Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e32342e302f32312d3234203d3e20383334.roa
File: 3134332e32302e32342e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: zwPJlafQTBiJowbk3uikm0E/yhvYs9pUqI8TcGBFshs=
Subject key identifier: 9B:A4:9D:38:B3:FC:E1:76:9A:65:1F:D2:80:24:9D:57:81:E4:0B:70
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 1F950C36A85E166C45088BAF5DFA3A0962A2A222
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e32342e302f32312d3234203d3e20383334.roa
Signing time: Tue 03 Jun 2025 23:41:49 +0000
ROA not before: Tue 03 Jun 2025 23:36:49 +0000
ROA not after: Tue 02 Jun 2026 23:41:49 +0000
asID: 834
IP address blocks: 143.20.24.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 17:39:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:95:0c:36:a8:5e:16:6c:45:08:8b:af:5d:fa:3a:09:62:a2:a2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 3 23:36:49 2025 GMT
Not After : Jun 2 23:41:49 2026 GMT
Subject: CN=9BA49D38B3FCE1769A651FD280249D5781E40B70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:29:6f:51:aa:fd:f7:32:77:06:fb:1a:5c:
fd:81:46:43:21:d7:16:a9:0d:d0:73:74:92:b4:ec:
67:81:87:cf:2a:5a:47:6a:b0:6f:60:26:d4:92:09:
95:60:0a:63:4f:ed:b7:20:d4:f0:1d:e1:6e:8d:3e:
3e:37:f0:9a:c7:bc:02:46:38:b5:b9:be:45:4e:d8:
18:ad:7b:90:a0:6f:56:39:d7:c1:7c:5a:06:ae:8e:
04:5a:e0:dd:2e:67:cc:47:1b:cf:82:1f:49:ca:6d:
de:b6:86:88:0b:b8:f3:39:83:a7:af:c1:d2:9b:ca:
ab:27:50:62:ce:ce:d0:d6:dd:36:d9:fa:d6:6b:8b:
63:a2:17:7b:9f:03:08:bf:6c:2e:33:48:0f:cf:35:
3c:33:b8:39:e1:b1:06:ca:ec:80:cb:6a:0a:f4:f3:
40:13:e4:e6:4f:18:46:31:eb:41:9c:9d:9e:f3:6b:
81:86:99:3c:6d:31:54:40:5f:2f:7e:02:82:cb:7b:
43:f4:9d:d7:9f:21:c9:06:75:2d:a8:94:7e:e3:d7:
60:da:58:ec:83:39:dc:d9:09:bb:79:96:d4:b6:80:
45:c4:1d:99:c9:bb:8b:68:9d:08:f6:d4:19:1e:fd:
98:5a:ee:f7:c3:ab:f1:4b:01:7d:a9:91:98:28:63:
84:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A4:9D:38:B3:FC:E1:76:9A:65:1F:D2:80:24:9D:57:81:E4:0B:70
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e32342e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.24.0/21
Signature Algorithm: sha256WithRSAEncryption
15:e3:b9:ae:37:0e:93:f1:24:10:91:cf:94:c8:d1:3c:f6:03:
59:96:48:a6:ed:ab:67:cc:e8:5f:b3:72:d1:9c:cf:ad:de:a2:
ad:f8:43:cd:d6:c3:4c:e3:7a:a9:84:6b:42:c6:8e:b2:f8:50:
f8:21:6f:ab:5d:f8:45:7d:e9:66:d6:df:5b:ac:13:03:5a:75:
17:0b:cd:3a:83:86:c9:1a:bb:73:8f:5e:e0:fa:79:35:ab:26:
32:13:de:05:7b:31:a8:a6:34:a8:0e:62:e8:b3:79:d7:7d:44:
66:86:18:13:1b:30:5e:5b:0e:16:2a:14:95:b2:0b:be:29:6e:
51:7e:d5:9f:69:ca:9e:c9:82:5a:87:fa:df:37:10:0d:a4:39:
1a:8c:1d:fe:d1:c9:94:70:33:f3:a3:32:7e:7e:39:17:3a:f7:
87:b1:e6:b7:fa:fd:71:62:dc:db:37:92:51:6a:ea:9e:58:bd:
26:58:a0:b1:72:96:fa:59:41:7d:14:28:98:0c:63:d2:86:59:
62:d7:68:0b:e6:80:0c:a9:9b:07:c7:f5:e8:4f:a9:8a:42:7f:
a9:1a:3d:b3:9c:2f:4d:b8:e7:76:91:85:c1:2f:40:26:4b:47:
d3:dc:a3:b5:d1:d0:98:aa:15:ee:3a:75:1b:8b:7f:51:79:c7:
28:d0:a6:69
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUH5UMNqheFmxFCIuvXfo6CWKioiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNTA2MDMyMzM2NDlaFw0yNjA2MDIyMzQxNDlaMDMxMTAvBgNV
BAMTKDlCQTQ5RDM4QjNGQ0UxNzY5QTY1MUZEMjgwMjQ5RDU3ODFFNDBCNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6LilvUar99zJ3BvsaXP2BRkMh
1xapDdBzdJK07GeBh88qWkdqsG9gJtSSCZVgCmNP7bcg1PAd4W6NPj438JrHvAJG
OLW5vkVO2Bite5Cgb1Y518F8WgaujgRa4N0uZ8xHG8+CH0nKbd62hogLuPM5g6ev
wdKbyqsnUGLOztDW3TbZ+tZri2OiF3ufAwi/bC4zSA/PNTwzuDnhsQbK7IDLagr0
80AT5OZPGEYx60GcnZ7za4GGmTxtMVRAXy9+AoLLe0P0ndefIckGdS2olH7j12Da
WOyDOdzZCbt5ltS2gEXEHZnJu4tonQj21Bke/Zha7vfDq/FLAX2pkZgoY4RzAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUm6SdOLP84XaaZR/SgCSdV4HkC3AwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjIt
ZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2MmUwLzAvMzEzNDMzMmUzMjMwMmUzMjM0
MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjxQYMA0G
CSqGSIb3DQEBCwUAA4IBAQAV47muNw6T8SQQkc+UyNE89gNZlkim7atnzOhfs3LR
nM+t3qKt+EPN1sNM43qphGtCxo6y+FD4IW+rXfhFfelm1t9brBMDWnUXC806g4bJ
Grtzj17g+nk1qyYyE94FezGopjSoDmLos3nXfURmhhgTGzBeWw4WKhSVsgu+KW5R
ftWfacqeyYJah/rfNxANpDkajB3+0cmUcDPzozJ+fjkXOveHsea3+v1xYtzbN5JR
auqeWL0mWKCxcpb6WUF9FCiYDGPShlli12gL5oAMqZsHx/XoT6mKQn+pGj2znC9N
uOd2kYXBL0AmS0fT3KO10dCYqhXuOnUbi39Recco0KZp
-----END CERTIFICATE-----
Generated at Fri Jun 6 23:27:40 2025 by rpki-client