Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133372e302f32342d3234203d3e20323135323837.roa
File: 34352e39312e3133372e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: JixkF/yVADBhIEs9w5MMtxu5+L3/B0CehM37eUykhzE=
Subject key identifier: F7:0D:AD:02:4D:94:E3:8C:61:B6:AD:D3:0A:14:45:03:68:2D:E5:D3
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 4267B63A21B4FB298A8D0FB5861C127FAF4A8677
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133372e302f32342d3234203d3e20323135323837.roa
Signing time: Mon 24 Feb 2025 11:44:15 +0000
ROA not before: Mon 24 Feb 2025 11:39:15 +0000
ROA not after: Mon 23 Feb 2026 11:44:15 +0000
asID: 215287
IP address blocks: 45.91.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:67:b6:3a:21:b4:fb:29:8a:8d:0f:b5:86:1c:12:7f:af:4a:86:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Feb 24 11:39:15 2025 GMT
Not After : Feb 23 11:44:15 2026 GMT
Subject: CN=F70DAD024D94E38C61B6ADD30A144503682DE5D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6f:30:81:c3:78:50:0b:2d:bd:e3:a9:14:ab:
36:3d:46:66:4a:dc:b6:be:bc:b4:c2:40:9f:fe:de:
60:33:37:cb:49:1e:5a:4a:b3:dd:18:33:ac:69:de:
f8:84:57:82:f1:d7:dc:f8:1d:6c:46:21:7f:89:69:
a1:29:fa:38:7b:39:5c:4d:54:1a:b7:b5:72:98:c7:
c9:c1:90:e1:1b:ac:f2:62:8b:19:38:30:e9:81:54:
a1:0c:b4:54:c6:50:15:9c:1b:11:fa:5c:e8:c5:46:
b7:74:7c:b0:68:4d:fe:d7:c0:bf:eb:98:28:41:0b:
b5:7d:48:52:85:96:12:fe:7b:3a:2f:29:75:62:35:
d4:d3:da:0d:c4:8d:85:fd:49:d5:ff:21:50:1e:23:
c3:c8:c6:a2:53:ea:4c:19:dc:77:85:3f:38:b1:b8:
9f:c5:e8:26:9c:33:15:4b:e5:84:ed:5b:9a:13:60:
50:8b:ff:22:2e:bb:9a:d4:01:c7:3c:8e:b8:5d:eb:
0a:bd:05:38:c7:c3:a6:e4:63:c0:8d:d0:29:f0:e5:
df:8d:93:38:7d:4e:9e:aa:a8:82:f8:0b:05:3d:fe:
6d:26:ef:5a:95:6d:9d:d3:bc:d8:8c:68:e6:be:8c:
5e:c6:28:18:34:6a:5b:4f:06:da:81:c4:b6:c9:de:
0b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0D:AD:02:4D:94:E3:8C:61:B6:AD:D3:0A:14:45:03:68:2D:E5:D3
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133372e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.137.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:83:a9:6c:0e:e5:de:d8:68:48:4f:27:be:22:cc:29:17:61:
bf:c4:a0:c0:20:dd:29:bb:7c:d1:60:72:e8:da:3c:81:6c:e2:
d4:96:0c:03:6b:28:af:48:d7:9e:f5:fc:7a:db:5e:ea:cc:72:
83:50:10:80:72:1f:b6:c5:b7:98:1e:b0:41:a5:36:5d:81:eb:
b8:dc:88:c3:07:4b:f6:b9:26:b1:fc:d2:8e:27:fe:bd:bb:33:
ca:11:60:11:0e:fa:b1:eb:62:8c:d8:c4:b2:4a:3e:93:43:9b:
fc:c9:7e:3e:8c:b8:36:a8:5d:64:d9:13:84:3d:36:30:99:22:
96:71:9f:28:94:38:39:1b:05:f9:8f:70:7e:63:4b:3e:42:7e:
19:57:8e:3f:c3:85:43:a0:d2:3b:68:56:8e:0c:27:0b:fe:e7:
4a:0e:2c:bb:e8:a8:54:2d:52:3e:b2:2b:8e:07:57:b3:91:5d:
d1:35:4f:10:98:92:9e:20:83:8f:d7:3f:5d:35:a3:a8:65:18:
db:e1:45:a2:cd:65:9d:88:dd:52:ec:2e:58:45:1b:2c:86:d4:
80:7b:20:a2:52:bd:62:3e:2b:4e:66:9a:20:7a:db:1e:bb:13:
01:9d:ef:b9:74:96:68:c9:94:f6:3f:c7:b2:86:2e:b5:b7:0d:
50:ec:dd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:27:40 2025 by rpki-client