Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32342d3234203d3e20323135333034.roa
File: 3231322e3130332e34362e302f32342d3234203d3e20323135333034.roa (raw, json)
Hash identifier: x+zFsneByHb8r+N6ldY9/z0/OC8hSN0JgILp23SPjHI=
Subject key identifier: AD:02:A7:A1:E6:7F:F8:F2:42:32:DF:DF:2F:FE:12:68:B6:10:4F:10
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 4D62949727930B3A25C49C996610D4BE9FE52864
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32342d3234203d3e20323135333034.roa
Signing time: Tue 31 Dec 2024 13:22:15 +0000
ROA not before: Tue 31 Dec 2024 13:17:15 +0000
ROA not after: Tue 30 Dec 2025 13:22:15 +0000
asID: 215304
IP address blocks: 212.103.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 00:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:62:94:97:27:93:0b:3a:25:c4:9c:99:66:10:d4:be:9f:e5:28:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Dec 31 13:17:15 2024 GMT
Not After : Dec 30 13:22:15 2025 GMT
Subject: CN=AD02A7A1E67FF8F24232DFDF2FFE1268B6104F10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:09:d0:80:ba:7a:b0:b0:12:ef:c5:0a:18:f3:
24:2a:84:ca:8e:65:06:e9:68:99:45:eb:ec:f7:82:
35:12:0c:09:1f:e3:17:1f:5c:92:71:45:1a:ad:06:
f9:96:87:20:2d:ad:3a:56:0d:66:8c:7b:5f:99:34:
1a:c8:5e:85:8b:7e:da:5d:ee:92:fa:3e:61:9f:ae:
8f:9a:98:8f:b0:8c:6c:99:15:90:7f:33:fa:ef:29:
03:7e:68:96:ea:5e:7e:04:f2:78:23:c5:27:7a:54:
a4:88:56:f0:7e:61:c3:71:34:22:02:74:38:9c:10:
b4:ad:af:5f:5f:2c:e8:4f:54:5c:d4:01:59:b6:21:
90:5b:1d:0e:90:44:e5:df:63:3f:6a:a6:8c:3b:67:
fa:83:5b:77:f0:00:97:42:df:36:44:57:9c:a3:b2:
6e:05:fa:a6:72:a0:42:0f:3c:50:99:12:bb:75:63:
2e:81:16:cb:53:ab:d5:ae:19:07:c2:5f:86:2a:7a:
24:1a:93:dc:7e:42:97:c7:84:13:20:ff:dc:c7:6f:
c2:d4:ef:b4:fc:d2:72:a7:fb:bc:6c:d0:6c:0f:56:
c3:cc:2d:8b:6d:47:07:01:4e:2b:0b:bb:f2:21:9c:
74:2b:4a:9b:80:f2:4f:29:a8:69:79:76:e8:a3:c7:
72:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:02:A7:A1:E6:7F:F8:F2:42:32:DF:DF:2F:FE:12:68:B6:10:4F:10
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32342d3234203d3e20323135333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.46.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:92:0b:1d:89:4d:a9:2d:49:ae:d9:df:b6:f3:6e:1c:37:be:
51:e5:6e:7e:78:0f:78:4c:00:c0:38:23:f2:18:b5:20:08:61:
f7:33:f4:b9:e9:a7:60:49:ba:23:43:79:c9:56:f9:a6:36:4a:
14:f2:51:3d:84:b7:5b:ff:6a:d5:b3:28:05:0c:01:75:37:ba:
fe:fc:88:0f:36:25:ba:eb:fa:1e:d9:10:ec:ea:3d:88:fd:85:
2d:e2:81:76:e7:2c:65:45:fd:58:94:3b:0f:e8:02:aa:3c:ae:
db:da:fa:6b:80:1e:9d:e0:fe:07:45:bc:d4:5e:d4:0c:52:62:
54:5c:db:71:46:cc:69:f9:ce:a6:41:b2:bf:4b:81:6c:02:fd:
ef:eb:0b:8f:f7:8b:c8:e6:52:63:87:80:43:ec:4e:84:83:9a:
05:29:1a:33:8f:f8:71:70:c7:f1:58:70:ea:6c:dd:1b:fa:10:
3b:a1:f3:ab:57:3d:a5:6a:78:c3:79:59:56:0c:1e:7e:12:ad:
a3:4c:18:5d:db:22:f0:cf:6b:7c:42:c2:86:98:d2:a0:f8:e1:
33:0c:2d:f6:31:3d:d7:46:61:f4:29:20:11:31:00:b1:e4:2e:
8f:32:6a:35:08:5f:c6:97:0f:48:f3:9f:2f:c6:2e:59:fe:b2:
97:db:65:e8
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUTWKUlyeTCzolxJyZZhDUvp/lKGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGMxMmI0MjczODMyYjQxNTZmZTAwOTJmNmFlN2U1YjNj
ZTIzYWQ4YjAeFw0yNDEyMzExMzE3MTVaFw0yNTEyMzAxMzIyMTVaMDMxMTAvBgNV
BAMTKEFEMDJBN0ExRTY3RkY4RjI0MjMyREZERjJGRkUxMjY4QjYxMDRGMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZCdCAunqwsBLvxQoY8yQqhMqO
ZQbpaJlF6+z3gjUSDAkf4xcfXJJxRRqtBvmWhyAtrTpWDWaMe1+ZNBrIXoWLftpd
7pL6PmGfro+amI+wjGyZFZB/M/rvKQN+aJbqXn4E8ngjxSd6VKSIVvB+YcNxNCIC
dDicELStr19fLOhPVFzUAVm2IZBbHQ6QROXfYz9qpow7Z/qDW3fwAJdC3zZEV5yj
sm4F+qZyoEIPPFCZErt1Yy6BFstTq9WuGQfCX4YqeiQak9x+QpfHhBMg/9zHb8LU
77T80nKn+7xs0GwPVsPMLYttRwcBTisLu/IhnHQrSpuA8k8pqGl5duijx3KrAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUrQKnoeZ/+PJCMt/fL/4SaLYQTxAwHwYDVR0j
BBgwFoAUjBK0JzgytBVv4Akvaufls84jrYswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGJmZDY4ODItZDZiMy00YWE4LWJjMGEtNzExZDY4YmQx
OThiLzAvOEMxMkI0MjczODMyQjQxNTZGRTAwOTJGNkFFN0U1QjNDRTIzQUQ4Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pCSzBKemd5dEJWdjRBa3ZhdWZsczg0
anJZcy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGJmZDY4ODIt
ZDZiMy00YWE4LWJjMGEtNzExZDY4YmQxOThiLzAvMzIzMTMyMmUzMTMwMzMyZTM0
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzUzMzMwMzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADUZy4wDQYJKoZIhvcNAQELBQADggEBAA2SCx2JTaktSa7Z37bzbhw3vlHlbn54
D3hMAMA4I/IYtSAIYfcz9Lnpp2BJuiNDeclW+aY2ShTyUT2Et1v/atWzKAUMAXU3
uv78iA82Jbrr+h7ZEOzqPYj9hS3igXbnLGVF/ViUOw/oAqo8rtva+muAHp3g/gdF
vNRe1AxSYlRc23FGzGn5zqZBsr9LgWwC/e/rC4/3i8jmUmOHgEPsToSDmgUpGjOP
+HFwx/FYcOps3Rv6EDuh86tXPaVqeMN5WVYMHn4SraNMGF3bIvDPa3xCwoaY0qD4
4TMMLfYxPddGYfQpIBExALHkLo8yajUIX8aXD0jzny/GLln+spfbZeg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:45:39 2025 by rpki-client