Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3130302e302f32322d3234203d3e20383334.roa
File: 3134332e32302e3130302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: R9fHUHSpJlj37Rq66NoDFLJqmwqhfx1RwLBjOSkMs1o=
Subject key identifier: E1:62:72:D4:E8:34:E2:A1:93:87:B6:60:47:0F:A4:4B:A4:09:32:AB
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5B693AFABA2969B8CA36A055A43967FD1937986B
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3130302e302f32322d3234203d3e20383334.roa
Signing time: Sun 18 May 2025 17:41:36 +0000
ROA not before: Sun 18 May 2025 17:36:36 +0000
ROA not after: Sun 17 May 2026 17:41:36 +0000
asID: 834
IP address blocks: 143.20.100.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 May 2025 11:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:69:3a:fa:ba:29:69:b8:ca:36:a0:55:a4:39:67:fd:19:37:98:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 18 17:36:36 2025 GMT
Not After : May 17 17:41:36 2026 GMT
Subject: CN=E16272D4E834E2A19387B660470FA44BA40932AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:73:9a:bb:fa:26:ef:86:56:b7:ee:bf:82:90:
ae:17:0a:fa:38:73:a6:47:e3:7a:a1:b4:39:a9:7e:
c3:96:d6:62:69:d7:13:7e:b9:8d:db:61:ea:0d:b0:
90:a8:62:03:f1:63:45:2f:d2:58:55:05:11:40:1e:
d8:b0:c2:ec:91:28:a1:ed:06:71:91:79:02:59:fa:
e2:da:7e:6a:1b:f6:d2:58:8c:06:8a:f0:3a:75:6a:
7d:a8:57:a2:4d:85:5f:c2:4e:11:f4:97:bd:bd:eb:
e5:31:2f:3e:68:bf:cb:d3:ef:7d:b0:f0:35:03:42:
b1:18:e0:f7:fc:b5:72:6c:a0:80:f0:9c:f0:5a:dc:
d7:b3:19:99:c2:5a:88:2f:45:37:61:ba:c8:0d:a4:
38:ad:eb:aa:bd:d0:ad:5f:53:67:35:06:e9:95:f1:
2c:3a:28:13:0e:7d:b7:e4:51:4a:45:eb:80:70:f2:
54:53:4b:0f:4a:6f:b4:4a:76:53:e0:46:9f:64:53:
f6:f0:02:64:f0:df:61:d0:5f:cc:de:2e:67:e0:66:
0d:c5:18:61:a5:67:43:fd:dc:f8:28:98:f2:81:d4:
ad:48:82:a4:6d:42:cc:82:28:9e:03:cb:14:5b:c2:
78:d3:70:19:83:d6:6f:7c:1f:71:58:9a:52:70:aa:
93:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:62:72:D4:E8:34:E2:A1:93:87:B6:60:47:0F:A4:4B:A4:09:32:AB
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3130302e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.100.0/22
Signature Algorithm: sha256WithRSAEncryption
ce:bc:33:5f:85:45:98:d1:9b:41:33:78:66:32:36:a4:0e:96:
f9:70:5d:8c:30:15:80:53:18:15:c3:1c:28:d3:e1:dd:c5:74:
0f:4c:d9:a1:fc:44:c8:9e:37:de:96:07:a6:69:7f:1b:c2:7f:
66:b8:c6:c1:0d:37:9e:8c:da:f6:c6:2d:e0:b4:12:82:4e:49:
19:96:f3:bb:c1:2e:90:9d:25:12:65:44:55:38:1f:a3:98:16:
6f:42:45:d9:04:fa:74:cd:1e:90:6b:17:08:2b:2a:53:c3:7a:
f4:9e:10:95:c0:f4:b8:3f:73:60:46:79:1f:c1:29:bf:a0:96:
0e:3f:3e:1a:b5:12:4c:55:43:17:9b:f8:19:4d:07:4b:a9:99:
af:9d:52:b5:1b:61:b3:a1:72:d6:2a:3c:7a:77:cf:0d:95:d8:
ed:9c:97:a6:74:72:6a:0e:7d:04:a4:a6:58:a6:20:29:0e:06:
04:fb:2e:e6:ef:23:96:36:60:1d:6e:8b:1d:04:79:7b:37:f3:
e9:ad:c9:ab:b6:bb:94:95:60:59:14:4b:2b:80:aa:6d:11:26:
5e:12:46:9d:76:09:da:88:7c:57:5a:08:cc:aa:7d:ab:c3:39:
c2:21:d1:2c:5a:a3:62:d4:3b:02:2a:72:dc:9b:10:e1:5f:d0:
7f:bd:3a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:41:34 2025 by rpki-client