Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34322e302f32342d3234203d3e2037303138.roa
File: 3134312e39382e34322e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: bEAm36OW6AmM1LRwPrtsiSSYmrS2oCmN0hJoUI4AUgo=
Subject key identifier: 2C:7D:3F:BD:1D:B1:56:65:A2:00:26:2A:6C:37:14:F5:89:D1:E5:09
Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Certificate serial: 5570B90D89C96686A60412756FCA53B83E3D19BD
Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34322e302f32342d3234203d3e2037303138.roa
Signing time: Tue 20 May 2025 16:33:37 +0000
ROA not before: Tue 20 May 2025 16:28:37 +0000
ROA not after: Tue 19 May 2026 16:33:37 +0000
asID: 7018
IP address blocks: 141.98.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 May 2025 17:09:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:70:b9:0d:89:c9:66:86:a6:04:12:75:6f:ca:53:b8:3e:3d:19:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Validity
Not Before: May 20 16:28:37 2025 GMT
Not After : May 19 16:33:37 2026 GMT
Subject: CN=2C7D3FBD1DB15665A200262A6C3714F589D1E509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:88:c9:24:33:f5:b1:9d:5f:21:8e:19:64:97:
be:84:f0:4b:31:f6:31:72:20:01:7b:d9:9d:74:2c:
9b:82:20:60:a2:87:66:8b:4f:d6:73:84:1a:90:5a:
84:82:bb:80:a5:bc:70:f6:a1:ee:a3:51:0f:7f:a7:
e1:ae:67:e0:e0:00:32:84:5d:18:23:98:3a:62:7f:
3b:a8:23:a0:62:0d:9b:6e:83:8f:b7:0a:2b:93:fd:
de:cc:29:c8:18:be:7a:47:de:b3:de:e8:86:42:93:
03:48:1e:d5:2c:73:ae:d2:aa:26:5e:bf:0d:25:43:
50:29:73:54:48:1b:e6:c0:76:23:10:8b:7e:22:6a:
37:40:d5:85:cd:2c:b9:02:db:1b:9a:ee:91:d5:ba:
be:68:00:00:7f:5c:d7:e1:13:6f:8e:b4:c4:f9:e1:
8b:75:be:c9:13:e5:22:a0:23:50:bc:b9:e9:3a:a3:
54:d7:23:ad:5c:93:7e:a7:ae:1b:96:f0:e2:60:de:
07:d5:c7:04:6d:16:d8:f3:1f:14:04:33:79:8a:c7:
fa:bb:5f:e4:e0:a6:8b:d5:1b:a0:66:e6:c8:4f:c2:
f3:f3:83:c1:8d:37:c0:a6:63:d6:ac:e8:31:b3:e3:
8c:52:35:19:71:47:0a:d2:9a:13:a3:65:7d:bb:2e:
d1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7D:3F:BD:1D:B1:56:65:A2:00:26:2A:6C:37:14:F5:89:D1:E5:09
X509v3 Authority Key Identifier:
keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34322e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.42.0/24
Signature Algorithm: sha256WithRSAEncryption
12:f4:02:c2:d9:ba:62:44:2e:f0:f9:5f:2b:4f:2c:a1:4b:fe:
14:f8:86:52:49:94:ee:c8:e0:55:2e:fc:d3:cd:eb:67:d2:5e:
ee:f1:10:16:b5:67:4f:95:9d:83:12:aa:6e:21:98:ca:04:38:
a0:f1:b3:d3:56:3a:3b:ce:ee:44:25:35:e0:73:b1:bd:1d:d8:
cb:b9:a8:b2:b0:d6:f9:d8:3b:20:5f:91:3b:f0:27:a3:e4:35:
c2:79:3b:e9:6d:1f:a4:b4:a5:cb:d3:04:01:15:a5:20:0b:fa:
ad:b5:6a:0c:99:aa:fc:d8:1d:6c:6d:e8:b7:68:65:4c:0c:74:
2e:4c:64:6b:58:72:df:1c:e5:a0:c9:b0:e4:a7:59:0c:25:e0:
29:45:6c:f8:b0:c5:62:6a:3e:74:61:7c:89:6d:b3:2b:b2:75:
50:b7:ae:7b:65:dc:14:75:6c:df:2c:b6:9c:59:8a:6d:b6:2d:
c9:7f:09:9a:b0:3c:f7:3e:86:60:5b:32:97:58:4a:f7:99:1d:
52:42:ce:1b:e9:05:5d:27:29:39:12:ec:75:8a:cb:06:28:4e:
cb:de:8c:19:0e:db:e2:56:57:d5:25:98:8a:30:a4:ba:30:f7:
b6:10:af:cb:fd:6c:ce:8f:da:47:98:67:fe:25:fc:36:68:42:
c0:54:ca:d0
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUVXC5DYnJZoamBBJ1b8pTuD49Gb0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw
YjVkNDgxMDAeFw0yNTA1MjAxNjI4MzdaFw0yNjA1MTkxNjMzMzdaMDMxMTAvBgNV
BAMTKDJDN0QzRkJEMURCMTU2NjVBMjAwMjYyQTZDMzcxNEY1ODlEMUU1MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpiMkkM/WxnV8hjhlkl76E8Esx
9jFyIAF72Z10LJuCIGCih2aLT9ZzhBqQWoSCu4ClvHD2oe6jUQ9/p+GuZ+DgADKE
XRgjmDpifzuoI6BiDZtug4+3CiuT/d7MKcgYvnpH3rPe6IZCkwNIHtUsc67SqiZe
vw0lQ1Apc1RIG+bAdiMQi34iajdA1YXNLLkC2xua7pHVur5oAAB/XNfhE2+OtMT5
4Yt1vskT5SKgI1C8uek6o1TXI61ck36nrhuW8OJg3gfVxwRtFtjzHxQEM3mKx/q7
X+TgpovVG6Bm5shPwvPzg8GNN8CmY9as6DGz44xSNRlxRwrSmhOjZX27LtHJAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQULH0/vR2xVmWiACYqbDcU9YnR5QkwHwYDVR0j
BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi
ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0
ZFNCQS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODgxYjdmMDgt
ZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJiZDMyLzAvMzEzNDMxMmUzOTM4MmUzNDMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzczMDMxMzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNYiow
DQYJKoZIhvcNAQELBQADggEBABL0AsLZumJELvD5XytPLKFL/hT4hlJJlO7I4FUu
/NPN62fSXu7xEBa1Z0+VnYMSqm4hmMoEOKDxs9NWOjvO7kQlNeBzsb0d2Mu5qLKw
1vnYOyBfkTvwJ6PkNcJ5O+ltH6S0pcvTBAEVpSAL+q21agyZqvzYHWxt6LdoZUwM
dC5MZGtYct8c5aDJsOSnWQwl4ClFbPiwxWJqPnRhfIltsyuydVC3rntl3BR1bN8s
tpxZim22Lcl/CZqwPPc+hmBbMpdYSveZHVJCzhvpBV0nKTkS7HWKywYoTsvejBkO
2+JWV9UlmIowpLow97YQr8v9bM6P2keYZ/4l/DZoQsBUytA=
-----END CERTIFICATE-----
Generated at Fri Jun 6 22:46:59 2025 by rpki-client