Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a396635303a3a2f34342d3438203d3e20313939313833.roa
File: 326131343a373538313a396635303a3a2f34342d3438203d3e20313939313833.roa (raw, json)
Hash identifier: vPHdUt6zTJQZPtUvuDazHWZzdS3b3nDIdl4G80z1THI=
Subject key identifier: FA:12:4C:76:CC:75:CE:17:12:20:92:62:6A:22:A1:57:0D:71:84:7C
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 62E60B7EEE34B819265C17CCC1E8B82D0A82F4F1
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a396635303a3a2f34342d3438203d3e20313939313833.roa
Signing time: Thu 30 Jan 2025 10:17:04 +0000
ROA not before: Thu 30 Jan 2025 10:12:04 +0000
ROA not after: Thu 29 Jan 2026 10:17:04 +0000
asID: 199183
IP address blocks: 2a14:7581:9f50::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 04 Feb 2025 00:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:e6:0b:7e:ee:34:b8:19:26:5c:17:cc:c1:e8:b8:2d:0a:82:f4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jan 30 10:12:04 2025 GMT
Not After : Jan 29 10:17:04 2026 GMT
Subject: CN=FA124C76CC75CE17122092626A22A1570D71847C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:77:1a:d1:b1:e3:7a:bc:01:91:78:71:18:e1:
a0:be:5d:da:3c:6e:65:bb:d4:50:2e:fc:f8:d5:f7:
a5:ef:bc:5b:9f:a4:e6:2e:2c:6f:a2:64:c8:80:f0:
25:6d:52:19:43:40:f2:bd:0e:bd:10:a3:df:c6:11:
50:36:38:e9:fa:44:39:08:99:94:fb:53:2a:61:9e:
28:38:8f:80:6b:27:a5:6f:08:86:a0:34:bc:34:77:
e5:0d:0a:03:63:b6:25:32:18:3b:1a:1b:40:b1:b2:
40:fe:ae:eb:d9:9d:63:6e:ee:ab:e3:c9:2f:4b:5f:
c6:f5:99:e6:55:6b:e4:02:04:26:87:5a:54:71:8a:
03:87:31:dc:a6:a8:31:ce:cd:b8:62:6b:72:ad:45:
b8:5c:ef:f4:50:44:a1:42:0f:a4:d7:5e:be:8a:80:
b2:c7:b2:68:c9:16:e6:7b:6d:dd:2c:34:a6:2e:7a:
7c:75:71:a0:6a:6c:a1:fb:43:99:4b:80:53:69:64:
8a:9a:ab:72:d4:f3:53:ee:70:6a:c0:64:7e:8a:b6:
9e:6e:1b:68:14:d5:44:ec:24:f3:0f:11:42:59:ea:
c4:12:c1:39:b3:9a:bf:40:43:09:93:0f:80:1e:a6:
b5:81:62:bc:ec:45:fd:1d:40:83:58:70:f1:8a:3e:
36:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:12:4C:76:CC:75:CE:17:12:20:92:62:6A:22:A1:57:0D:71:84:7C
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a396635303a3a2f34342d3438203d3e20313939313833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9f50::/44
Signature Algorithm: sha256WithRSAEncryption
93:14:45:3a:a4:d6:fa:5d:82:b1:d9:a8:92:43:c8:e1:05:b4:
6f:7d:6c:6d:6f:8f:01:df:8a:d4:9a:05:01:b0:94:b5:6d:61:
27:bf:8a:17:9c:80:f0:8c:4e:20:19:8a:b3:79:44:e7:fd:50:
f3:16:7a:53:08:fa:d3:2c:33:76:44:30:20:0c:32:99:ff:b3:
f8:c4:75:ca:b5:45:d4:a0:72:4e:6d:2a:d9:54:8c:1a:c5:58:
21:9a:13:97:5a:35:b3:1f:50:e2:86:04:09:cc:ec:17:ec:eb:
0c:7c:e6:c8:5d:83:8b:74:98:aa:2d:01:a8:70:84:46:16:c1:
48:42:73:ad:b9:3c:db:5a:24:c9:77:b7:b1:27:31:bd:68:71:
bd:e9:72:10:90:9f:a7:f3:d4:12:ca:a1:15:a2:85:93:6a:38:
ec:be:1b:d0:72:ad:0c:47:39:12:fc:17:23:04:82:0e:9c:6b:
0b:32:9e:97:3d:78:52:db:1f:11:ac:bb:32:0b:78:e9:ff:b7:
c6:0f:f7:73:e7:3a:44:31:37:8d:1f:17:8f:49:ca:8a:1f:a0:
f1:e4:b5:5d:8f:52:51:39:8f:81:84:e2:61:f2:cd:6c:b9:26:
6f:86:d3:cd:fe:49:ca:1b:21:0f:b9:9b:9a:bc:de:63:e0:a8:
34:52:9e:55
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUYuYLfu40uBkmXBfMwei4LQqC9PEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNTAxMzAxMDEyMDRaFw0yNjAxMjkxMDE3MDRaMDMxMTAvBgNV
BAMTKEZBMTI0Qzc2Q0M3NUNFMTcxMjIwOTI2MjZBMjJBMTU3MEQ3MTg0N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfdxrRseN6vAGReHEY4aC+Xdo8
bmW71FAu/PjV96XvvFufpOYuLG+iZMiA8CVtUhlDQPK9Dr0Qo9/GEVA2OOn6RDkI
mZT7Uyphnig4j4BrJ6VvCIagNLw0d+UNCgNjtiUyGDsaG0CxskD+ruvZnWNu7qvj
yS9LX8b1meZVa+QCBCaHWlRxigOHMdymqDHOzbhia3KtRbhc7/RQRKFCD6TXXr6K
gLLHsmjJFuZ7bd0sNKYuenx1caBqbKH7Q5lLgFNpZIqaq3LU81PucGrAZH6Ktp5u
G2gU1UTsJPMPEUJZ6sQSwTmzmr9AQwmTD4AeprWBYrzsRf0dQINYcPGKPjabAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQU+hJMdsx1zhcSIJJiaiKhVw1xhHwwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNzBmNmMt
YTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzAvMzI2MTMxMzQzYTM3MzUzODMx
M2EzOTY2MzUzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMxMzkzOTMxMzgzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHBCoUdYGfUDANBgkqhkiG9w0BAQsFAAOCAQEAkxRFOqTW+l2Csdmo
kkPI4QW0b31sbW+PAd+K1JoFAbCUtW1hJ7+KF5yA8IxOIBmKs3lE5/1Q8xZ6Uwj6
0ywzdkQwIAwymf+z+MR1yrVF1KByTm0q2VSMGsVYIZoTl1o1sx9Q4oYECczsF+zr
DHzmyF2Di3SYqi0BqHCERhbBSEJzrbk821okyXe3sScxvWhxvelyEJCfp/PUEsqh
FaKFk2o47L4b0HKtDEc5EvwXIwSCDpxrCzKelz14UtsfEay7Mgt46f+3xg/3c+c6
RDE3jR8Xj0nKih+g8eS1XY9SUTmPgYTiYfLNbLkmb4bTzf5JyhshD7mbmrzeY+Co
NFKeVQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:00 2025 by rpki-client