Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e31362e302f32302d3234203d3e20383334.roa
File: 3134332e32302e31362e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier: RCNndChpqXERo4IioJljrL6YG0qGTVWEMvpnxkqhLD4=
Subject key identifier: FA:FE:C2:6F:15:DC:95:B7:FA:19:F9:C6:ED:C2:DC:60:73:72:48:B0
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 784278D024A14153E24DC2873C870E115C2B4430
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e31362e302f32302d3234203d3e20383334.roa
Signing time: Tue 13 May 2025 06:01:39 +0000
ROA not before: Tue 13 May 2025 05:56:39 +0000
ROA not after: Tue 12 May 2026 06:01:39 +0000
asID: 834
IP address blocks: 143.20.16.0/20 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 23:40:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:42:78:d0:24:a1:41:53:e2:4d:c2:87:3c:87:0e:11:5c:2b:44:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 13 05:56:39 2025 GMT
Not After : May 12 06:01:39 2026 GMT
Subject: CN=FAFEC26F15DC95B7FA19F9C6EDC2DC60737248B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b1:ac:43:8f:07:6b:10:42:e7:0d:d0:f3:46:
dc:0c:74:21:e3:74:51:cb:cc:56:89:d2:e0:7a:7a:
6e:57:e2:5b:b1:17:78:af:16:08:6f:60:d5:39:58:
31:ea:30:1f:99:fc:59:8d:0a:75:72:69:e2:af:b3:
1c:8b:6b:2c:74:ac:83:cb:bd:76:6b:5d:f2:a9:ea:
ea:68:f1:f6:2a:54:f0:79:39:82:29:27:37:40:e2:
46:69:46:2e:5b:35:90:ba:ee:e4:dc:13:85:b5:da:
4b:49:68:7b:6f:77:a1:df:a9:8e:18:a1:1c:a7:64:
63:df:5a:05:7f:28:d6:23:15:62:bb:ed:6f:cc:35:
cf:87:f5:69:fa:ff:1e:0b:ac:4c:6d:26:93:f1:12:
60:43:41:13:6a:2b:70:a2:6d:b7:df:b9:04:b1:17:
fe:6d:8b:f6:79:7d:f6:42:06:98:0e:19:c1:54:7f:
1b:bc:99:5e:51:43:69:79:07:42:da:ba:45:78:56:
b7:01:d3:09:aa:12:2b:da:44:97:5f:97:bd:ce:9e:
e7:1a:0f:71:bc:4a:97:46:16:f2:7a:da:4e:a7:cb:
a0:2a:52:5f:fc:9c:fa:f9:66:16:fb:aa:03:9b:d0:
47:63:ef:b1:e2:30:8f:73:94:3b:c7:ea:d3:e1:be:
b6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FE:C2:6F:15:DC:95:B7:FA:19:F9:C6:ED:C2:DC:60:73:72:48:B0
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e31362e302f32302d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.16.0/20
Signature Algorithm: sha256WithRSAEncryption
56:52:6b:03:0b:96:82:2a:c7:cf:3e:24:d4:d4:d5:84:6d:83:
63:04:16:e6:d2:61:60:26:64:68:dd:14:68:a7:65:dc:b5:49:
5f:b2:0e:5e:92:28:71:a6:99:b0:8e:cc:ec:9c:44:d3:36:37:
70:18:4d:bb:76:58:c0:58:7c:ee:38:51:ea:40:0e:77:3d:da:
80:bf:9f:43:1f:38:0c:03:00:20:ba:3a:7c:83:e8:a2:c9:74:
a1:5b:cc:53:bd:00:f1:62:af:4b:5e:b8:5c:41:0d:ae:e3:09:
1f:91:50:e1:6c:94:79:77:45:67:77:39:7f:b4:03:ed:2f:15:
da:83:f0:b1:55:7a:e6:1c:a8:e9:ba:10:db:88:9f:9f:c1:21:
02:02:88:9a:c7:c2:b7:dc:4b:9d:c0:e4:3c:37:49:5b:2b:eb:
41:f8:ae:8a:d7:3a:5f:43:fb:2d:93:bc:07:a4:fe:f6:e6:52:
91:a3:77:24:db:35:86:bc:3d:70:04:42:da:b7:bc:20:62:81:
39:24:97:8a:90:9b:f1:c7:3e:39:0b:c7:77:97:f5:37:6a:f5:
9d:3d:2a:18:cc:3a:ed:56:b0:a3:bc:ef:d6:a7:35:7c:09:e5:
3d:d1:92:60:35:ae:ff:51:47:82:8c:69:e7:e5:e0:89:9a:ba:
7d:35:d9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:17:12 2025 by rpki-client