Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3131362e302f32342d3234203d3e20323134363737.roa
File: 3134332e32302e3131362e302f32342d3234203d3e20323134363737.roa (raw, json)
Hash identifier: pM8+fykt+eXrox5ip3Mlbzczyq8UbUom6GC/MKc3fLw=
Subject key identifier: D7:F7:29:BD:72:94:42:C7:9D:CB:BF:2D:AC:70:24:2D:D8:4B:0B:6F
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 1EA8E0D5B2F40853A086779087709D1381AB2C5E
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3131362e302f32342d3234203d3e20323134363737.roa
Signing time: Sun 01 Jun 2025 13:15:24 +0000
ROA not before: Sun 01 Jun 2025 13:10:24 +0000
ROA not after: Sun 31 May 2026 13:15:24 +0000
asID: 214677
IP address blocks: 143.20.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 17:39:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:a8:e0:d5:b2:f4:08:53:a0:86:77:90:87:70:9d:13:81:ab:2c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 1 13:10:24 2025 GMT
Not After : May 31 13:15:24 2026 GMT
Subject: CN=D7F729BD729442C79DCBBF2DAC70242DD84B0B6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:50:22:27:38:10:85:14:39:a8:82:63:fb:
0f:26:4f:8f:97:58:5b:30:ed:8d:5a:b9:2d:06:89:
05:4d:35:e2:4f:52:4d:05:fc:38:14:fa:13:7c:83:
32:31:1d:6b:29:c2:6f:db:65:88:72:d2:9d:52:b3:
e6:06:dd:31:88:d1:b6:bf:e2:25:fd:b3:d8:c8:13:
70:7e:93:36:d2:a8:cd:32:0c:4c:08:4c:c7:4c:60:
ce:8a:28:b5:cb:e2:27:e3:67:bf:13:09:89:fa:a1:
2c:58:dd:12:2e:ea:b1:0e:c8:eb:20:40:65:f1:1b:
0e:89:b2:3f:b8:e0:65:18:e7:9a:92:93:aa:5f:bc:
25:0a:d6:cc:6a:7c:2c:ef:b9:2f:e3:49:32:a1:ff:
be:c1:03:55:f8:51:a9:3b:5c:55:d1:bd:0f:8d:ab:
d0:f5:6b:a2:a5:44:a1:bc:03:6b:ea:d9:b6:e5:3f:
f9:22:d0:2d:bd:77:6f:e8:53:a2:7e:d9:80:06:3b:
5f:c9:3d:27:2a:77:e6:db:f6:8c:e1:b5:d1:e0:bc:
9a:81:0d:e9:5a:1c:7f:9e:59:4f:5d:ae:3c:b5:9b:
82:e4:fc:a9:c4:96:6c:67:e8:99:0e:d4:1b:ee:b1:
1b:cb:a0:08:2f:79:f4:88:3f:59:3e:4d:41:b1:61:
dd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F7:29:BD:72:94:42:C7:9D:CB:BF:2D:AC:70:24:2D:D8:4B:0B:6F
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3131362e302f32342d3234203d3e20323134363737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.116.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ef:cd:ac:cc:f2:23:32:a4:51:d6:21:4d:49:d2:ce:b1:01:
ad:5c:c3:cb:05:1e:71:01:64:2d:21:c9:4f:db:04:97:27:9d:
17:f0:b2:45:87:5b:36:94:84:71:ef:dd:9d:81:81:8f:71:28:
f0:b1:b0:6c:51:cf:7b:99:2e:e9:e6:42:2b:f8:41:86:b3:00:
0e:27:65:f8:bd:d8:0d:ac:7c:86:f7:cd:4c:27:37:9b:b6:e0:
c7:37:b5:3d:a8:0b:7b:a6:a7:a7:c5:3b:f5:8f:5f:9e:4b:d0:
6b:b8:ac:19:2b:fe:d6:a9:b7:a4:0b:5d:f9:49:ad:14:f3:c7:
42:5a:03:74:d1:21:aa:d4:51:93:fc:63:7b:5c:46:27:41:02:
dc:e0:d8:bf:e8:bd:5b:e0:5c:86:65:99:b3:3e:97:aa:83:57:
df:c3:9d:a3:ce:ac:8e:64:26:7f:74:6f:e8:ad:f4:94:3e:82:
2b:f8:2d:75:26:c1:46:6e:c4:93:33:01:9b:af:0d:8b:73:f8:
ff:de:0d:25:a6:9f:76:8a:31:17:e2:3c:48:e2:72:a5:ee:34:
fa:79:28:e1:46:df:c9:a3:4a:81:45:a4:64:39:cd:02:1c:c1:
04:87:e9:96:15:91:a3:11:68:95:ef:94:d1:85:b6:f6:63:75:
f7:21:ce:24
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUHqjg1bL0CFOghneQh3CdE4GrLF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNTA2MDExMzEwMjRaFw0yNjA1MzExMzE1MjRaMDMxMTAvBgNV
BAMTKEQ3RjcyOUJENzI5NDQyQzc5RENCQkYyREFDNzAyNDJERDg0QjBCNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9D1AiJzgQhRQ5qIJj+w8mT4+X
WFsw7Y1auS0GiQVNNeJPUk0F/DgU+hN8gzIxHWspwm/bZYhy0p1Ss+YG3TGI0ba/
4iX9s9jIE3B+kzbSqM0yDEwITMdMYM6KKLXL4ifjZ78TCYn6oSxY3RIu6rEOyOsg
QGXxGw6Jsj+44GUY55qSk6pfvCUK1sxqfCzvuS/jSTKh/77BA1X4Uak7XFXRvQ+N
q9D1a6KlRKG8A2vq2bblP/ki0C29d2/oU6J+2YAGO1/JPScqd+bb9ozhtdHgvJqB
DelaHH+eWU9drjy1m4Lk/KnElmxn6JkO1BvusRvLoAgvefSIP1k+TUGxYd3/AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU1/cpvXKUQsedy78trHAkLdhLC28wHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjIt
ZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2MmUwLzAvMzEzNDMzMmUzMjMwMmUzMTMx
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzQzNjM3Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACPFHQwDQYJKoZIhvcNAQELBQADggEBAIrvzazM8iMypFHWIU1J0s6xAa1cw8sF
HnEBZC0hyU/bBJcnnRfwskWHWzaUhHHv3Z2BgY9xKPCxsGxRz3uZLunmQiv4QYaz
AA4nZfi92A2sfIb3zUwnN5u24Mc3tT2oC3ump6fFO/WPX55L0Gu4rBkr/tapt6QL
XflJrRTzx0JaA3TRIarUUZP8Y3tcRidBAtzg2L/ovVvgXIZlmbM+l6qDV9/DnaPO
rI5kJn90b+it9JQ+giv4LXUmwUZuxJMzAZuvDYtz+P/eDSWmn3aKMRfiPEjicqXu
NPp5KOFG38mjSoFFpGQ5zQIcwQSH6ZYVkaMRaJXvlNGFtvZjdfchziQ=
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:16:12 2025 by rpki-client