Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3131322e302f32322d3234203d3e20383334.roa
File: 3134332e32302e3131322e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: QIR8YxBDkGIOnhm/W3GaU2h6CZv5eu6/s+HyFH5B264=
Subject key identifier: 1A:E0:71:76:4B:E2:58:58:A2:36:73:56:05:C6:7C:B7:CB:92:05:1B
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 0452BE2B39EB7283D50EDCD3ADE10A7FCC0E2830
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3131322e302f32322d3234203d3e20383334.roa
Signing time: Sat 17 May 2025 03:58:17 +0000
ROA not before: Sat 17 May 2025 03:53:17 +0000
ROA not after: Sat 16 May 2026 03:58:17 +0000
asID: 834
IP address blocks: 143.20.112.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 18:40:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:52:be:2b:39:eb:72:83:d5:0e:dc:d3:ad:e1:0a:7f:cc:0e:28:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 17 03:53:17 2025 GMT
Not After : May 16 03:58:17 2026 GMT
Subject: CN=1AE071764BE25858A236735605C67CB7CB92051B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:93:6a:df:45:bf:36:da:f3:fc:00:93:3a:
86:6b:2b:da:62:b9:0b:35:56:69:da:ff:b5:d0:d6:
76:f6:c4:c6:e0:64:4b:fa:3d:6f:b5:cb:1d:e0:a8:
bd:83:55:3f:c5:a8:e8:af:38:82:4a:e9:6a:4d:70:
90:37:98:24:e4:b2:53:55:48:5a:f0:4e:47:fe:d3:
86:86:3e:3e:66:a9:c3:44:12:cf:a2:62:ca:ab:7e:
24:f3:57:6a:2d:4c:ca:84:c7:84:92:2c:2a:cb:50:
df:e9:e5:1d:41:b9:75:90:40:72:ae:93:d7:11:58:
fc:07:43:6f:ed:00:e4:cb:de:e5:db:46:51:9a:1a:
d9:18:ac:0a:16:cb:d7:37:47:e9:2b:9b:85:d0:e7:
84:82:b6:f4:51:5c:8d:c2:58:a7:3f:d6:81:2f:f1:
82:1c:42:55:a4:14:62:61:5b:1a:88:ca:c8:2c:ee:
03:07:b2:bb:56:04:e6:d1:1c:63:ee:f4:10:45:0c:
90:77:54:d1:cf:df:f2:94:28:1c:98:4a:32:c1:b9:
f1:1e:71:c9:c0:61:dc:e4:7a:6c:05:b7:46:98:27:
83:59:3e:52:72:f8:ef:8e:3c:9a:d6:77:e6:dc:35:
34:9a:61:ba:2f:42:4f:8a:9d:ea:53:41:9b:82:a0:
14:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E0:71:76:4B:E2:58:58:A2:36:73:56:05:C6:7C:B7:CB:92:05:1B
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3131322e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.112.0/22
Signature Algorithm: sha256WithRSAEncryption
48:c2:45:5e:ed:f8:fe:43:43:19:66:b6:8e:98:03:23:e1:09:
eb:e7:88:64:75:78:3f:4a:c0:de:d1:4a:65:44:d9:6c:83:6f:
93:17:69:61:77:37:5f:cf:bc:d9:f9:cc:0c:61:3b:fa:bf:b4:
c7:d9:1f:34:79:3a:43:fd:c6:d5:c5:52:18:e7:9e:24:cf:e3:
54:90:b0:1c:9c:4e:a9:49:30:18:3e:a3:40:29:a5:42:c1:0d:
42:3a:9f:26:8f:38:66:20:c4:bb:30:24:96:61:24:3d:c5:b9:
ca:1c:74:cc:c2:8d:4a:27:8f:f5:0f:06:5d:a4:8d:8e:64:2c:
78:53:ce:e0:08:42:85:b9:49:5f:06:84:bc:a8:4f:d3:b9:d2:
7c:2e:b2:1c:33:4a:2c:24:e4:31:28:6a:c3:8e:eb:c2:57:5a:
b3:47:54:0d:b4:71:73:a8:78:15:05:d8:73:e1:76:bd:4f:b6:
db:fa:9c:e4:6b:ac:b1:01:6f:29:3e:f8:ca:7e:bb:df:ad:92:
d7:74:e0:ad:24:7c:ce:f9:9b:77:1d:61:4a:bd:24:63:45:94:
3f:d3:a4:db:7b:2a:1c:5c:00:bf:ec:ad:41:96:c1:74:0b:d2:
e6:29:f5:9e:2c:3a:73:7f:c6:be:78:a0:b8:c7:ac:e1:cb:61:
9f:01:5d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:37:15 2025 by rpki-client