Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3130352e302f32342d3234203d3e203339353231.roa
File: 3134332e32302e3130352e302f32342d3234203d3e203339353231.roa (raw, json)
Hash identifier: LWhsNoRF121yPUfaUnRz65GoXbG0oB2Sv1KbyRM7utI=
Subject key identifier: 68:07:5E:B7:AA:5C:3E:AF:7B:0D:5F:4C:EF:41:EE:59:B1:33:44:46
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5AC71B5C40344C77D34E6BCA757E4191DAC9013E
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3130352e302f32342d3234203d3e203339353231.roa
Signing time: Wed 04 Jun 2025 15:10:57 +0000
ROA not before: Wed 04 Jun 2025 15:05:57 +0000
ROA not after: Wed 03 Jun 2026 15:10:57 +0000
asID: 39521
IP address blocks: 143.20.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 17:39:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:c7:1b:5c:40:34:4c:77:d3:4e:6b:ca:75:7e:41:91:da:c9:01:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 4 15:05:57 2025 GMT
Not After : Jun 3 15:10:57 2026 GMT
Subject: CN=68075EB7AA5C3EAF7B0D5F4CEF41EE59B1334446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:b5:a8:c8:07:0e:53:b4:d1:aa:8f:a1:82:
48:05:04:d1:a5:8a:2f:a3:4f:aa:e3:0c:d9:78:b1:
09:84:ff:8d:9e:66:01:39:cf:fe:fb:6b:86:e0:1e:
4d:c5:c9:53:ee:29:94:80:f1:c0:2d:d0:cf:5d:81:
b9:02:19:01:41:e8:69:6c:71:4a:2c:5a:60:ab:cf:
1d:7e:2d:0e:c7:5e:20:e8:11:12:41:ac:44:94:26:
2e:6a:3a:17:a3:22:9d:53:5e:56:b1:53:af:80:b3:
71:a0:86:b9:31:6f:98:e6:5e:b6:85:08:bf:54:b1:
10:9e:32:cc:ff:a4:4a:2a:b9:1b:88:ea:2e:d3:09:
28:ef:0e:d7:4b:6b:22:5c:48:9b:5a:cb:9b:22:15:
6b:c4:45:2f:de:ac:54:92:78:c1:3f:aa:0e:3b:bc:
3c:a2:ed:d7:d5:42:1f:02:71:8b:f9:48:9d:c3:20:
cf:65:2d:96:0f:9e:c0:e9:a3:a1:6d:06:3c:40:99:
68:11:23:0e:99:a1:95:51:6b:a1:28:c2:56:0d:90:
6a:90:93:6d:b1:9d:1e:61:cd:fc:49:61:b1:5c:9d:
54:42:09:58:47:0e:c6:d7:a5:31:ed:e7:eb:73:e9:
ec:ab:c0:1a:b8:e2:54:0b:17:f4:92:2a:b5:fb:39:
e8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:07:5E:B7:AA:5C:3E:AF:7B:0D:5F:4C:EF:41:EE:59:B1:33:44:46
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3130352e302f32342d3234203d3e203339353231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.105.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:d1:4d:c0:a6:27:60:9e:9f:3b:c1:b6:3e:05:30:b0:47:b2:
bd:7f:86:fb:af:10:aa:80:b3:d8:a9:1c:80:96:24:02:52:d0:
86:42:28:c4:ed:84:98:af:aa:1f:69:44:eb:f8:c8:5b:cb:18:
ad:e6:96:19:87:ac:d5:bc:2c:c4:08:70:e5:7e:cf:4b:67:4a:
ac:63:11:0c:80:77:21:0f:0c:d5:13:32:39:3e:8b:de:19:bb:
6a:6b:80:87:78:84:e9:cf:e4:16:90:3d:48:fe:d3:77:61:ae:
72:ce:1a:90:66:82:08:0c:31:f8:95:21:c9:9c:33:83:92:ad:
1d:6b:7e:ed:2c:ff:77:1b:4b:76:da:aa:54:7b:b6:2b:63:5e:
1a:f7:cf:64:80:76:e4:65:d8:54:37:bc:f4:86:de:67:3d:ad:
60:54:f2:57:7e:96:12:53:e5:de:b2:35:e7:8d:a0:f3:04:b5:
0a:14:0d:8c:f6:c0:22:d2:fc:5f:ce:54:8e:fb:28:6e:91:fc:
c9:7e:88:0b:61:80:51:63:eb:ff:7a:50:4f:76:26:71:af:a4:
59:b0:03:27:20:c6:f0:24:f3:5a:6b:67:dc:a9:85:ec:56:56:
fa:f2:6f:13:6e:37:7a:86:38:98:7e:d1:53:70:56:d7:7e:4f:
20:05:23:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:50:48 2025 by rpki-client