Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235342e302f32332d3233203d3e20383334.roa
File: 3139342e33342e3235342e302f32332d3233203d3e20383334.roa (raw, json)
Hash identifier: aW9/2RvQMkVl9aq5QZDXCMsh2ZMbwTrr6WfSAYzbGAw=
Subject key identifier: 7C:82:26:7E:BC:9C:C2:69:83:49:69:AE:13:1B:48:62:F1:91:10:88
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 5ADD4060CA236F828208C12A6C952E30F37A668A
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235342e302f32332d3233203d3e20383334.roa
Signing time: Sat 11 Jan 2025 12:13:59 +0000
ROA not before: Sat 11 Jan 2025 12:08:59 +0000
ROA not after: Sat 10 Jan 2026 12:13:59 +0000
asID: 834
IP address blocks: 194.34.254.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 12 Jan 2025 06:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:dd:40:60:ca:23:6f:82:82:08:c1:2a:6c:95:2e:30:f3:7a:66:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jan 11 12:08:59 2025 GMT
Not After : Jan 10 12:13:59 2026 GMT
Subject: CN=7C82267EBC9CC269834969AE131B4862F1911088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:61:82:1e:4d:49:52:69:dd:d4:92:7d:25:e4:
98:13:ab:a7:f4:95:93:b6:83:84:be:01:7f:3f:2e:
e9:98:39:45:af:3a:7b:e7:dc:27:82:77:f2:93:ff:
cd:94:de:32:03:64:ee:72:1c:7a:ac:74:03:f8:37:
e9:97:d0:49:76:37:ac:aa:6f:a0:73:85:99:5e:43:
56:e1:72:b0:ea:8c:e0:87:20:ed:5f:48:87:d8:ff:
fb:38:2d:35:7a:e0:15:f0:18:dc:df:52:4f:b1:5c:
57:c8:5d:d6:52:72:ab:17:cb:50:dc:58:bc:8f:fe:
64:6e:fe:d0:13:5b:3a:2e:ea:6c:5d:04:c0:0a:2e:
f5:f2:e6:23:76:ad:b5:48:e9:f1:0e:8f:d5:e7:07:
d8:e3:28:9d:ee:6a:e8:8b:45:1e:ac:a1:c1:f7:8d:
5e:b5:6a:19:49:65:8f:91:0c:28:e8:6c:fe:93:eb:
2b:05:7e:54:05:2c:df:56:69:06:36:04:d4:2c:66:
01:f6:46:5c:2e:8e:7f:88:f0:6a:ac:7e:6e:25:b8:
71:9c:5c:58:4a:e3:13:91:5a:0e:b5:f8:6b:da:7e:
a0:98:de:cb:0d:af:45:b0:5f:0e:f1:5e:ff:b9:5a:
f4:67:5d:5f:8e:99:e4:a1:e2:49:68:e0:1f:89:1f:
dc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:82:26:7E:BC:9C:C2:69:83:49:69:AE:13:1B:48:62:F1:91:10:88
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235342e302f32332d3233203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.254.0/23
Signature Algorithm: sha256WithRSAEncryption
83:83:5a:d4:ad:64:09:df:92:eb:6c:34:4b:04:33:df:36:d3:
9b:fd:35:c4:51:40:1c:96:cd:e9:41:3c:1d:a6:7a:28:47:ef:
0d:47:63:10:6c:6d:4e:e4:b4:52:b2:12:cd:b6:6a:a2:e2:2c:
40:32:ed:a2:2f:26:88:44:01:13:6f:67:c0:e4:db:11:7c:f6:
24:05:36:9a:9e:20:cb:0f:41:55:93:45:e7:66:4d:04:f5:84:
43:5f:2f:38:ba:8e:37:cd:82:fe:35:92:2b:47:2d:b3:e6:07:
4f:d2:21:b2:c5:7b:48:2e:59:7d:69:8c:45:0e:f7:d9:21:fb:
bc:d5:ed:35:a8:17:cd:25:f4:65:fb:7e:a9:e8:39:90:46:86:
7a:6c:8e:b8:18:5a:1c:8c:c3:ca:4a:93:ea:ab:c1:0a:8f:03:
30:3e:2e:1b:1e:ce:01:e6:83:8d:47:10:2a:1d:0b:68:ac:43:
95:77:47:9f:22:2c:ac:91:95:3f:77:b6:20:fc:45:20:83:7d:
cd:02:09:36:bb:13:e1:e0:46:a8:7f:1c:7c:59:98:51:4a:07:
cb:7b:a5:37:e4:4f:5d:86:b4:62:9a:2c:0e:ed:7f:24:96:af:
74:f0:31:2f:81:27:b9:df:7b:c8:78:8f:0e:30:25:54:47:20:
84:eb:02:af
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUWt1AYMojb4KCCMEqbJUuMPN6ZoowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNTAxMTExMjA4NTlaFw0yNjAxMTAxMjEzNTlaMDMxMTAvBgNV
BAMTKDdDODIyNjdFQkM5Q0MyNjk4MzQ5NjlBRTEzMUI0ODYyRjE5MTEwODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgYYIeTUlSad3Ukn0l5JgTq6f0
lZO2g4S+AX8/LumYOUWvOnvn3CeCd/KT/82U3jIDZO5yHHqsdAP4N+mX0El2N6yq
b6BzhZleQ1bhcrDqjOCHIO1fSIfY//s4LTV64BXwGNzfUk+xXFfIXdZScqsXy1Dc
WLyP/mRu/tATWzou6mxdBMAKLvXy5iN2rbVI6fEOj9XnB9jjKJ3uauiLRR6socH3
jV61ahlJZY+RDCjobP6T6ysFflQFLN9WaQY2BNQsZgH2Rlwujn+I8Gqsfm4luHGc
XFhK4xORWg61+GvafqCY3ssNr0WwXw7xXv+5WvRnXV+OmeSh4klo4B+JH9zJAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUfIImfrycwmmDSWmuExtIYvGREIgwHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt
N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzOTM0MmUzMzM0MmUzMjM1
MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHCIv4w
DQYJKoZIhvcNAQELBQADggEBAIODWtStZAnfkutsNEsEM98205v9NcRRQByWzelB
PB2meihH7w1HYxBsbU7ktFKyEs22aqLiLEAy7aIvJohEARNvZ8Dk2xF89iQFNpqe
IMsPQVWTRedmTQT1hENfLzi6jjfNgv41kitHLbPmB0/SIbLFe0guWX1pjEUO99kh
+7zV7TWoF80l9GX7fqnoOZBGhnpsjrgYWhyMw8pKk+qrwQqPAzA+LhsezgHmg41H
ECodC2isQ5V3R58iLKyRlT93tiD8RSCDfc0CCTa7E+HgRqh/HHxZmFFKB8t7pTfk
T12GtGKaLA7tfySWr3TwMS+BJ7nfe8h4jw4wJVRHIITrAq8=
-----END CERTIFICATE-----
Generated at Fri Jun 6 22:23:13 2025 by rpki-client