Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3132302e302f32332d3234203d3e20383334.roa
File: 3134332e32302e3132302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: XNVBpz9pcvIhpu2dE+dgn8bQuNhnLdDHP8vL0/lx6wY=
Subject key identifier: B2:FE:C6:2E:94:85:70:43:D2:46:5F:4C:9A:DF:37:95:86:D4:EB:34
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 06D6A8F3B39BF2919AAABD6B7807F5CFB9879BF9
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3132302e302f32332d3234203d3e20383334.roa
Signing time: Sun 18 May 2025 17:41:35 +0000
ROA not before: Sun 18 May 2025 17:36:35 +0000
ROA not after: Sun 17 May 2026 17:41:35 +0000
asID: 834
IP address blocks: 143.20.120.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 May 2025 06:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:d6:a8:f3:b3:9b:f2:91:9a:aa:bd:6b:78:07:f5:cf:b9:87:9b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 18 17:36:35 2025 GMT
Not After : May 17 17:41:35 2026 GMT
Subject: CN=B2FEC62E94857043D2465F4C9ADF379586D4EB34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f5:32:60:33:34:a7:0a:24:16:96:05:c9:20:
76:a1:d9:76:ee:38:cf:61:ce:c6:99:f3:4e:40:9b:
27:25:e8:4e:e5:63:6c:87:70:49:49:66:07:e8:e0:
5e:7d:a2:ba:e6:f3:dd:dd:ec:c6:25:89:be:3f:e0:
0a:de:e0:ce:37:04:1a:9d:41:86:54:e1:4f:e8:f2:
77:cc:88:b4:24:53:74:2f:20:2f:94:4f:f8:bf:4c:
da:e2:ac:0c:0a:14:a3:c6:e9:03:86:1f:9e:71:5c:
d7:1a:ea:47:1f:61:fb:8f:70:29:27:64:32:a0:aa:
9f:9d:d4:bb:ba:6a:58:05:9e:1d:30:01:f4:79:ca:
f7:ab:bb:22:94:61:3f:c5:c7:f8:46:40:2c:74:4a:
c3:4e:b7:c7:9c:bc:d5:ec:29:25:ce:8a:c6:61:f4:
b4:7e:ed:4f:73:1d:66:ea:95:81:89:2e:da:ff:63:
b5:8d:65:9c:02:c5:28:52:10:5c:7f:98:86:da:4a:
3f:64:f1:46:de:df:24:67:48:4e:6a:46:cd:b9:24:
20:80:17:3b:45:e6:03:b8:d4:ea:b6:34:ce:cd:91:
77:ef:83:bc:f8:2d:b8:49:ea:96:fe:2d:11:a3:b3:
e5:ca:21:45:e0:ab:23:b2:31:f7:ba:e7:df:95:9f:
69:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FE:C6:2E:94:85:70:43:D2:46:5F:4C:9A:DF:37:95:86:D4:EB:34
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3132302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.120.0/23
Signature Algorithm: sha256WithRSAEncryption
92:f7:35:8d:53:72:3d:49:3f:f4:af:49:0f:cd:10:57:c9:6b:
f8:5a:08:89:dc:e6:7e:f7:fd:04:0f:50:03:65:74:8c:7e:96:
31:35:99:c8:f8:e8:2a:9b:a8:75:48:df:95:15:2b:c0:2e:cf:
6c:80:6f:da:ca:22:a8:05:aa:0d:d0:48:1b:9e:b3:88:29:b0:
e0:10:ef:01:6d:cf:28:01:56:8d:df:f1:01:a9:03:67:95:3d:
ca:95:96:61:82:b5:73:f3:e9:8a:cf:2e:6c:b4:16:cc:7a:c5:
38:0b:53:c2:ba:b5:a5:50:6a:55:6c:2d:9e:14:97:30:3f:5a:
fb:d5:4f:91:f6:17:90:cb:8c:48:41:7f:c9:ae:9c:a2:02:6c:
86:e5:d9:47:98:f7:88:3e:ce:4b:2a:87:96:af:00:6b:ad:85:
b1:18:7c:c3:74:07:fa:df:54:c8:5e:c7:04:80:c5:4d:b0:49:
f3:1d:e9:64:69:0f:59:89:2c:48:91:39:aa:d9:81:c4:2b:66:
54:e2:fe:76:33:2b:e4:fc:73:84:65:fc:57:c1:25:a4:3d:31:
bf:69:85:d0:5f:a6:62:06:b3:a9:6a:4e:34:77:80:d8:1f:cd:
f8:44:22:90:64:58:18:8f:4f:13:37:8e:5f:ae:c5:76:1e:03:
1e:8f:d2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:35:54 2025 by rpki-client