Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138382e302f32342d3234203d3e20383334.roa
File: 352e3232362e3138382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: dNCENuIOOWUMTqqxUFPrWHmKdr3cGHo2ZkIEWm7MzAM=
Subject key identifier: 93:66:9A:7A:D8:0C:8A:7E:B3:50:47:50:1D:43:A5:55:45:68:8F:FE
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 050868C03C99A34EEFB21BA601B064733C9C480B
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138382e302f32342d3234203d3e20383334.roa
Signing time: Sat 25 Jan 2025 13:44:03 +0000
ROA not before: Sat 25 Jan 2025 13:39:03 +0000
ROA not after: Sat 24 Jan 2026 13:44:03 +0000
asID: 834
IP address blocks: 5.226.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 17:23:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:08:68:c0:3c:99:a3:4e:ef:b2:1b:a6:01:b0:64:73:3c:9c:48:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Jan 25 13:39:03 2025 GMT
Not After : Jan 24 13:44:03 2026 GMT
Subject: CN=93669A7AD80C8A7EB35047501D43A55545688FFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fd:f2:93:e2:b0:d1:87:31:52:be:19:84:9d:
0b:f9:27:ac:34:91:5a:00:59:42:6c:59:e6:de:e3:
99:49:2b:e9:71:e1:bb:27:0d:68:61:c5:46:f8:ad:
74:ca:24:83:cd:a6:73:89:e3:a1:2f:c5:af:84:d4:
6f:d8:44:28:ad:22:b2:04:4f:4f:39:f7:81:f3:62:
cf:7f:27:12:60:5e:91:f0:78:3d:04:bc:4d:81:9c:
88:8a:24:35:ca:08:bb:39:c4:62:3f:c6:dc:e3:a7:
b3:10:58:2e:a5:80:14:ed:85:16:1b:cc:8d:f0:6e:
0e:ac:39:b1:23:8b:4d:ee:e1:a6:f8:c9:a5:9a:8e:
16:97:1b:b2:18:da:85:b4:c0:79:f9:40:f3:69:31:
92:32:11:55:14:5e:28:f2:6c:32:35:0e:41:57:42:
59:44:ce:19:0e:ad:4d:9f:00:ce:f1:f4:d8:af:b1:
36:ed:19:3e:d9:6a:79:c8:30:cd:66:55:ef:ca:46:
0e:81:9b:ed:e5:de:7c:57:20:ff:2a:95:7e:47:ed:
d5:3b:48:6f:db:8b:c4:ad:43:0b:1b:04:5c:e7:05:
fa:4a:01:d4:61:98:17:57:c5:78:63:76:d0:b9:f3:
14:eb:55:1f:aa:1f:19:83:01:76:56:c3:aa:6a:fc:
2b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:66:9A:7A:D8:0C:8A:7E:B3:50:47:50:1D:43:A5:55:45:68:8F:FE
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.188.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:8b:97:c9:15:f3:25:79:57:68:14:0d:f8:34:a6:0c:72:1e:
e8:e1:f1:74:08:03:b1:61:dc:27:90:94:97:09:de:dd:a3:4f:
d4:62:e8:76:3b:6b:d3:55:8b:8c:e3:39:91:d4:21:94:e6:67:
d7:a7:db:12:e7:b5:5d:03:4b:4e:fb:4c:c7:a3:cf:7d:6e:15:
9b:cc:45:12:b8:17:17:7f:01:70:02:d7:99:fd:3f:d6:d2:77:
8b:c9:6f:9e:31:b1:26:be:46:d9:39:f2:26:42:ac:56:3a:5b:
b0:d9:b7:46:0f:4d:74:ef:6e:8d:e8:02:7b:39:44:13:07:c2:
3f:91:30:85:2e:ea:5b:7c:3d:3a:99:a7:44:3f:a5:7d:c5:31:
6a:96:2a:fe:f7:6e:dc:70:f7:e1:8c:5d:03:4f:6f:ff:89:29:
79:ff:ae:e7:7e:33:5f:b6:68:18:76:cc:e5:bf:f1:60:af:d3:
ea:01:4e:8c:b2:8b:81:eb:11:79:d9:34:9a:d4:4b:b0:88:3f:
26:46:d3:7f:27:d2:3c:fb:bf:48:d6:58:18:0d:76:55:07:0b:
55:76:f4:d3:54:85:ae:8d:fa:4a:75:18:70:ef:d8:db:50:37:
41:49:cf:76:ef:b9:8c:ca:4b:d3:ed:33:8e:a1:30:2a:f7:32:
54:32:06:fd
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUBQhowDyZo07vshumAbBkczycSAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk
MTZjZWVkMzAeFw0yNTAxMjUxMzM5MDNaFw0yNjAxMjQxMzQ0MDNaMDMxMTAvBgNV
BAMTKDkzNjY5QTdBRDgwQzhBN0VCMzUwNDc1MDFENDNBNTU1NDU2ODhGRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt/fKT4rDRhzFSvhmEnQv5J6w0
kVoAWUJsWebe45lJK+lx4bsnDWhhxUb4rXTKJIPNpnOJ46Evxa+E1G/YRCitIrIE
T08594HzYs9/JxJgXpHweD0EvE2BnIiKJDXKCLs5xGI/xtzjp7MQWC6lgBTthRYb
zI3wbg6sObEji03u4ab4yaWajhaXG7IY2oW0wHn5QPNpMZIyEVUUXijybDI1DkFX
QllEzhkOrU2fAM7x9NivsTbtGT7ZannIMM1mVe/KRg6Bm+3l3nxXIP8qlX5H7dU7
SG/bi8StQwsbBFznBfpKAdRhmBdXxXhjdtC58xTrVR+qHxmDAXZWw6pq/CuTAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUk2aaetgMin6zUEdQHUOlVUVoj/4wHwYDVR0j
BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0
NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G
czd0TS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGNjMDg3Mzct
OTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0NGVkLzAvMzUyZTMyMzIzNjJlMzEzODM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABeK8MA0G
CSqGSIb3DQEBCwUAA4IBAQBdi5fJFfMleVdoFA34NKYMch7o4fF0CAOxYdwnkJSX
Cd7do0/UYuh2O2vTVYuM4zmR1CGU5mfXp9sS57VdA0tO+0zHo899bhWbzEUSuBcX
fwFwAteZ/T/W0neLyW+eMbEmvkbZOfImQqxWOluw2bdGD010726N6AJ7OUQTB8I/
kTCFLupbfD06madEP6V9xTFqlir+927ccPfhjF0DT2//iSl5/67nfjNftmgYdszl
v/Fgr9PqAU6MsouB6xF52TSa1EuwiD8mRtN/J9I8+79I1lgYDXZVBwtVdvTTVIWu
jfpKdRhw79jbUDdBSc9277mMykvT7TOOoTAq9zJUMgb9
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:16:03 2025 by rpki-client