Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/32332e3136322e3136382e302f32342d3234203d3e203133363436.roa
File: 32332e3136322e3136382e302f32342d3234203d3e203133363436.roa (raw, json)
Hash identifier: QzCiaw5xw7n21P0CHxgbUbxrE7c5Wg0DjYBxabgjzsw=
Subject key identifier: 17:F1:E2:A4:F0:A0:51:A9:3D:C2:1B:89:5F:D9:07:22:53:C0:A2:D7
Certificate issuer: /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial: 159697508ADBCB9BA73AE8F65B7F95081D958428
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/32332e3136322e3136382e302f32342d3234203d3e203133363436.roa
Signing time: Mon 17 Mar 2025 23:32:20 +0000
ROA not before: Mon 17 Mar 2025 23:27:20 +0000
ROA not after: Mon 16 Mar 2026 23:32:20 +0000
asID: 13646
IP address blocks: 23.162.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 20:57:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:96:97:50:8a:db:cb:9b:a7:3a:e8:f6:5b:7f:95:08:1d:95:84:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Validity
Not Before: Mar 17 23:27:20 2025 GMT
Not After : Mar 16 23:32:20 2026 GMT
Subject: CN=17F1E2A4F0A051A93DC21B895FD9072253C0A2D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d5:39:79:50:9c:c6:00:a9:1c:5e:23:9a:41:
f9:7f:ad:ca:33:da:ab:92:6a:32:31:9d:14:71:7d:
52:12:44:f5:13:75:b8:cf:97:df:01:e3:b5:ff:5e:
15:4b:b9:f2:81:87:dd:7a:27:33:cc:8f:60:8e:92:
29:34:85:71:84:a5:21:68:a8:ab:24:2d:2e:d7:53:
30:36:d7:d7:1b:f7:82:b4:44:1f:d0:66:f9:b7:3d:
50:00:01:62:0f:52:d9:21:64:c6:56:4d:85:b4:6f:
b5:ed:89:5a:15:60:2c:75:7f:b8:05:49:87:0f:7e:
1d:b6:a8:70:b8:39:1e:d5:a0:90:bb:c0:d6:ba:a8:
d0:2e:fc:dd:2a:18:ed:05:ff:63:5c:33:a4:2b:1f:
9d:0f:63:fb:fe:ac:5e:8e:d2:5a:1f:75:13:c7:7a:
4a:4c:a4:0f:9e:34:46:8e:9e:51:96:33:5f:4d:0d:
30:e4:69:c2:08:7f:ba:dc:75:1b:5b:44:aa:fc:c5:
3b:8c:cc:10:c6:7e:cb:53:c1:86:ca:55:f4:72:6b:
87:aa:ed:49:c0:0b:ac:15:bd:02:d0:51:13:57:0a:
78:95:2c:00:b2:e5:30:08:cc:49:65:3c:6c:3b:ff:
28:01:98:34:10:ff:d5:89:6d:22:70:1d:a5:b5:85:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F1:E2:A4:F0:A0:51:A9:3D:C2:1B:89:5F:D9:07:22:53:C0:A2:D7
X509v3 Authority Key Identifier:
keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/32332e3136322e3136382e302f32342d3234203d3e203133363436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.162.168.0/24
Signature Algorithm: sha256WithRSAEncryption
91:8b:38:5d:ca:7a:1f:b3:f2:5e:2d:c4:f9:a7:03:ce:a4:52:
fe:3f:fd:f2:e4:32:00:b4:48:0e:f1:bf:9c:3c:30:d4:f7:9f:
8d:81:b9:23:a3:d3:1b:f0:a7:5e:ca:c1:fc:76:e2:92:62:67:
5b:b9:20:64:8e:ef:d5:cd:c9:b2:dc:40:08:b7:c6:82:56:ed:
f2:87:03:b8:38:49:de:13:83:26:83:c6:53:f8:03:b9:50:ea:
de:a2:47:83:f2:12:29:b9:69:d9:20:f3:71:eb:0e:10:95:65:
5e:0e:d8:06:17:ee:ea:8a:bb:79:2f:69:de:8a:79:b0:a0:07:
08:a0:23:2d:63:3b:61:c3:26:a7:6f:1f:05:0d:ad:89:96:3d:
e0:7f:60:b0:95:50:ea:ec:cb:6c:2e:25:0d:a6:f2:5b:0e:d8:
48:78:3e:92:ac:2e:47:bb:05:75:27:88:39:cf:1e:ea:ae:a2:
46:75:7c:ff:52:e2:6a:33:83:d8:0a:c7:5f:4b:b9:2d:b4:28:
f7:31:96:87:6e:a0:be:c5:a2:e8:f8:22:fb:0c:cf:a0:b1:55:
98:13:e8:8a:60:39:51:59:52:d8:e2:05:99:8c:65:ff:9d:c1:
b5:ef:77:62:7f:74:7b:f7:81:fc:eb:76:73:6b:44:c7:f9:f6:
aa:31:98:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:29 2025 by rpki-client