Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3139302e302f32342d3234203d3e20383334.roa
File: 352e3232362e3139302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: al7WrAAHKX5heUTeU8d7GEhnF45NtTR/wEqGpcaO18o=
Subject key identifier: D6:FA:45:6E:BF:61:94:6F:0E:BB:E6:65:DD:FC:1B:77:F8:94:BE:BC
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 740CC186E3E4084366743A1906395CCA571E8116
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3139302e302f32342d3234203d3e20383334.roa
Signing time: Sat 25 Jan 2025 13:44:03 +0000
ROA not before: Sat 25 Jan 2025 13:39:03 +0000
ROA not after: Sat 24 Jan 2026 13:44:03 +0000
asID: 834
IP address blocks: 5.226.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Jan 2025 09:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:0c:c1:86:e3:e4:08:43:66:74:3a:19:06:39:5c:ca:57:1e:81:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Jan 25 13:39:03 2025 GMT
Not After : Jan 24 13:44:03 2026 GMT
Subject: CN=D6FA456EBF61946F0EBBE665DDFC1B77F894BEBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:e5:ab:66:6a:db:95:c3:8a:b9:44:b1:05:
ac:da:c6:ca:d4:5a:89:bd:48:3d:39:cb:75:05:40:
79:90:07:ad:bb:a1:3b:30:3d:27:85:0d:35:63:2f:
5e:e4:d5:91:32:e9:25:e6:45:75:82:39:f4:08:6d:
93:3d:49:cc:96:76:65:1e:1d:f5:41:d7:60:b2:da:
8f:c2:78:ea:02:b5:bb:65:99:73:93:00:77:18:0d:
6f:00:0c:df:ad:79:95:65:3d:e5:52:f3:f0:47:b6:
e0:4e:c6:72:d1:96:83:9f:28:7f:05:1d:9b:ac:79:
8a:7e:18:b3:74:51:cb:a3:37:99:6f:90:84:b4:26:
32:c6:98:e9:49:3e:fb:81:55:c7:8a:87:c0:0c:01:
51:70:d2:fd:6a:09:1c:72:2d:00:4b:07:1c:f6:be:
99:7c:fb:87:5e:3b:06:bf:49:44:64:4c:22:50:34:
a7:2c:d8:58:4d:cf:35:4e:76:f1:d4:f2:54:a9:bb:
61:2b:ed:1b:de:5a:16:26:8f:be:72:84:c8:fb:8f:
ef:fd:2f:43:dd:5e:f0:95:1d:42:18:6b:82:79:ec:
70:04:5a:64:dc:2d:43:b0:19:4d:f2:1e:6f:f9:73:
eb:f7:44:ac:da:eb:b9:e6:a1:25:93:32:24:eb:b6:
89:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FA:45:6E:BF:61:94:6F:0E:BB:E6:65:DD:FC:1B:77:F8:94:BE:BC
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3139302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.190.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:ce:f1:92:29:6e:e4:12:6b:e4:6a:50:6b:55:2c:35:ad:8b:
23:0f:f1:de:3f:d6:8e:41:7f:45:e7:df:03:08:f2:4a:3e:53:
46:67:8c:c7:cb:b1:e2:d3:5b:30:29:10:d2:be:9e:b8:58:1c:
28:ff:dc:36:b9:d4:01:a9:67:2c:bb:af:79:9d:63:94:ac:48:
b2:d9:25:a0:f1:64:58:1b:be:05:63:f3:32:07:a0:ed:cd:91:
b1:32:64:94:1d:18:29:cc:9e:8d:96:d7:d4:7d:00:71:76:02:
7f:fc:2f:fd:fe:b2:a6:00:5f:ef:a9:fb:a6:9d:ea:c7:52:60:
ca:1e:db:3b:5c:d5:77:e8:f2:38:b9:46:55:ee:09:01:32:98:
98:49:6a:20:1e:3e:7f:88:35:80:72:57:16:df:a9:6f:d9:37:
13:46:a4:4f:f7:e2:86:54:6d:af:bd:c0:2b:28:b5:99:0f:a1:
90:39:5c:68:91:e9:4c:6a:e8:d1:ff:b0:e1:56:f4:f8:8a:dc:
8e:dc:23:02:3b:65:12:c6:ca:33:96:3e:12:a4:41:54:b3:18:
a1:3b:75:bb:3d:07:5c:48:ae:1d:c8:b0:30:97:3b:d0:67:9f:
1f:c5:c7:1c:c1:f4:2b:d9:28:c6:b8:53:6b:87:47:d1:15:9a:
87:3d:98:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:17:02 2025 by rpki-client