Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235332e302f32342d3234203d3e20383334.roa
File: 3139342e33342e3235332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: pp0s2bMmZ5fHSs+gK7uZd7HQRxbnIoxm5F42oTfLqVU=
Subject key identifier: 9E:4C:02:4E:5F:A5:91:18:AA:39:74:D7:7D:F7:8B:39:61:A9:15:E9
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 18E09AC5CFF3A468C5B8862CF7D0660F35E5C4C9
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235332e302f32342d3234203d3e20383334.roa
Signing time: Tue 11 Mar 2025 00:02:53 +0000
ROA not before: Mon 10 Mar 2025 23:57:53 +0000
ROA not after: Tue 10 Mar 2026 00:02:53 +0000
asID: 834
IP address blocks: 194.34.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 12:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:e0:9a:c5:cf:f3:a4:68:c5:b8:86:2c:f7:d0:66:0f:35:e5:c4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Mar 10 23:57:53 2025 GMT
Not After : Mar 10 00:02:53 2026 GMT
Subject: CN=9E4C024E5FA59118AA3974D77DF78B3961A915E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:17:ab:39:b4:f3:23:e7:ba:4e:4c:4c:68:c0:
99:bc:37:16:95:d3:e6:a8:fe:8a:52:4f:4e:7b:9f:
fd:02:58:a3:bc:91:99:b9:68:b6:a6:de:2a:c9:4f:
83:1b:21:3d:e3:7d:59:fc:df:ae:9c:91:91:1c:e6:
c2:26:7f:41:c1:45:ec:52:56:5e:6e:d9:99:4e:64:
45:29:ec:ab:f0:ef:d7:e9:97:56:60:e0:13:1d:b0:
4a:0a:df:aa:99:5d:ee:18:93:bb:bb:2b:a7:73:e0:
d6:b7:14:d2:b6:92:f5:93:e7:a2:92:87:f5:86:1d:
04:a4:f8:e6:39:71:8d:2a:4d:0b:d0:fe:3a:06:2b:
57:6e:3a:e4:9c:50:3e:06:e6:9c:92:db:1d:0a:84:
bc:f2:24:e0:58:d7:b2:2a:c5:6d:08:e5:80:db:bb:
45:13:6a:d6:56:66:15:a9:2b:4a:38:ba:46:9a:26:
ef:4b:b3:61:8d:1f:a2:07:57:47:8f:56:17:0f:e9:
6e:b3:ae:df:50:ce:27:1f:78:8b:96:d1:a9:c6:ae:
2f:db:45:2e:0b:92:5b:80:d0:b3:5a:14:7b:cb:4e:
dd:ca:2a:48:d5:89:0f:3d:53:66:21:f7:28:c9:9d:
b5:01:c6:fd:62:4b:63:32:21:7a:69:d0:7b:30:22:
69:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4C:02:4E:5F:A5:91:18:AA:39:74:D7:7D:F7:8B:39:61:A9:15:E9
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.253.0/24
Signature Algorithm: sha256WithRSAEncryption
44:83:9e:de:60:0b:57:7e:e6:ee:95:2a:dd:ea:af:7b:95:5f:
b4:a7:fd:9d:9e:32:a9:8e:a3:64:ea:af:8b:6d:5d:73:9d:02:
41:3f:68:e1:43:8b:4c:9b:3b:b2:3a:0b:4d:5e:4b:88:5e:1e:
13:c8:31:f9:9c:7d:7f:2c:c9:79:94:c0:23:b6:f4:fb:5c:44:
67:b2:bf:ef:e2:60:f9:0c:57:33:c8:74:27:8d:d3:98:43:ec:
9d:90:7f:ee:b5:94:af:d3:58:83:fa:6d:49:7c:dc:e5:8f:81:
6d:2b:17:fe:07:6c:c7:7e:42:1a:9e:8f:7b:bd:39:af:7a:f6:
de:3f:17:74:f7:d0:55:37:ea:c1:a7:fb:ca:99:d6:70:97:1a:
a0:6a:29:ad:15:11:93:68:e5:ef:29:52:d0:b3:b1:6e:36:28:
82:6f:ad:e0:70:0e:28:56:cf:2c:d8:28:5d:be:0c:4f:f8:cd:
40:6f:28:b8:e3:f0:01:b5:99:ca:0f:8a:a5:22:2e:56:74:e6:
48:f1:d9:76:05:f7:7f:87:ed:d5:ff:bd:00:bd:40:9d:27:d0:
e1:4c:a9:7d:ed:3b:33:04:c7:7c:6d:7e:6e:e0:e8:13:70:75:
eb:3f:33:6b:f5:15:2c:d0:7b:3c:a9:b9:6a:92:e7:cd:2d:9c:
36:49:0b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:36:14 2025 by rpki-client