:76:0f:f8:e0:
fd:88:55:34:48:0b:43:8f:8e:96:7b:30:55:e1:d4:
d3:3e:dc:a2:04:d2:02:62:96:43:9f:14:98:c2:c7:
83:b8:35:44:f0:28:9d:cb:a8:dc:48:f2:6c:ec:4a:
d4:c8:56:58:92:09:51:98:2d:f2:cc:6c:9f:4a:70:
db:63:ce:f1:24:03:64:6c:93:fa:1a:69:90:c4:17:
0d:36:73:c9:39:64:c2:65:08:62:c1:11:96:ce:68:
2b:80:8b:fa:ae:ee:06:01:5b:9f:7f:cf:7e:7e:2c:
4f:e3:4b:45:15:0e:0b:89:b2:b7:99:af:41:d3:73:
6e:d6:49:15:d7:b8:47:85:ae:5d:a4:b9:e8:bb:44:
97:a4:db:dd:06:1c:79:de:a6:56:d5:d3:34:f6:6b:
ca:14:fc:10:44:e1:33:7e:1c:89:c2:52:28:dc:61:
a5:b4:69:5f:16:13:5f:67:1e:dd:3e:ef:87:e2:32:
0c:c3:89:7e:f7:f5:30:ce:f8:8c:e3:83:ba:f9:9d:
37:d6:d0:96:7e:bc:b4:1a:76:5c:c1:2a:33:df:46:
12:42:d5:8c:d5:a3:08:db:53:0b:ef:45:79:09:40:
e9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:76:3F:2F:BE:06:E2:97:8E:B6:27:DD:88:C0:B4:F1:D5:A8:2A:5E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e33302e302f32332d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.30.0/23
Signature Algorithm: sha256WithRSAEncryption
66:dc:5d:59:39:68:1e:03:5d:3a:d3:f5:c4:4e:c6:aa:be:bc:
3b:94:ad:f0:2f:04:2f:a8:7d:3d:7a:e6:c4:1a:78:ed:35:d4:
0c:f9:83:65:5d:73:b0:5b:54:fe:08:aa:7b:d8:34:b2:21:19:
65:05:a8:3f:72:c5:15:a1:bb:49:3a:2f:95:f8:79:45:b4:05:
b9:51:f2:98:b0:6f:71:64:c8:17:46:53:35:e2:1a:ab:6f:d6:
a8:27:6c:2f:51:78:fe:da:17:eb:94:5d:1e:80:05:d6:f9:37:
0a:bc:6c:0d:69:34:e3:9e:8d:e6:90:62:a1:76:b8:32:84:e9:
5d:20:4d:e5:9c:ce:e4:b9:80:d1:60:27:56:cb:77:4d:03:04:
28:5c:b9:0c:dc:43:a2:dc:e8:44:33:85:fc:7e:13:53:bd:f4:
5f:39:28:c2:d5:78:61:f4:1e:a0:10:fe:3b:ef:7c:22:5d:93:
21:ec:14:05:de:29:0c:da:29:d3:85:ca:e2:7f:af:e9:7d:9c:
76:52:a3:12:7b:56:50:bb:54:7f:65:15:32:38:e9:63:cb:cc:
2f:c6:2a:f8:ef:58:1a:e3:0b:5f:38:b5:e9:bf:92:72:67:cd:
cf:c9:50:93:2e:9d:19:24:12:cc:6c:24:44:25:e1:63:ae:3d:
0b:31:90:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 17:22:55 2025 by rpki-client