Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3131322e302f32312d3234203d3e20383334.roa
File: 3134332e32302e3131322e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: Xr80VySGbs9CRgbF70ZcepEHVjQ5GcQrquSqj+AnYD0=
Subject key identifier: 62:36:7B:70:78:11:8E:A5:E2:65:DC:19:89:AC:3A:F9:F6:F3:C5:C9
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 1E0AA941896C0B4B6310C991209E583CFE887B18
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3131322e302f32312d3234203d3e20383334.roa
Signing time: Wed 07 May 2025 15:09:09 +0000
ROA not before: Wed 07 May 2025 15:04:09 +0000
ROA not after: Wed 06 May 2026 15:09:09 +0000
asID: 834
IP address blocks: 143.20.112.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 May 2025 03:56:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:0a:a9:41:89:6c:0b:4b:63:10:c9:91:20:9e:58:3c:fe:88:7b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 7 15:04:09 2025 GMT
Not After : May 6 15:09:09 2026 GMT
Subject: CN=62367B7078118EA5E265DC1989AC3AF9F6F3C5C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e4:94:85:cd:76:9c:34:5c:2c:02:c8:a5:b2:
f7:e7:f2:ff:1a:53:72:46:c4:84:31:48:06:d8:15:
be:4e:08:47:ac:73:b7:cc:32:a9:2b:11:bf:47:4b:
81:cd:f8:14:51:d5:c7:0c:b0:42:d4:22:a0:1c:31:
2f:a0:8b:4f:33:09:42:28:3e:5e:98:c0:9f:d1:e7:
e2:9a:e8:ed:2e:7b:87:e4:6e:a7:b6:52:1a:ff:ff:
2b:44:fd:1c:c2:85:a6:25:1e:50:59:69:1e:45:87:
ee:02:ba:fd:db:89:77:52:c6:53:8d:2a:a6:b9:79:
e5:36:75:3e:13:96:44:66:d0:bd:6c:a9:58:f8:df:
7c:d2:84:e9:ab:0e:d4:94:a9:78:13:03:20:2b:a5:
3f:64:7e:da:47:4a:39:15:01:8f:88:41:5b:36:eb:
02:b8:92:92:7e:67:7b:dd:73:7b:eb:6d:9b:62:8a:
4f:58:64:ec:87:43:e6:bd:60:34:58:05:91:10:38:
d3:43:71:c0:83:c3:6e:b1:44:42:0f:3c:35:ec:4b:
a3:26:36:0d:bd:9a:da:3e:76:0e:e0:1f:de:7c:51:
b0:b5:5d:ff:f6:b6:25:28:68:1f:26:95:3d:50:c3:
16:2c:37:05:af:0a:58:e4:e4:8f:fb:9a:f2:a7:89:
65:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:36:7B:70:78:11:8E:A5:E2:65:DC:19:89:AC:3A:F9:F6:F3:C5:C9
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3131322e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.112.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:45:c7:71:70:ab:c3:1a:b4:16:47:e2:14:33:c7:5e:13:60:
0e:f3:ed:2e:d0:12:d8:5a:e7:ae:25:9b:32:29:0f:4e:cf:6c:
99:84:f2:92:5f:b9:a0:f0:21:e4:cb:35:eb:c1:f0:3b:de:9d:
0d:f6:fc:f3:1d:f1:49:b6:a3:55:65:a2:05:20:fc:16:8e:e2:
6f:8c:49:7e:32:23:55:10:43:72:be:52:85:ed:10:a6:07:50:
63:b8:7d:d9:dc:45:ad:a1:ec:93:c1:96:e3:e0:cd:bf:d2:ad:
c1:0c:5b:73:c5:19:9e:de:db:d0:d5:68:20:7c:be:65:2b:5b:
b4:4a:9b:b9:74:2e:65:48:98:8d:f0:ec:2b:f6:7d:bf:d9:bc:
8e:8f:79:9d:9e:7b:57:39:74:a3:3f:f1:f1:cd:48:1b:43:a6:
75:53:90:e3:8b:67:dc:13:df:43:6d:b5:ac:4e:e1:33:42:45:
c4:50:5f:55:2e:b1:28:30:e5:d7:d3:98:cc:a6:a3:84:8d:d7:
16:2c:03:fa:99:1a:e6:e3:b2:c0:57:fc:51:23:f1:7b:1c:c8:
c2:64:b2:ba:5d:ac:17:6f:36:9e:06:f8:5f:dc:31:58:2e:be:
c4:ff:bc:c4:1e:fe:f3:16:66:90:f5:cc:9e:54:1e:c2:52:1f:
9e:80:5e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:29:09 2025 by rpki-client