Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3230302e302f32322d3232203d3e2036303739.roa
File: 3134332e32302e3230302e302f32322d3232203d3e2036303739.roa (raw, json)
Hash identifier: 7kwdHLeb5v11Nhd2KZsf6vJEMxoRhV1KgnhCq67Falk=
Subject key identifier: 85:8B:C6:79:A2:20:43:1E:B0:C9:AF:F9:41:62:EC:7F:78:BD:23:CE
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 49117D19EB528D21ED4D3E902512DA96C46A957C
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3230302e302f32322d3232203d3e2036303739.roa
Signing time: Tue 06 May 2025 06:37:02 +0000
ROA not before: Tue 06 May 2025 06:32:02 +0000
ROA not after: Tue 05 May 2026 06:37:02 +0000
asID: 6079
IP address blocks: 143.20.200.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 02 Jun 2025 16:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:11:7d:19:eb:52:8d:21:ed:4d:3e:90:25:12:da:96:c4:6a:95:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 6 06:32:02 2025 GMT
Not After : May 5 06:37:02 2026 GMT
Subject: CN=858BC679A220431EB0C9AFF94162EC7F78BD23CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:14:6d:96:70:8e:46:52:bc:83:02:08:99:fa:
3e:3f:4e:63:94:8f:bb:fb:d3:d6:67:83:87:78:e8:
2a:bd:1f:d5:48:2e:0f:b9:8f:4e:93:69:53:81:f5:
02:80:6d:79:ba:ae:a4:04:7a:70:45:c0:d4:80:49:
e3:7f:34:35:cb:71:7b:b5:2f:5c:ef:f3:d8:46:01:
44:50:38:96:4f:9c:5f:ed:90:ac:a5:eb:c7:f5:17:
c2:25:71:e8:0c:3d:12:de:92:3a:61:3f:91:ed:42:
d5:d6:f8:f6:da:89:e3:ae:fc:21:ad:d2:42:cd:b8:
35:e9:66:42:98:43:af:a5:d5:3b:28:60:2f:c1:41:
dc:e0:b2:77:43:d6:0e:c0:ef:aa:a2:dc:36:95:71:
64:f5:78:cc:db:85:c8:4b:2c:dc:66:02:a5:1f:4f:
11:70:d7:32:42:b1:28:eb:e5:5c:b9:82:89:55:ee:
62:c2:a2:4b:a4:81:cb:83:eb:69:2d:d6:e7:2a:2a:
20:ae:42:a9:b9:bb:05:42:5b:9c:21:3b:db:fa:0e:
78:0f:b1:3c:b5:9b:6a:ea:e3:17:2a:73:09:b9:11:
4d:7d:1f:86:d9:b4:d7:f9:dd:71:c4:dc:88:1d:3d:
37:04:31:cf:25:0e:91:5c:31:8d:5e:a5:75:32:20:
53:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8B:C6:79:A2:20:43:1E:B0:C9:AF:F9:41:62:EC:7F:78:BD:23:CE
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3230302e302f32322d3232203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.200.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:70:99:56:65:0f:66:a2:7f:07:ca:6d:c9:42:ec:9d:69:5e:
ba:94:5e:2c:17:aa:0c:9d:e0:41:f0:b6:17:77:ce:d2:f3:4c:
d3:c9:76:99:2a:66:39:5c:4f:45:1a:f8:88:c1:2a:4b:e7:94:
be:2f:8b:bb:1a:01:c5:6f:75:c8:c9:d0:ef:18:e5:0c:8d:dd:
6c:ab:45:d0:56:54:2b:48:ba:c9:20:87:a1:4c:dc:f5:17:a6:
2b:35:39:f4:4a:97:7f:8e:d3:d7:aa:8d:9e:ae:f1:51:6f:89:
04:b6:2a:06:4e:83:88:d6:77:56:b1:14:19:9b:21:43:6e:ea:
c9:8e:c9:52:f9:3f:ef:f8:5f:90:39:61:50:55:f4:aa:a4:7b:
9f:cf:2d:e9:38:98:6e:a3:d7:da:41:c6:e4:ae:9b:c9:df:b1:
77:e4:ba:28:d5:f9:d1:55:43:d6:53:59:e4:40:3a:e3:4a:25:
67:19:38:4d:fb:49:d9:d3:1f:e3:82:6f:b7:67:66:42:a5:28:
a2:e2:7d:08:d4:0d:d8:19:00:63:39:0e:5d:e0:23:2c:c8:0d:
50:85:83:9c:20:42:c0:2b:5e:f7:ef:d5:c2:dc:96:d9:be:4c:
91:8c:25:71:11:76:7d:c9:28:7b:42:cd:70:47:d1:00:78:66:
dc:1a:ab:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:43:37 2025 by rpki-client