Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e302e302f31382d3234203d3e20383334.roa
File: 3134332e32302e302e302f31382d3234203d3e20383334.roa (raw, json)
Hash identifier: +XIlnq4zwk4J3kjRrmsUeC61HyPdSsR4BmXtHF4DaLk=
Subject key identifier: 05:90:17:18:AE:3D:DB:42:07:79:43:63:BA:BA:4A:F4:20:7C:70:70
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 78FD8F254BFA25BF4750F4DEFB289BED45580930
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e302e302f31382d3234203d3e20383334.roa
Signing time: Wed 07 May 2025 15:09:08 +0000
ROA not before: Wed 07 May 2025 15:04:08 +0000
ROA not after: Wed 06 May 2026 15:09:08 +0000
asID: 834
IP address blocks: 143.20.0.0/18 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 May 2025 05:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:fd:8f:25:4b:fa:25:bf:47:50:f4:de:fb:28:9b:ed:45:58:09:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 7 15:04:08 2025 GMT
Not After : May 6 15:09:08 2026 GMT
Subject: CN=05901718AE3DDB4207794363BABA4AF4207C7070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:20:31:31:cc:d2:e5:66:90:78:d7:00:c7:6f:
c7:e5:ed:5b:02:80:c1:59:be:dd:cb:cd:81:a5:70:
be:c4:3d:3c:2b:1b:4a:30:bf:8f:6c:af:d0:6a:34:
da:96:62:28:2a:eb:71:cd:5a:01:30:fd:bb:b4:fe:
db:c3:e9:fa:74:61:bb:58:d7:43:65:91:1b:08:42:
4b:af:24:55:3f:b4:16:fc:c9:58:a6:d6:6d:ab:0a:
f0:68:76:1c:67:36:7a:da:5d:8a:b4:6f:b0:a0:0b:
87:c0:68:15:97:9f:a7:7b:c1:c3:e1:dd:56:19:19:
a6:0d:c9:54:83:01:9c:9c:20:02:dc:12:79:58:cc:
f1:a5:18:45:58:b3:e0:16:8c:2e:ed:e8:be:25:82:
58:4a:cd:2a:93:a6:55:3e:e8:9b:f1:41:ed:bf:70:
d0:45:b0:00:73:ad:d6:29:7b:5e:d3:af:71:a3:d3:
9d:7b:a6:11:2e:46:13:79:9f:db:65:53:a7:9f:28:
98:15:b3:15:0c:09:2d:1a:16:01:09:e3:c3:28:b5:
48:60:8d:a1:7c:4d:54:d9:01:c2:ed:fb:6d:bd:e5:
72:9d:51:61:5c:56:e8:0b:db:f9:f5:6d:27:ee:4d:
39:0f:c2:c4:b9:58:bc:6c:83:f9:d4:74:cb:d2:a5:
e8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:90:17:18:AE:3D:DB:42:07:79:43:63:BA:BA:4A:F4:20:7C:70:70
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e302e302f31382d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.0.0/18
Signature Algorithm: sha256WithRSAEncryption
ce:14:2a:1a:3c:bd:33:17:d7:7c:c7:d7:1c:c9:9a:e9:b7:c5:
55:35:99:cb:27:d5:d4:ac:c9:e8:dd:e3:e7:20:90:73:83:90:
78:90:8c:ea:94:1b:a5:ed:f3:fe:81:82:92:3f:74:53:08:2c:
0b:cd:78:a9:2c:9d:13:f5:83:b8:40:ed:08:d6:91:11:00:21:
f6:2e:d9:37:d3:13:33:7c:f3:7c:21:e1:31:08:87:a8:29:9a:
a8:fe:d1:d3:4e:1c:a0:21:74:0a:f2:a1:59:d4:62:e9:c9:a8:
cd:d3:e7:c8:4a:85:ae:7c:37:cb:aa:95:ea:e7:1e:13:94:a6:
86:2c:34:a3:47:71:e3:cf:29:3a:87:c1:54:7e:22:f0:a4:1a:
77:98:29:85:da:f2:4c:a1:2a:a0:cf:9e:28:ef:a7:97:ac:dc:
e2:45:d0:19:bf:96:f8:0d:53:5c:3a:e4:12:f6:65:56:62:7a:
32:98:07:df:d5:29:e5:89:54:18:ab:b7:af:82:c0:cd:fc:85:
0e:b6:ba:f0:96:68:ff:91:50:b3:fe:06:8d:b0:11:2d:6e:f2:
00:bc:ab:c7:6c:76:dd:7e:dd:74:db:2d:7b:3d:1f:fd:3b:a8:
5c:20:c9:5f:04:32:79:74:bf:0a:96:d7:99:f8:d4:e2:68:f7:
f4:7f:e2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:24:07 2025 by rpki-client