Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3132302e302f32342d3234203d3e20383334.roa
File: 3134332e32302e3132302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: +1s0Kqyjrw/01ycTuqWqB6Y5rXINVnNGQQfOGkdzXbo=
Subject key identifier: FB:CC:1D:70:76:DD:9D:C4:45:FC:BD:2A:A4:D2:40:9E:A1:EA:52:BC
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 1F8360FA68ACD8BE1F0EFB7F9F602C1119E761BA
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3132302e302f32342d3234203d3e20383334.roa
Signing time: Sat 31 May 2025 06:02:34 +0000
ROA not before: Sat 31 May 2025 05:57:34 +0000
ROA not after: Sat 30 May 2026 06:02:34 +0000
asID: 834
IP address blocks: 143.20.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 07:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:83:60:fa:68:ac:d8:be:1f:0e:fb:7f:9f:60:2c:11:19:e7:61:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 31 05:57:34 2025 GMT
Not After : May 30 06:02:34 2026 GMT
Subject: CN=FBCC1D7076DD9DC445FCBD2AA4D2409EA1EA52BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:03:61:89:a8:9d:d3:0b:91:ac:7a:39:69:
ba:27:36:db:cc:4a:44:8f:b7:91:5a:49:d5:2f:5d:
7d:8a:8b:4e:99:72:27:93:7a:05:b5:05:85:95:0f:
1b:72:5d:c6:11:5c:51:a8:32:a6:8a:44:63:70:dc:
19:ca:f8:1c:25:9e:c5:0f:73:0e:ef:6a:db:bb:9f:
ee:c3:16:78:e4:29:09:25:4d:34:53:0f:67:68:94:
f0:07:86:6f:56:81:44:fb:36:e5:2b:aa:ec:b0:63:
47:24:2c:5e:8e:0a:a2:8c:f3:fa:9d:4f:10:84:e9:
d2:9d:66:8f:4b:df:bc:30:b3:1a:45:2d:88:5b:9f:
2e:b6:d9:fe:d1:a9:8d:31:36:a1:db:b8:06:bb:0e:
a8:dd:27:35:eb:26:ac:bc:7f:71:3c:0e:7d:ac:31:
b1:7f:a1:33:5c:8c:01:84:ca:c3:b1:11:d3:a1:88:
b0:88:4f:9f:b9:33:2f:9f:f4:c9:7c:b1:0a:41:94:
e7:b9:31:f2:dd:59:af:cf:72:ba:23:0b:ef:a3:07:
5a:82:59:37:96:8b:5b:52:c3:1e:45:02:fb:2f:02:
1a:65:af:07:ac:ec:e3:bc:b8:c4:02:cd:4f:6b:47:
05:6b:88:88:ba:a4:2d:56:83:75:62:f1:0d:f1:16:
8e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CC:1D:70:76:DD:9D:C4:45:FC:BD:2A:A4:D2:40:9E:A1:EA:52:BC
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3132302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:3d:d2:90:62:68:7e:d4:67:b6:45:0e:7b:60:46:2e:0c:25:
14:b5:d0:53:ec:e3:37:cd:b0:81:9c:15:e8:71:a2:06:b7:a2:
5b:3d:34:d0:ed:6f:76:ad:54:84:f8:d3:25:4f:dc:7e:21:9c:
44:88:89:e8:12:47:69:ce:db:4a:cc:ae:54:4f:d7:52:b5:88:
4f:27:65:81:18:6e:03:31:57:08:03:d8:c0:56:0d:9a:03:d9:
45:bc:08:6a:8b:19:0c:3f:14:60:62:b9:6a:43:d7:35:6b:6c:
43:0f:41:36:a8:6f:0d:14:c4:8d:88:80:c7:57:b9:4e:75:45:
14:19:0b:89:f0:db:53:dd:00:7a:46:a4:a3:93:fe:f2:7b:2f:
d2:49:a3:41:af:38:be:bb:b0:34:33:21:98:1a:fe:01:22:a4:
87:8d:4a:0e:4e:cb:f9:4d:bd:f1:13:70:83:25:ba:1c:22:ea:
e2:2b:d2:52:04:3b:e9:05:b9:54:4d:08:3b:86:7a:b0:4c:ad:
50:fb:ec:9c:49:da:ee:0a:a7:b3:89:0c:48:b2:46:4e:4e:0f:
b6:f0:54:4e:ac:1d:07:8b:da:61:ce:08:07:52:92:ed:43:d5:
90:25:32:41:19:80:cd:cc:76:e4:7a:a8:b6:58:ed:08:e9:d4:
62:19:5a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:34:14 2025 by rpki-client