Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3230382e302f32312d3231203d3e2036303739.roa
File: 3134332e32302e3230382e302f32312d3231203d3e2036303739.roa (raw, json)
Hash identifier: O0zXr28F8scgrSkE0vyP1Ep795DgN2ZSTBx4u54zk+0=
Subject key identifier: 41:4A:DE:5A:B0:63:C5:1A:02:55:34:B5:75:32:71:60:BC:76:81:45
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 2ACE674F7E0D7E2C9A62C73C051FB01E61DA455A
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3230382e302f32312d3231203d3e2036303739.roa
Signing time: Tue 06 May 2025 06:37:05 +0000
ROA not before: Tue 06 May 2025 06:32:05 +0000
ROA not after: Tue 05 May 2026 06:37:05 +0000
asID: 6079
IP address blocks: 143.20.208.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 02 Jun 2025 16:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:ce:67:4f:7e:0d:7e:2c:9a:62:c7:3c:05:1f:b0:1e:61:da:45:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 6 06:32:05 2025 GMT
Not After : May 5 06:37:05 2026 GMT
Subject: CN=414ADE5AB063C51A025534B575327160BC768145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:33:cb:f9:86:6b:a1:3d:3e:b4:8a:63:de:d7:
e0:cb:4d:b5:c8:e8:48:fc:be:e2:1d:13:73:46:b0:
91:82:20:5b:d6:ae:f4:19:6f:77:22:4c:e0:78:6a:
d0:d4:ec:d6:eb:ce:a9:da:3f:02:84:ba:f4:0d:0e:
40:ff:fe:08:54:fb:e0:6e:09:bd:f9:ba:2d:2d:d1:
de:5f:00:9b:da:0a:7c:ac:86:79:02:ce:9c:11:8f:
e1:39:27:c8:36:f7:75:1f:a5:c4:d1:f7:c5:c8:bb:
3e:75:8c:33:0b:a2:0e:a1:60:95:f1:9f:52:2c:9c:
a2:c5:45:2d:a9:ab:6f:dc:aa:44:97:f0:02:dc:44:
ee:47:b8:cd:aa:6a:6c:81:88:38:f2:ff:ea:3f:2f:
ba:aa:3a:53:80:9b:bc:c5:c7:b1:e9:c7:d2:d5:a4:
45:fa:f2:9c:d2:32:ba:ec:67:62:da:d4:05:02:95:
ee:be:5b:9e:0c:57:f9:a3:10:4d:b4:14:42:a1:34:
67:da:7c:d4:7a:70:5c:55:2a:0b:02:27:d4:cf:68:
a0:74:e5:46:82:df:25:39:de:ee:f5:6a:10:b9:6b:
cf:04:c1:a2:c5:cd:7d:10:ad:ee:3e:c4:b1:5c:33:
42:28:b3:33:e7:f5:ef:3c:2d:2a:e9:7c:ec:db:df:
00:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4A:DE:5A:B0:63:C5:1A:02:55:34:B5:75:32:71:60:BC:76:81:45
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3230382e302f32312d3231203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.208.0/21
Signature Algorithm: sha256WithRSAEncryption
37:fb:8b:ac:07:1e:5c:48:68:8e:c5:4c:63:76:20:cc:e4:1d:
e4:75:18:f7:c1:aa:57:79:e6:f4:b4:a5:94:1c:bb:1d:52:bb:
63:18:35:df:a8:0c:59:d4:4d:e2:58:f0:b8:cf:a5:d4:b9:51:
07:27:a9:8d:c8:03:5a:35:0f:36:62:97:ca:31:e6:78:01:5b:
61:c0:ae:8a:d3:3f:43:a7:ba:11:13:22:86:b6:12:49:70:ff:
8c:eb:d9:91:e6:6f:24:3e:2e:08:5e:6e:95:19:99:9b:2b:af:
60:c8:e7:27:24:60:0d:cb:f6:78:f7:d7:e5:18:44:38:fb:35:
f5:c1:61:02:b1:cd:39:7c:02:14:e4:63:b6:b7:d5:a1:d8:2e:
f1:21:3d:76:36:7c:be:a6:65:3a:fb:b6:a1:4d:11:50:45:a0:
0f:af:a3:74:35:ec:cf:f7:a0:ae:20:fd:39:37:1a:94:b2:b2:
f9:a7:ff:d8:80:ab:12:33:44:36:0e:a9:c5:10:9e:11:05:82:
a0:cc:1b:a6:e1:9f:d5:13:19:be:00:ff:b2:b1:8f:20:4b:cd:
b9:24:bb:75:6c:5c:b9:9b:1b:21:74:37:82:c9:a8:0c:28:e1:
64:ac:17:ac:48:15:2d:93:91:ba:6c:db:54:ec:b7:c8:7a:4e:
64:d2:b0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:52:26 2025 by rpki-client