Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3137322e302f32322d3232203d3e20383334.roa
File: 3132382e36352e3137322e302f32322d3232203d3e20383334.roa (raw, json)
Hash identifier: ZNQYSr4vj4DmGLNWRJVGylh8o+PtVRqsi0qdu4D4Pxo=
Subject key identifier: 11:74:99:AF:2B:8E:0C:33:57:79:A5:F8:09:70:D6:CB:11:3B:E4:9D
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 4FF65BFB43CE338CAE61227E6475B123E3F1B974
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3137322e302f32322d3232203d3e20383334.roa
Signing time: Tue 25 Mar 2025 06:19:40 +0000
ROA not before: Tue 25 Mar 2025 06:14:40 +0000
ROA not after: Tue 24 Mar 2026 06:19:40 +0000
asID: 834
IP address blocks: 128.65.172.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 27 Mar 2025 18:43:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:f6:5b:fb:43:ce:33:8c:ae:61:22:7e:64:75:b1:23:e3:f1:b9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Mar 25 06:14:40 2025 GMT
Not After : Mar 24 06:19:40 2026 GMT
Subject: CN=117499AF2B8E0C335779A5F80970D6CB113BE49D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4f:91:26:71:cd:a7:b3:f1:72:bb:1c:bc:25:
13:7d:d1:dc:36:06:5e:3d:58:98:39:c4:70:db:5f:
c4:07:68:84:77:27:49:ad:bc:a2:ee:41:b6:ba:25:
36:1f:29:be:a2:b4:cb:75:af:a3:fe:a3:41:4f:4e:
6c:a8:ff:ec:62:c5:57:4a:b2:e5:99:b2:49:86:ab:
63:08:b3:3d:19:5e:b9:2a:20:dc:7e:80:54:4d:09:
2c:ed:c9:ac:fe:16:57:12:a7:e4:2f:73:98:b2:57:
dd:1b:5a:ce:e7:f4:c2:f1:cb:72:1f:6a:21:8d:ee:
b5:b0:28:bf:f6:5c:e6:e0:4c:6c:bb:fc:7f:24:93:
0a:75:b4:bf:8b:df:a7:65:52:05:e2:f1:41:7a:6c:
7a:9a:9c:c7:32:89:61:c2:64:5d:17:dc:ab:7d:83:
ae:82:5c:47:64:fa:12:1b:09:1d:86:9d:75:19:2b:
9f:d1:3c:7a:85:fe:92:7d:d5:37:94:3a:f7:2d:c8:
7f:36:b4:cc:b4:e3:1a:8e:54:4b:9a:d3:61:e7:42:
04:2e:23:5b:55:e4:23:2f:e3:3c:19:2e:a0:d8:c1:
dc:c5:6a:8a:97:f4:62:a2:1e:6b:e7:81:b7:e3:f5:
19:25:be:ea:b8:35:3c:6d:c3:df:7e:04:53:88:0d:
c0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:74:99:AF:2B:8E:0C:33:57:79:A5:F8:09:70:D6:CB:11:3B:E4:9D
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3137322e302f32322d3232203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.172.0/22
Signature Algorithm: sha256WithRSAEncryption
72:1f:f1:2d:0b:e9:b4:81:b7:fa:df:76:e9:cc:1a:f8:e3:2b:
3e:98:f6:ec:1d:f3:a3:85:9e:c8:77:d5:1f:43:43:ed:6e:76:
dc:c7:f5:5d:06:1a:ef:96:dc:29:7b:b3:e1:53:4d:85:f3:f7:
54:73:96:e7:43:d7:b6:ba:2e:ed:d8:df:bb:0f:38:30:5e:9b:
91:ac:f2:57:ca:5d:e4:d4:f8:03:9d:92:7d:73:c2:6e:78:90:
f6:d0:4d:2b:34:15:f8:e6:1b:84:94:05:62:38:ba:07:50:92:
69:43:ba:d5:64:db:a0:f7:5b:39:da:eb:4b:8d:67:33:66:8f:
b3:15:55:2c:07:b1:b3:94:2f:95:50:c2:a0:44:1c:9f:f0:8d:
28:52:62:35:17:b8:1c:e2:df:3a:ea:ec:54:37:63:0e:ed:49:
00:b9:14:6a:67:48:a1:3f:e8:79:84:03:0d:55:a0:cb:2d:c7:
bb:b0:91:cd:5c:20:15:83:02:84:ee:52:61:34:e1:23:14:0f:
af:65:ae:9d:69:7b:03:75:cb:49:67:37:07:ac:61:c1:9e:be:
d6:ac:cd:be:0d:50:db:59:92:ff:a7:bc:d9:78:fa:2d:91:16:
d5:8e:80:39:e9:ae:fd:fc:96:13:5e:75:5e:42:d8:c7:47:a7:
c2:dd:0b:7c
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUT/Zb+0POM4yuYSJ+ZHWxI+PxuXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0
ZTQzYWUxYjAeFw0yNTAzMjUwNjE0NDBaFw0yNjAzMjQwNjE5NDBaMDMxMTAvBgNV
BAMTKDExNzQ5OUFGMkI4RTBDMzM1Nzc5QTVGODA5NzBENkNCMTEzQkU0OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfT5Emcc2ns/Fyuxy8JRN90dw2
Bl49WJg5xHDbX8QHaIR3J0mtvKLuQba6JTYfKb6itMt1r6P+o0FPTmyo/+xixVdK
suWZskmGq2MIsz0ZXrkqINx+gFRNCSztyaz+FlcSp+Qvc5iyV90bWs7n9MLxy3If
aiGN7rWwKL/2XObgTGy7/H8kkwp1tL+L36dlUgXi8UF6bHqanMcyiWHCZF0X3Kt9
g66CXEdk+hIbCR2GnXUZK5/RPHqF/pJ91TeUOvctyH82tMy04xqOVEua02HnQgQu
I1tV5CMv4zwZLqDYwdzFaoqX9GKiHmvngbfj9Rklvuq4NTxtw99+BFOIDcDFAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUEXSZryuODDNXeaX4CXDWyxE75J0wHwYDVR0j
BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy
NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1
RHJocy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTMzYjJmZDct
MzFjMS00NTFjLTgyODgtYzFhYTBhYTEyNzUwLzAvMzEzMjM4MmUzNjM1MmUzMTM3
MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKAQaww
DQYJKoZIhvcNAQELBQADggEBAHIf8S0L6bSBt/rfdunMGvjjKz6Y9uwd86OFnsh3
1R9DQ+1udtzH9V0GGu+W3Cl7s+FTTYXz91RzludD17a6Lu3Y37sPODBem5Gs8lfK
XeTU+AOdkn1zwm54kPbQTSs0FfjmG4SUBWI4ugdQkmlDutVk26D3Wzna60uNZzNm
j7MVVSwHsbOUL5VQwqBEHJ/wjShSYjUXuBzi3zrq7FQ3Yw7tSQC5FGpnSKE/6HmE
Aw1VoMstx7uwkc1cIBWDAoTuUmE04SMUD69lrp1pewN1y0lnNwesYcGevtaszb4N
UNtZkv+nvNl4+i2RFtWOgDnprv38lhNedV5C2MdHp8LdC3w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:52 2025 by rpki-client