Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133372e302f32342d3234203d3e203536313036.roa
File: 34352e39312e3133372e302f32342d3234203d3e203536313036.roa (raw, json)
Hash identifier: QKpN4ZoZGv7p8CJpBezJbPX/QV16Um7wpImcpKd9+6g=
Subject key identifier: F6:C4:C4:E4:E6:E4:7E:0D:01:2F:4A:4E:CB:60:6E:9F:F6:A9:1F:C8
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 7C7988D363970E7EAC8D63C03DB1F71C313C3AA2
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133372e302f32342d3234203d3e203536313036.roa
Signing time: Sat 08 Feb 2025 19:01:01 +0000
ROA not before: Sat 08 Feb 2025 18:56:01 +0000
ROA not after: Sat 07 Feb 2026 19:01:01 +0000
asID: 56106
IP address blocks: 45.91.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Feb 2025 19:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:79:88:d3:63:97:0e:7e:ac:8d:63:c0:3d:b1:f7:1c:31:3c:3a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Feb 8 18:56:01 2025 GMT
Not After : Feb 7 19:01:01 2026 GMT
Subject: CN=F6C4C4E4E6E47E0D012F4A4ECB606E9FF6A91FC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:19:7b:30:6d:b3:6d:b5:e5:09:80:a1:30:7b:
97:c6:8e:ad:95:53:ca:35:18:f2:63:dc:bf:54:24:
73:3a:5d:31:64:7c:4a:3d:3d:d4:80:91:9d:22:b9:
03:95:e3:26:8f:bc:50:e2:c7:61:3c:23:6f:47:92:
ff:27:39:8b:f1:a7:26:bb:3f:99:4d:a9:42:23:5e:
c8:22:ed:d8:7c:2d:d8:9f:ff:d9:6c:35:db:25:3a:
ab:46:94:3e:45:3d:97:c3:b8:30:57:17:19:91:b2:
ae:f4:f5:bc:2f:81:61:45:41:8d:28:70:f4:25:52:
c2:28:1a:42:f5:35:5f:4f:58:1a:f1:8c:8d:f9:de:
8e:ef:bf:92:f9:17:d5:eb:8d:79:33:9c:e2:06:f0:
86:7d:14:15:d1:b1:19:f0:01:32:b5:15:a4:0d:41:
d1:e2:09:b4:c6:cb:a2:66:36:b4:25:2a:39:ab:f8:
d6:bc:28:80:dd:33:b4:e5:bb:c3:42:ef:91:82:68:
f1:c6:71:9d:60:bd:01:87:44:34:af:09:d1:3b:c8:
6f:33:56:ea:9e:81:33:f8:2c:56:aa:ec:b9:9e:00:
a7:6b:e2:f2:be:27:7e:d9:a2:c7:f4:56:a9:5d:13:
89:20:ab:e8:bf:7d:16:cd:0c:aa:fe:08:ca:8a:fe:
83:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C4:C4:E4:E6:E4:7E:0D:01:2F:4A:4E:CB:60:6E:9F:F6:A9:1F:C8
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133372e302f32342d3234203d3e203536313036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.137.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:40:49:48:e8:1c:5e:b6:33:2e:b5:fc:26:26:8b:e8:a5:9a:
49:f8:f6:0d:ab:f4:49:46:3a:6e:98:d9:f8:30:4a:8d:8a:2d:
99:86:f6:91:72:01:57:01:90:b0:4a:26:cc:80:7d:1e:43:35:
4d:66:90:a7:47:ea:1c:e0:d1:26:fc:30:f3:61:2d:90:8b:e9:
63:b8:74:d5:52:b8:aa:3c:8a:91:32:dd:bb:b9:7a:5d:b9:f0:
b4:18:5f:64:b3:80:63:0b:b1:68:3e:cd:ef:73:64:ff:8a:40:
ef:d0:95:99:ed:f1:bc:2a:ba:98:65:c0:79:73:f3:aa:5c:56:
69:35:f5:1e:18:2b:d3:8c:b0:47:46:dc:2c:56:e7:7a:f0:2c:
27:82:d6:a0:f4:cc:65:d5:3e:84:ae:da:11:ed:fe:c0:8a:25:
0a:35:f0:cb:63:d5:a0:f0:eb:24:8f:50:e2:9f:1f:12:fe:55:
b1:ac:f7:69:68:80:b9:00:51:70:61:31:3d:b8:b9:ef:8a:11:
b3:fb:b3:2e:cd:00:42:2a:2f:64:3d:d8:3d:2b:b2:9d:f7:a6:
a5:7b:9d:cd:d4:a2:ec:8d:5e:0d:c5:8c:f8:cf:a6:a3:b0:87:
ab:f8:2e:85:cf:69:8b:fc:82:d0:8d:6e:f8:bb:b4:d5:c6:6f:
cc:62:15:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:57:26 2025 by rpki-client