Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235342e302f32342d3234203d3e20383334.roa
File: 3139342e33342e3235342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Wr9ZmQuRYd9Se3ePz5vs0aZnrmZ//bn7Kz0Wdbgx7gI=
Subject key identifier: 47:C7:3B:BC:47:F4:3C:C4:50:88:98:08:A2:7D:42:0A:23:02:5E:F7
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 1E67793496F40ADEEE17D42F03D845BF8955E13A
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235342e302f32342d3234203d3e20383334.roa
Signing time: Sun 12 Jan 2025 06:38:47 +0000
ROA not before: Sun 12 Jan 2025 06:33:47 +0000
ROA not after: Sun 11 Jan 2026 06:38:47 +0000
asID: 834
IP address blocks: 194.34.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 Jan 2025 16:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:67:79:34:96:f4:0a:de:ee:17:d4:2f:03:d8:45:bf:89:55:e1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jan 12 06:33:47 2025 GMT
Not After : Jan 11 06:38:47 2026 GMT
Subject: CN=47C73BBC47F43CC450889808A27D420A23025EF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:cd:92:88:af:37:14:4a:5f:10:38:9c:d1:
9e:c8:f5:5f:6f:2f:31:d4:71:5f:e4:77:b2:66:ab:
e6:0c:1b:30:50:e4:b7:0f:0f:d9:bb:e0:07:09:89:
b7:cf:dd:09:2b:15:d8:b0:96:5f:28:c7:a4:81:39:
88:ad:f6:7b:07:53:34:d6:42:05:c8:1d:87:4e:e5:
50:aa:3d:4d:d5:1e:31:89:2e:2d:ba:fb:7f:15:c9:
0d:71:1d:18:f2:2e:75:f0:c2:a4:d5:30:13:85:f7:
c9:f5:14:d5:b3:c7:75:a4:a6:61:70:6d:fe:95:f1:
37:3b:35:c0:c8:60:7f:75:e4:ad:44:0e:1c:65:70:
ce:0b:25:74:3b:b0:b8:46:0b:2b:94:3a:f4:c4:ee:
74:7e:5b:de:5e:8b:a0:d5:f4:ab:7e:ee:16:d6:af:
3e:ff:82:df:80:f7:fb:b6:1d:3f:35:9c:f1:73:9a:
50:4d:77:1f:de:74:6c:7f:b5:32:ec:69:68:41:3d:
eb:b2:97:08:9e:7f:f7:50:21:26:e7:31:88:b3:e4:
52:8b:56:2c:b7:d4:31:2d:f2:2d:de:ff:ba:89:bd:
70:48:c4:21:c1:77:f2:cd:7a:c7:68:5c:20:a2:f9:
e4:1a:5d:9f:d9:41:01:86:a6:55:15:b7:96:89:2d:
20:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C7:3B:BC:47:F4:3C:C4:50:88:98:08:A2:7D:42:0A:23:02:5E:F7
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.254.0/24
Signature Algorithm: sha256WithRSAEncryption
80:93:73:f6:e0:2e:8e:a2:f7:5e:7e:ef:29:12:26:74:a7:80:
34:2a:bd:1a:3b:f9:c2:83:54:ad:d1:70:2c:85:ab:43:92:ad:
71:59:1e:56:89:43:7f:33:8f:71:44:5f:3a:c4:39:dd:81:08:
d0:e4:23:8e:c3:49:99:a9:e6:0b:6c:24:ba:86:82:d9:65:93:
47:60:63:95:62:e0:5d:f3:16:4b:9e:1d:7a:9a:a3:4a:08:02:
76:ad:42:a9:c2:a9:81:29:0e:f0:c7:5a:88:c4:fa:f1:40:cb:
63:82:86:c1:4d:4f:49:73:f5:94:2b:5a:6a:44:1e:6a:7d:51:
18:9b:c7:26:04:a2:f4:73:09:fd:5e:0d:cd:20:1e:cf:43:f0:
7e:af:d2:e4:2b:16:aa:be:84:e5:a8:ef:ad:a1:56:3a:e3:29:
3b:a0:28:fd:99:9f:65:a5:1a:ca:8b:4f:72:4d:21:d4:58:9a:
4f:cc:54:58:07:b8:90:ce:89:a5:2c:10:0b:ce:ec:65:10:d4:
6b:7d:b8:e6:a0:37:6b:89:50:cf:8d:6a:4a:37:ee:2e:da:41:
14:a1:60:75:be:70:44:18:ca:9d:4a:af:77:e9:a2:db:44:82:
71:e7:f7:de:0c:aa:19:dc:2d:67:f8:8d:23:0f:34:94:49:63:
07:e7:cc:89
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUHmd5NJb0Ct7uF9QvA9hFv4lV4TowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNTAxMTIwNjMzNDdaFw0yNjAxMTEwNjM4NDdaMDMxMTAvBgNV
BAMTKDQ3QzczQkJDNDdGNDNDQzQ1MDg4OTgwOEEyN0Q0MjBBMjMwMjVFRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+bs2SiK83FEpfEDic0Z7I9V9v
LzHUcV/kd7Jmq+YMGzBQ5LcPD9m74AcJibfP3QkrFdiwll8ox6SBOYit9nsHUzTW
QgXIHYdO5VCqPU3VHjGJLi26+38VyQ1xHRjyLnXwwqTVMBOF98n1FNWzx3WkpmFw
bf6V8Tc7NcDIYH915K1EDhxlcM4LJXQ7sLhGCyuUOvTE7nR+W95ei6DV9Kt+7hbW
rz7/gt+A9/u2HT81nPFzmlBNdx/edGx/tTLsaWhBPeuylwief/dQISbnMYiz5FKL
Viy31DEt8i3e/7qJvXBIxCHBd/LNesdoXCCi+eQaXZ/ZQQGGplUVt5aJLSB3AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUR8c7vEf0PMRQiJgIon1CCiMCXvcwHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt
N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzOTM0MmUzMzM0MmUzMjM1
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADCIv4w
DQYJKoZIhvcNAQELBQADggEBAICTc/bgLo6i915+7ykSJnSngDQqvRo7+cKDVK3R
cCyFq0OSrXFZHlaJQ38zj3FEXzrEOd2BCNDkI47DSZmp5gtsJLqGgtllk0dgY5Vi
4F3zFkueHXqao0oIAnatQqnCqYEpDvDHWojE+vFAy2OChsFNT0lz9ZQrWmpEHmp9
URibxyYEovRzCf1eDc0gHs9D8H6v0uQrFqq+hOWo762hVjrjKTugKP2Zn2WlGsqL
T3JNIdRYmk/MVFgHuJDOiaUsEAvO7GUQ1Gt9uOagN2uJUM+Nako37i7aQRShYHW+
cEQYyp1Kr3fpottEgnHn994MqhncLWf4jSMPNJRJYwfnzIk=
-----END CERTIFICATE-----
Generated at Fri Jun 6 22:31:16 2025 by rpki-client