Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/34352e36362e36322e302f32332d3233203d3e20323132323338.roa
File: 34352e36362e36322e302f32332d3233203d3e20323132323338.roa (raw, json)
Hash identifier: 9TF5lNSgvpG/DXjGICu0yfYiaPYCu/N7E5De9u0c4ns=
Subject key identifier: DB:B5:1E:6C:D1:26:AF:25:10:10:B0:8E:1B:02:6E:77:D3:27:34:DA
Certificate issuer: /CN=2e2674263aecd572673f87614919ca492c79faea
Certificate serial: 693134DF178FD9BEDC573A67D046ECF6C323AEB0
Authority key identifier: 2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/34352e36362e36322e302f32332d3233203d3e20323132323338.roa
Signing time: Wed 05 Feb 2025 13:28:35 +0000
ROA not before: Wed 05 Feb 2025 13:23:35 +0000
ROA not after: Wed 04 Feb 2026 13:28:35 +0000
asID: 212238
IP address blocks: 45.66.62.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 05 Mar 2025 00:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:31:34:df:17:8f:d9:be:dc:57:3a:67:d0:46:ec:f6:c3:23:ae:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2674263aecd572673f87614919ca492c79faea
Validity
Not Before: Feb 5 13:23:35 2025 GMT
Not After : Feb 4 13:28:35 2026 GMT
Subject: CN=DBB51E6CD126AF251010B08E1B026E77D32734DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:63:73:3e:65:7f:f2:ec:00:83:99:16:98:4b:
9c:db:b8:99:14:d1:06:ef:ff:95:47:f3:80:d7:a5:
3f:fd:63:ab:e0:6c:32:52:25:f9:5a:b4:b5:8d:66:
a2:9d:51:b3:53:11:85:f3:08:98:b9:1f:f4:1f:b9:
4c:15:06:77:ac:f8:6a:a2:d0:0c:c0:88:eb:2a:0c:
3c:5a:6e:5e:d4:f0:00:7a:8e:fa:5c:17:43:3a:34:
2d:97:37:80:28:2a:48:1d:3f:63:f6:68:56:ba:87:
0f:72:c4:8a:35:e0:e0:84:b2:7c:44:a8:8d:74:0a:
26:eb:5f:8a:2c:66:c8:ad:96:ae:22:2d:40:b3:dd:
b4:cd:ef:d3:92:52:47:1e:e3:e3:c7:ba:aa:01:1b:
f8:7c:b8:5b:a0:9f:74:d4:dd:50:cc:bd:9d:a2:77:
a2:a7:68:2a:16:12:04:6c:c7:5a:a7:ae:17:3b:b5:
49:f9:6b:42:0a:7a:7b:73:41:e1:21:1b:40:54:bb:
cd:c7:36:a2:2a:00:ba:90:73:bf:c5:6b:c4:86:af:
a4:0b:f5:31:57:cf:4b:c2:8c:f4:47:7d:7d:50:a4:
fd:cc:df:01:d7:87:21:aa:26:39:58:08:49:c7:fe:
86:7b:f1:b6:f7:2f:de:4c:9a:1d:57:b7:e9:04:ab:
f1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B5:1E:6C:D1:26:AF:25:10:10:B0:8E:1B:02:6E:77:D3:27:34:DA
X509v3 Authority Key Identifier:
keyid:2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/34352e36362e36322e302f32332d3233203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.62.0/23
Signature Algorithm: sha256WithRSAEncryption
57:cd:f6:90:91:66:39:98:8c:50:d0:72:fc:c5:bf:cc:23:fc:
2c:64:11:5e:b8:e5:e6:d4:5e:6e:29:4b:1d:7a:93:af:60:6e:
