Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3132302e302f32322d3234203d3e20383334.roa
File: 3134332e32302e3132302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: ROG7Y5VPs7zKBJbjhT163xkiKBsD0Z8q1SK4n8RDCC4=
Subject key identifier: C6:6D:9F:E0:5B:BA:A9:95:1A:3A:3E:54:40:D0:3B:FC:27:8A:2F:33
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 4B5807C9EECDBC68549173B6A6A9CFF6F1E587AC
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3132302e302f32322d3234203d3e20383334.roa
Signing time: Wed 07 May 2025 15:09:09 +0000
ROA not before: Wed 07 May 2025 15:04:09 +0000
ROA not after: Wed 06 May 2026 15:09:09 +0000
asID: 834
IP address blocks: 143.20.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 May 2025 17:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:58:07:c9:ee:cd:bc:68:54:91:73:b6:a6:a9:cf:f6:f1:e5:87:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 7 15:04:09 2025 GMT
Not After : May 6 15:09:09 2026 GMT
Subject: CN=C66D9FE05BBAA9951A3A3E5440D03BFC278A2F33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:c6:7d:1a:40:ab:f1:dd:d9:63:38:28:fb:
c2:a5:75:04:7c:d1:b5:f7:e1:93:89:31:5c:32:34:
58:2d:f1:0a:14:24:93:a3:39:73:f4:d1:fc:94:e8:
e0:5e:6a:87:e8:39:8b:dc:81:5b:0a:90:46:f5:08:
01:a8:f2:79:32:74:96:67:01:22:31:48:79:c9:d4:
7c:2c:24:30:f2:62:05:76:a7:de:5c:b0:7c:70:88:
78:82:f3:f9:0e:18:d5:c5:94:31:0e:fd:e0:44:02:
a6:54:20:42:aa:96:d4:cc:29:4c:67:81:d9:6d:b5:
de:64:a4:8c:d4:52:1a:7a:05:ca:fc:4c:ec:0e:b4:
cf:9b:3e:06:1b:0c:21:e1:54:32:ea:ee:65:4c:d7:
fd:20:c7:1c:9e:82:13:05:0e:a2:f5:65:8a:e0:c1:
5e:50:f2:2a:a0:8d:1f:28:82:87:4b:46:79:a9:24:
b1:c9:5a:f4:1f:e9:a4:ab:f1:ea:c4:89:e3:51:b3:
1d:b3:cd:59:c5:e8:f4:c9:3b:52:fa:49:32:26:20:
d4:5c:1a:ee:1d:46:3b:17:1c:e4:41:91:26:d0:94:
35:42:35:d4:58:9a:10:22:b1:5b:f6:a6:14:59:99:
a7:f9:62:0b:f5:a1:cf:21:11:57:68:8d:0f:15:e0:
a8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6D:9F:E0:5B:BA:A9:95:1A:3A:3E:54:40:D0:3B:FC:27:8A:2F:33
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3132302e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.120.0/22
Signature Algorithm: sha256WithRSAEncryption
79:35:85:06:27:a9:ae:20:ae:24:79:e8:e4:11:ed:ee:0a:7e:
1f:e8:0c:10:f8:0c:4f:2a:8c:ad:5d:1c:63:f8:a3:75:27:55:
ff:32:42:50:7a:bd:ab:4c:ee:83:1f:b1:9d:fe:f9:d4:82:bb:
01:e8:2a:17:bd:13:4c:dc:6c:fd:28:53:74:87:62:73:7e:da:
b0:4c:7a:5a:4a:41:7c:ae:c7:fd:70:99:8f:e1:12:bc:e3:37:
6d:5a:cc:d2:57:5f:b8:77:f2:5d:01:1f:a5:c7:61:19:40:a9:
86:b7:6f:5b:42:62:e6:16:1a:6a:96:8f:a7:9c:f7:08:d7:ca:
dc:79:0b:9e:a8:3a:89:50:01:7e:f9:0b:8b:a2:74:d3:94:8e:
72:dd:90:ae:22:50:40:4c:e5:82:c7:00:cf:9c:3b:bf:83:89:
09:c5:37:e0:ed:06:ec:06:18:e5:89:0b:d0:65:9e:6c:1b:5d:
74:df:7d:66:48:fc:36:00:0c:3d:64:0d:4d:dd:8d:9d:91:3f:
27:80:ce:a6:29:7f:66:31:47:93:74:9d:4f:9f:e6:d6:07:a9:
7b:4e:1d:57:09:22:6a:8d:82:1f:ce:ce:fe:09:8c:a8:be:8a:
3c:e8:57:3f:d3:5c:16:46:0a:41:d2:76:16:6f:b9:98:d1:d6:
29:79:90:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:34:06 2025 by rpki-client