Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3134312e3139332e3232382e302f32342d3234203d3e20323135323837.roa
File: 3134312e3139332e3232382e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: 8M4MjHqLsLWt11X53ClQoyiFof3fekscfusKqWeaTzk=
Subject key identifier: 3A:53:00:FB:8F:91:35:67:15:54:27:0A:FA:D5:AC:49:19:68:6B:EB
Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Certificate serial: 2D339A0D0971044EE1410269ADA4D0DF08591E21
Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3134312e3139332e3232382e302f32342d3234203d3e20323135323837.roa
Signing time: Sat 01 Feb 2025 14:55:10 +0000
ROA not before: Sat 01 Feb 2025 14:50:10 +0000
ROA not after: Sat 31 Jan 2026 14:55:10 +0000
asID: 215287
IP address blocks: 141.193.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Mar 2025 00:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:33:9a:0d:09:71:04:4e:e1:41:02:69:ad:a4:d0:df:08:59:1e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Validity
Not Before: Feb 1 14:50:10 2025 GMT
Not After : Jan 31 14:55:10 2026 GMT
Subject: CN=3A5300FB8F9135671554270AFAD5AC4919686BEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:16:37:f6:b2:6f:84:fc:84:24:fa:de:2b:8e:
7a:d7:ab:ee:ce:eb:13:1a:c5:5f:fe:ed:2d:68:df:
e1:87:64:f8:64:c1:4f:96:a0:b2:10:7f:13:07:ca:
b7:fe:a8:6d:af:f6:19:ec:7a:6c:08:f9:f6:1c:9b:
61:ee:c5:7b:34:02:39:0f:70:c5:59:0a:b2:59:87:
16:c4:4e:da:57:a8:e7:36:cb:ba:b9:00:20:be:e4:
3d:aa:08:5f:8b:b3:33:3a:7f:4f:bf:84:f9:85:46:
a7:72:04:ad:d5:1b:9b:86:19:23:c7:21:49:60:44:
ac:7e:ad:68:4b:31:5c:98:48:9a:dc:f9:6f:d7:40:
92:55:84:6f:98:e7:06:69:b7:6a:b7:6a:81:4a:9b:
06:54:7b:c0:0a:18:ee:74:c6:8e:49:71:48:15:c6:
04:92:c4:e4:12:7f:61:97:28:e7:2a:45:63:9b:72:
f3:ad:c5:34:ff:e6:b0:03:54:a8:44:2b:6e:6d:87:
1c:37:67:41:f4:de:5a:cb:20:e9:ba:b3:49:6c:5b:
5c:5a:43:70:5f:f6:23:97:29:cb:c9:6c:ae:63:d1:
37:71:a7:ba:e7:f1:fa:34:b4:0a:0b:63:be:5d:27:
d5:2b:64:14:38:82:14:8f:b2:aa:6f:36:23:69:aa:
c9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:53:00:FB:8F:91:35:67:15:54:27:0A:FA:D5:AC:49:19:68:6B:EB
X509v3 Authority Key Identifier:
keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3134312e3139332e3232382e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.193.228.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:59:48:b2:c7:47:81:bc:b9:47:5a:7c:15:fc:bd:a8:ca:9d:
e4:19:aa:2f:cd:36:b6:7f:ed:b9:10:2c:c9:dc:17:d5:da:7e:
51:46:e7:33:f8:97:ec:f2:0b:14:4e:04:38:52:f4:c6:6e:90:
cb:f0:ad:2d:a2:7d:3b:57:6c:c0:27:80:62:c2:dd:a5:5e:6d:
3a:30:af:15:ac:69:ee:4f:04:73:5e:c4:4f:5b:2b:9a:92:11:
8d:cd:fb:27:84:81:1a:80:44:67:d2:57:e7:cc:d9:75:86:c2:
84:b1:f5:a2:59:58:30:4a:10:f0:e3:c7:dd:9f:a8:80:40:79:
e5:3d:58:5b:b7:0a:4d:a2:1d:70:70:62:8a:86:17:06:05:7f:
3c:e5:34:b5:10:dd:3c:99:f7:02:36:ed:61:13:a1:86:0d:25:
5e:dc:ec:e1:e9:c2:42:c2:d8:55:2b:57:f5:60:1b:e0:7c:94:
62:ce:83:2d:ff:be:03:47:8e:dc:5b:e7:82:e5:56:d5:f6:7b:
81:20:ee:fa:6d:db:18:bd:92:79:21:3a:ae:19:f6:6f:01:93:
cd:b6:24:bf:b5:b2:0d:26:af:52:8f:e4:fe:47:25:cd:b8:af:
60:b0:0c:ed:b5:35:b6:61:df:1b:83:fb:57:a0:b9:8a:b8:f2:
38:e0:84:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:35 2025 by rpki-client