Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32342d3234203d3e203336353330.roa
File: 3231322e3130332e34362e302f32342d3234203d3e203336353330.roa (raw, json)
Hash identifier: t9QDON1eVcR3gZYWH6p3WJjbbL/s9cVQ8etTw5kRaOg=
Subject key identifier: 50:0E:42:BF:35:24:E5:23:A9:E2:83:BF:29:AA:27:69:AE:1D:ED:A3
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 3C83E41807D7C31D149A29E705947D1BF09EB428
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32342d3234203d3e203336353330.roa
Signing time: Thu 16 Jan 2025 09:22:05 +0000
ROA not before: Thu 16 Jan 2025 09:17:05 +0000
ROA not after: Thu 15 Jan 2026 09:22:05 +0000
asID: 36530
IP address blocks: 212.103.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 00:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:83:e4:18:07:d7:c3:1d:14:9a:29:e7:05:94:7d:1b:f0:9e:b4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Jan 16 09:17:05 2025 GMT
Not After : Jan 15 09:22:05 2026 GMT
Subject: CN=500E42BF3524E523A9E283BF29AA2769AE1DEDA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:2a:20:28:e5:e2:22:5b:31:cb:c1:b2:e1:be:
57:a9:87:03:a1:6b:c4:bd:cf:02:0f:cc:ad:64:87:
c0:c2:29:d9:84:0d:dd:df:c4:8a:0d:92:68:39:6d:
02:e8:89:c6:7b:3e:b1:54:c9:90:05:17:32:8b:16:
ff:e3:09:e6:09:c9:70:c4:86:df:4b:5b:20:0a:8c:
a8:e7:1d:93:15:a2:6c:9a:b4:9e:d7:2f:fd:a0:ea:
71:5b:cc:0d:bf:0b:fe:82:f2:9b:c6:a4:1c:62:dc:
df:22:87:2a:40:49:2c:fe:ad:60:46:83:ae:26:27:
4c:af:99:63:49:4d:57:06:77:fe:16:db:94:4f:85:
f3:4f:01:06:f6:ed:f9:11:b9:ec:12:2f:cb:81:58:
21:37:23:ad:d7:b3:09:50:f1:20:45:1d:1b:85:be:
ff:86:97:e4:4f:cf:06:14:83:31:b7:04:aa:a8:c7:
9d:c1:4c:bc:a1:cc:96:d3:65:94:8f:0e:03:e1:43:
59:d3:b7:02:5d:30:57:9e:e1:2b:61:17:f6:e5:97:
af:33:bb:a9:a1:25:9c:89:66:73:bb:73:0d:1f:0c:
51:77:2c:5b:ac:15:94:1c:dd:0f:b2:b7:36:d2:97:
b9:91:08:10:dd:c3:a6:63:3d:cf:d6:93:71:0e:94:
a9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0E:42:BF:35:24:E5:23:A9:E2:83:BF:29:AA:27:69:AE:1D:ED:A3
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32342d3234203d3e203336353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.46.0/24
Signature Algorithm: sha256WithRSAEncryption
64:71:97:70:d9:78:f1:de:d1:50:e8:6a:4c:55:a9:44:51:ce:
04:a4:a3:22:9f:41:1a:fc:7b:7d:8f:76:f4:cf:0f:35:47:28:
ba:20:7a:69:c0:46:08:75:f9:46:9f:de:4b:ee:8c:85:3d:a6:
53:59:8f:48:8f:a1:dd:da:42:46:a7:a6:71:6c:d8:1d:9d:67:
42:96:40:33:4f:00:5b:9b:ce:1f:7e:59:e8:ca:63:22:6f:fa:
2c:ea:a8:c3:80:9f:30:4f:6a:1a:34:2a:f2:6d:e4:1d:12:bd:
8c:0a:bd:56:70:b8:7b:5c:bc:88:df:3b:7f:80:5e:90:6f:f7:
6e:df:db:e3:be:2e:9c:88:4b:62:cb:04:b3:48:03:a5:1b:b7:
ed:0a:39:62:7f:fc:19:f5:b5:04:99:cf:37:1f:47:2e:43:49:
66:dc:1f:56:50:1a:37:5d:0a:b4:90:12:41:6b:0f:73:f6:b4:
57:ea:4a:fd:19:02:38:d6:27:cf:d0:86:d4:81:63:98:22:2c:
e8:46:1d:e9:16:53:8f:a0:b5:37:f2:cf:9e:88:f5:e0:39:b7:
76:3a:ed:6e:a9:9c:1a:e5:74:45:8c:d2:bc:dd:ee:75:2e:86:
4c:7f:92:c9:01:a6:40:5a:ac:2b:06:8f:89:ae:78:89:2c:8b:
64:9c:30:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:37 2025 by rpki-client