Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538303a666634303a3a2f34342d3438203d3e20323134333434.roa
File: 326131343a373538303a666634303a3a2f34342d3438203d3e20323134333434.roa (raw, json)
Hash identifier: mg4MT/pem0+WB+Tp/G8DxVK5mX7Y5D7nyqkHAhMf0zY=
Subject key identifier: 25:01:3A:B7:F4:54:C4:61:C1:95:2F:A3:62:56:48:3B:98:B6:63:BF
Certificate issuer: /CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945
Certificate serial: 647E7818F798B727617B3A2B8B85A20FAC057AB2
Authority key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538303a666634303a3a2f34342d3438203d3e20323134333434.roa
Signing time: Mon 28 Apr 2025 16:25:36 +0000
ROA not before: Mon 28 Apr 2025 16:20:36 +0000
ROA not after: Mon 27 Apr 2026 16:25:36 +0000
asID: 214344
IP address blocks: 2a14:7580:ff40::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 01 May 2025 06:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:7e:78:18:f7:98:b7:27:61:7b:3a:2b:8b:85:a2:0f:ac:05:7a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945
Validity
Not Before: Apr 28 16:20:36 2025 GMT
Not After : Apr 27 16:25:36 2026 GMT
Subject: CN=25013AB7F454C461C1952FA36256483B98B663BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8c:9a:2c:01:78:6f:21:08:e8:c9:8c:9f:4a:
82:22:e7:ce:ba:0c:c4:a3:b9:cd:58:5f:2a:02:8d:
6e:d6:64:5c:be:8c:eb:38:36:6f:29:e0:3c:06:13:
3a:4e:d6:cb:81:ff:e8:a9:ce:60:cd:4d:21:6b:c0:
21:98:4e:8f:24:b7:df:0c:55:2b:d0:70:20:64:0a:
1a:22:dd:a0:2f:57:60:8d:a2:54:6f:e7:32:83:40:
82:96:0f:a8:76:d0:92:3a:de:fc:cf:13:98:1f:bf:
53:36:f5:ad:2a:de:c4:4a:2e:34:97:87:78:4c:99:
4a:c2:c9:4c:35:3b:d9:db:87:7c:62:a3:53:78:56:
ac:cb:18:ce:fb:69:9d:db:a7:d6:cd:95:41:5a:7c:
57:c0:ff:3b:1a:0c:2b:6d:7c:97:c8:27:ec:5d:47:
7f:19:24:29:fb:c8:04:8c:77:44:6b:1a:cc:8a:df:
06:a5:4d:7d:22:c2:9c:0b:ec:d7:83:a0:71:63:17:
5f:3c:ee:06:6b:bd:06:aa:42:eb:ed:bd:76:00:75:
a9:3c:ac:32:0b:6e:1b:65:4f:e6:97:4b:a4:1d:d4:
11:23:12:85:6f:f6:59:f2:3e:db:29:9e:28:32:49:
6e:ad:0c:03:50:6e:c8:58:22:9a:c3:aa:5c:c2:9b:
5a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:01:3A:B7:F4:54:C4:61:C1:95:2F:A3:62:56:48:3B:98:B6:63:BF
X509v3 Authority Key Identifier:
keyid:87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538303a666634303a3a2f34342d3438203d3e20323134333434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ff40::/44
Signature Algorithm: sha256WithRSAEncryption
73:68:61:52:3e:c4:6b:45:36:de:e9:13:95:04:da:9f:c8:16:
c7:ab:4d:fb:4d:c3:f3:50:0e:83:9f:21:4d:2b:b3:eb:1f:4d:
49:00:f1:4a:e5:e1:e3:c0:27:59:c9:a9:1d:96:4e:da:6d:d7:
3b:fd:2b:c8:ea:1f:08:cc:ab:04:7f:f8:c7:0f:97:0b:11:14:
9b:00:d3:fb:f2:7b:19:ba:c3:54:3f:34:1e:e0:d8:0a:f0:53:
25:a8:88:fc:f2:3b:b3:b3:8c:f5:32:45:1d:99:08:15:57:ea:
bc:96:77:a1:25:57:65:09:5b:1e:05:19:bd:86:6f:f2:1a:42:
94:c7:c6:ca:eb:61:f3:a0:d2:83:97:59:66:a3:7d:93:67:e8:
81:70:5e:c4:2e:5a:3b:8c:8f:02:0f:31:40:4b:f6:82:d3:e1:
ed:bf:33:85:dd:d3:a2:59:2f:30:66:55:6d:7f:5b:a7:a5:84:
be:23:d7:46:2f:4b:36:1f:16:79:5b:92:af:cb:84:64:2b:75:
46:3a:be:59:6f:42:e9:95:18:ce:7d:2f:86:3c:ac:77:55:84:
4e:75:97:db:5c:1c:d3:57:ed:51:10:34:99:2e:9b:0a:3c:5b:
f6:6c:93:71:1f:58:17:74:bf:20:26:3b:21:4a:6a:27:0b:79:
78:76:b7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:07:34 2025 by rpki-client