Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34372e302f32342d3234203d3e20383334.roa
File: 3231322e3130332e34372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: hSFKFM0W69D8+kmUE4MHiHMYe+QtLIKougZ2SSO8Vvk=
Subject key identifier: 5B:72:0A:76:E3:3C:86:1E:0D:55:8C:54:8D:EC:03:61:89:1D:D1:C1
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 4B9E257791C029EC20635EE0703BFFA1C414E84B
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34372e302f32342d3234203d3e20383334.roa
Signing time: Fri 30 May 2025 13:21:20 +0000
ROA not before: Fri 30 May 2025 13:16:20 +0000
ROA not after: Fri 29 May 2026 13:21:20 +0000
asID: 834
IP address blocks: 212.103.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 15:04:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:9e:25:77:91:c0:29:ec:20:63:5e:e0:70:3b:ff:a1:c4:14:e8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: May 30 13:16:20 2025 GMT
Not After : May 29 13:21:20 2026 GMT
Subject: CN=5B720A76E33C861E0D558C548DEC0361891DD1C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:71:32:8a:35:cb:0e:99:f4:83:dc:f6:69:
60:ca:44:29:b6:0d:66:a3:a5:d3:b0:b8:30:1c:f5:
06:5a:13:ff:1d:fd:e3:96:53:96:3b:21:81:40:da:
23:88:0a:83:ea:16:79:86:9a:3e:27:c0:ee:17:ac:
d0:d8:9b:0d:0c:81:40:73:fd:a4:37:5a:4f:ee:d8:
5d:ce:f0:22:13:c0:84:f2:7d:19:b1:d9:fc:64:4d:
f8:03:b1:a7:24:9b:c0:96:f2:42:7a:ef:12:14:66:
f7:43:0a:90:6a:32:44:33:fa:32:3b:a6:09:d2:ce:
66:b6:79:ad:35:9e:32:1d:e6:ba:d4:60:71:32:e8:
af:6f:12:a8:d1:44:4b:65:cd:56:cf:8a:83:a6:70:
54:da:a5:27:1f:f8:06:76:df:21:eb:cc:2e:c2:67:
ba:17:85:97:57:f6:2e:25:2f:67:e7:d3:6a:2c:52:
01:af:a2:f4:56:ab:63:1c:32:3c:a8:0c:a1:c4:97:
14:6d:ef:05:da:a2:3c:de:cb:76:fd:db:d3:48:37:
d3:91:db:bc:67:bb:06:57:3d:c9:06:f2:7a:af:de:
75:ba:47:59:a2:ca:5c:1a:88:c3:47:f8:3e:5e:2a:
00:d2:09:da:31:bd:94:c1:99:48:c9:1c:51:f8:88:
5f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:72:0A:76:E3:3C:86:1E:0D:55:8C:54:8D:EC:03:61:89:1D:D1:C1
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.47.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:78:bb:84:97:e7:93:1b:fb:9d:02:a3:f8:27:7b:e5:2e:b6:
ae:5f:92:dd:1a:82:0f:31:59:4c:d8:ab:de:c9:cb:91:fb:44:
f9:c1:88:61:00:c4:83:f5:0b:d7:4b:9b:80:13:ba:ed:72:49:
1d:25:ff:4a:28:a7:5d:6b:d8:5e:e6:ba:2b:28:be:23:f8:70:
79:62:dc:33:b1:be:ee:a3:d4:a7:eb:7d:09:b7:5f:b9:ec:3b:
93:56:2a:d1:5f:f7:99:41:02:47:9b:f8:96:82:78:58:b7:52:
5e:16:54:f2:b3:a5:4a:fd:93:80:d1:af:f7:50:c7:d3:2a:bb:
45:4d:ab:84:ee:aa:16:15:d5:73:dc:25:6e:90:3d:48:6d:0c:
3a:ee:7f:a1:cd:60:f6:de:9a:8c:ca:9d:29:cc:8c:34:f4:49:
d2:6b:a1:27:6b:fe:44:67:26:17:20:51:30:a7:3b:b9:fa:9b:
60:0c:03:bb:86:01:33:2d:ff:50:1c:a9:ce:77:b0:90:93:66:
ca:42:56:05:c6:63:81:fa:a8:ea:f5:7a:af:13:cd:13:78:fe:
b0:97:ca:84:1d:e4:05:21:c3:81:36:87:a2:57:b8:df:52:0e:
d4:01:be:26:fe:2a:3a:d0:bc:13:f6:dd:80:e5:db:7d:d4:f7:
a9:96:30:fb
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUS54ld5HAKewgY17gcDv/ocQU6EswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGMxMmI0MjczODMyYjQxNTZmZTAwOTJmNmFlN2U1YjNj
ZTIzYWQ4YjAeFw0yNTA1MzAxMzE2MjBaFw0yNjA1MjkxMzIxMjBaMDMxMTAvBgNV
BAMTKDVCNzIwQTc2RTMzQzg2MUUwRDU1OEM1NDhERUMwMzYxODkxREQxQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyxHEyijXLDpn0g9z2aWDKRCm2
DWajpdOwuDAc9QZaE/8d/eOWU5Y7IYFA2iOICoPqFnmGmj4nwO4XrNDYmw0MgUBz
/aQ3Wk/u2F3O8CITwITyfRmx2fxkTfgDsackm8CW8kJ67xIUZvdDCpBqMkQz+jI7
pgnSzma2ea01njId5rrUYHEy6K9vEqjRREtlzVbPioOmcFTapScf+AZ23yHrzC7C
Z7oXhZdX9i4lL2fn02osUgGvovRWq2McMjyoDKHElxRt7wXaojzey3b929NIN9OR
27xnuwZXPckG8nqv3nW6R1miylwaiMNH+D5eKgDSCdoxvZTBmUjJHFH4iF/9AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUW3IKduM8hh4NVYxUjewDYYkd0cEwHwYDVR0j
BBgwFoAUjBK0JzgytBVv4Akvaufls84jrYswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGJmZDY4ODItZDZiMy00YWE4LWJjMGEtNzExZDY4YmQx
OThiLzAvOEMxMkI0MjczODMyQjQxNTZGRTAwOTJGNkFFN0U1QjNDRTIzQUQ4Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pCSzBKemd5dEJWdjRBa3ZhdWZsczg0
anJZcy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGJmZDY4ODIt
ZDZiMy00YWE4LWJjMGEtNzExZDY4YmQxOThiLzAvMzIzMTMyMmUzMTMwMzMyZTM0
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADUZy8w
DQYJKoZIhvcNAQELBQADggEBAG14u4SX55Mb+50Co/gne+Uutq5fkt0agg8xWUzY
q97Jy5H7RPnBiGEAxIP1C9dLm4ATuu1ySR0l/0oop11r2F7muisoviP4cHli3DOx
vu6j1KfrfQm3X7nsO5NWKtFf95lBAkeb+JaCeFi3Ul4WVPKzpUr9k4DRr/dQx9Mq
u0VNq4TuqhYV1XPcJW6QPUhtDDruf6HNYPbemozKnSnMjDT0SdJroSdr/kRnJhcg
UTCnO7n6m2AMA7uGATMt/1Acqc53sJCTZspCVgXGY4H6qOr1eq8TzRN4/rCXyoQd
5AUhw4E2h6JXuN9SDtQBvib+KjrQvBP23YDl233U96mWMPs=
-----END CERTIFICATE-----
Generated at Fri Jun 6 22:25:23 2025 by rpki-client