62:e7:7e:a6:c4:95:a9:cd:d6:60:bc:10:3e:25:1b:8c:a4:31:
08:9d:40:f3:0a:bb:b0:96:66:3d:f8:84:fa:a7:78:a2:ae:8f:
ec:da:3e:55:43:b5:72:91:1b:e3:ed:2b:46:3b:3c:04:ac:51:
df:e8:48:51:0c:83:d7:aa:bf:89:7f:02:19:33:25:f1:cd:e3:
05:3d:6e:1f:5f:4c:10:14:06:88:fd:bb:88:b9:de:78:33:40:
64:8b:e8:3d:75:4a:6b:0b:5a:12:b8:86:3d:85:65:1e:8f:dd:
53:29:ce:fc:8d:33:94:ab:0c:7f:dd:8d:05:f5:71:15:24:d2:
d2:84:7e:72:ad:21:ff:17:bf:8e:d0:cd:67:87:86:76:df:fd:
a3:77:61:2c:1d:cb:d5:13:89:2d:4c:c9:70:e8:88:bb:9f:ad:
1c:0c:ae:b0:39:87:fb:ce:51:a4:41:32:44:a9:fc:36:26:f5:
3c:0f:a6:aa:9f:c2:48:f9:86:c8:12:12:10:08:07:19:2b:d2:
06:41:5d:a2:a7:f7:f9:c5:54:89:80:39:60:1d:b9:8c:32:67:
0c:a0:5c:43
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUaTE03xeP2b7cVzpn0Ebs9sMjrrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMmUyNjc0MjYzYWVjZDU3MjY3M2Y4NzYxNDkxOWNhNDky
Yzc5ZmFlYTAeFw0yNTAyMDUxMzIzMzVaFw0yNjAyMDQxMzI4MzVaMDMxMTAvBgNV
BAMTKERCQjUxRTZDRDEyNkFGMjUxMDEwQjA4RTFCMDI2RTc3RDMyNzM0REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjY3M+ZX/y7ACDmRaYS5zbuJkU
0Qbv/5VH84DXpT/9Y6vgbDJSJflatLWNZqKdUbNTEYXzCJi5H/QfuUwVBnes+Gqi
0AzAiOsqDDxabl7U8AB6jvpcF0M6NC2XN4AoKkgdP2P2aFa6hw9yxIo14OCEsnxE
qI10CibrX4osZsitlq4iLUCz3bTN79OSUkce4+PHuqoBG/h8uFugn3TU3VDMvZ2i
d6KnaCoWEgRsx1qnrhc7tUn5a0IKentzQeEhG0BUu83HNqIqALqQc7/Fa8SGr6QL
9TFXz0vCjPRHfX1QpP3M3wHXhyGqJjlYCEnH/oZ78bb3L95Mmh1Xt+kEq/GtAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU27UebNEmryUQELCOGwJud9MnNNowHwYDVR0j
BBgwFoAULiZ0Jjrs1XJnP4dhSRnKSSx5+uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmQ3YzIzMWUtYTMzYy00NTU1LWI0MmUtZDAyMDkzODQ5
Mjk5LzAvMkUyNjc0MjYzQUVDRDU3MjY3M0Y4NzYxNDkxOUNBNDkyQzc5RkFFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xpWjBKanJzMVhKblA0ZGhTUm5LU1N4
NS11by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmQ3YzIzMWUt
YTMzYy00NTU1LWI0MmUtZDAyMDkzODQ5Mjk5LzAvMzQzNTJlMzYzNjJlMzYzMjJl
MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzEzMjMyMzMzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS1C
PjANBgkqhkiG9w0BAQsFAAOCAQEAV832kJFmOZiMUNBy/MW/zCP8LGQRXrjl5tRe
bilLHXqTr2BuYud+psSVqc3WYLwQPiUbjKQxCJ1A8wq7sJZmPfiE+qd4oq6P7No+
VUO1cpEb4+0rRjs8BKxR3+hIUQyD16q/iX8CGTMl8c3jBT1uH19MEBQGiP27iLne
eDNAZIvoPXVKawtaEriGPYVlHo/dUynO/I0zlKsMf92NBfVxFSTS0oR+cq0h/xe/
jtDNZ4eGdt/9o3dhLB3L1ROJLUzJcOiIu5+tHAyusDmH+85RpEEyRKn8Nib1PA+m
qp/CSPmGyBISEAgHGSvSBkFdoqf3+cVUiYA5YB25jDJnDKBcQw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:27 2025 by rpki-client