Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e33322e302f32312d3234203d3e20383334.roa
File: 3134332e32302e33322e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: YIaqsLuNJXpsH6Rolg1UuAs3RaGx9AzNeU/1httAf7Q=
Subject key identifier: 05:10:D5:67:EC:15:07:62:AA:6B:A7:43:6C:7F:90:8D:3F:07:51:75
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 7782894C849875A2F63BAE31F79E5146C091F05C
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e33322e302f32312d3234203d3e20383334.roa
Signing time: Wed 04 Jun 2025 09:33:10 +0000
ROA not before: Wed 04 Jun 2025 09:28:10 +0000
ROA not after: Wed 03 Jun 2026 09:33:10 +0000
asID: 834
IP address blocks: 143.20.32.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 17:39:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:82:89:4c:84:98:75:a2:f6:3b:ae:31:f7:9e:51:46:c0:91:f0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 4 09:28:10 2025 GMT
Not After : Jun 3 09:33:10 2026 GMT
Subject: CN=0510D567EC150762AA6BA7436C7F908D3F075175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:8b:94:86:d8:ec:e5:e7:ae:af:19:4c:df:
9d:de:29:0b:3a:d1:d9:d9:9d:b0:65:d8:64:e6:63:
39:ce:8b:8c:0b:22:79:8e:9f:57:73:2a:ce:18:6b:
ab:53:84:c4:96:06:0c:c6:1f:a0:85:af:b6:f9:6e:
33:d1:d7:ee:ba:4f:c4:a1:48:73:02:bd:cf:9c:59:
08:ab:13:72:19:8d:74:8f:48:9a:19:16:35:57:47:
48:4e:14:6d:f1:e1:20:86:83:3b:ba:b6:d9:7f:62:
42:63:f2:04:94:fc:22:e7:1b:e0:6e:cb:7a:e6:36:
54:7e:d7:50:a9:b8:5d:87:5a:ce:fe:d0:32:d1:a2:
55:41:75:f4:91:d4:ef:e8:ef:ac:12:20:ef:7f:87:
6b:f7:7a:12:94:62:60:b5:52:2c:2c:37:0b:5a:11:
3a:89:bc:11:b5:3f:cf:6c:52:35:7d:ab:16:4a:fc:
e1:04:6f:9a:42:75:ca:6e:17:87:f5:0f:b9:90:a4:
7e:ed:19:ac:ff:ea:98:6d:9e:c3:ef:07:2a:e2:40:
cc:62:49:40:70:91:b1:bb:4c:e2:e7:f1:a1:24:a3:
f4:79:55:3b:40:74:06:a8:87:00:0c:f2:2d:69:62:
4f:b3:bd:e7:0b:c8:5c:59:8c:f8:32:33:b8:0d:f1:
8b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:10:D5:67:EC:15:07:62:AA:6B:A7:43:6C:7F:90:8D:3F:07:51:75
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e33322e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.32.0/21
Signature Algorithm: sha256WithRSAEncryption
57:a6:75:c5:87:38:b7:5c:05:f9:6b:c4:5a:10:12:48:ae:41:
95:ea:28:4d:63:10:25:15:c6:d3:1e:56:f0:75:07:69:20:09:
e6:cf:fe:2f:34:97:22:9b:ac:ce:e9:22:a7:f3:04:81:e9:f8:
1c:4b:d3:df:3b:65:6c:93:14:6d:93:51:50:14:f4:bc:2c:9a:
7b:cf:59:34:ef:13:24:57:1a:7b:fa:2e:7c:0c:25:53:9e:59:
c0:39:c9:da:f1:36:fe:ab:09:99:e4:c6:6a:aa:dd:80:5e:7a:
23:d6:fd:22:06:02:7a:a1:7d:dc:84:c2:3d:a0:0f:54:9c:9a:
ad:ee:55:9c:07:f3:69:83:bf:0e:d1:b8:4b:f4:c6:db:0d:8a:
a0:b6:4b:39:17:f9:7b:c4:f1:d5:c8:85:0e:4a:b0:d4:69:5e:
84:90:12:73:81:0a:06:22:3b:de:27:2a:ce:b1:76:a5:fd:5d:
04:9f:05:89:bb:33:82:d7:b7:13:12:bf:f5:97:5a:98:08:62:
15:78:47:4f:02:ff:d2:d5:83:63:a3:f9:4d:8e:12:b1:47:db:
b8:18:24:a3:e0:2d:9f:0c:c0:b9:9c:89:67:a4:02:f5:e3:47:
0e:56:03:68:a8:ea:7f:2f:3d:a1:69:5b:52:09:da:b8:0b:d5:
37:82:2b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:29:05 2025 by rpki-client