Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e34302e302f32332d3234203d3e20383334.roa
File: 3134332e32302e34302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: PTY1AklbYGFBTDppwUDg5ecNd8ZJDzZM74QUctKcbm8=
Subject key identifier: 36:26:4D:3C:2F:7B:ED:DC:A2:B3:BB:BB:ED:69:99:CC:2F:7A:4F:80
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 1C5F8741D803F3B7338B71A4C097B0DC743F67C5
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e34302e302f32332d3234203d3e20383334.roa
Signing time: Wed 04 Jun 2025 09:33:10 +0000
ROA not before: Wed 04 Jun 2025 09:28:10 +0000
ROA not after: Wed 03 Jun 2026 09:33:10 +0000
asID: 834
IP address blocks: 143.20.40.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 17:39:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:5f:87:41:d8:03:f3:b7:33:8b:71:a4:c0:97:b0:dc:74:3f:67:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 4 09:28:10 2025 GMT
Not After : Jun 3 09:33:10 2026 GMT
Subject: CN=36264D3C2F7BEDDCA2B3BBBBED6999CC2F7A4F80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:3c:74:ea:6b:f8:20:70:2c:50:f6:ac:85:
79:a0:e6:62:52:09:b8:01:b9:fe:16:68:3b:eb:0f:
8f:d6:4e:32:7d:45:43:29:3e:16:ca:51:d0:91:24:
86:9e:41:55:fe:dd:fd:f3:06:b9:86:69:0d:c6:b0:
52:54:93:a2:f4:fb:75:e0:32:6a:ab:6c:94:6a:a9:
1b:93:9a:eb:b4:57:50:cb:18:c1:35:d8:c8:bd:af:
72:d0:5b:5f:56:2a:bf:88:a8:f6:e3:f0:fa:c4:a6:
41:47:be:cb:b0:6d:2a:3f:63:e4:ea:b6:ea:9a:33:
1a:1d:9a:fe:b8:7d:e4:26:92:69:2a:c9:16:f2:9c:
51:45:ea:23:d4:77:e1:e0:4e:ad:08:63:63:0b:b7:
9d:1f:a1:08:ce:36:1b:26:8d:7e:a7:0b:30:ba:d6:
5d:42:a0:92:3b:4a:e2:6b:3e:99:82:69:f3:9e:de:
56:97:1f:3a:10:b1:5c:fa:12:8a:b9:ea:5f:fc:fb:
c8:ba:db:21:eb:22:60:9f:7e:af:28:1b:d8:32:89:
b9:d5:79:9b:82:d4:0d:98:12:84:d2:bb:f0:97:f2:
57:05:4b:8d:bd:ef:9c:5d:14:cb:ef:39:cf:18:89:
1a:37:76:2d:96:2e:20:b5:10:0e:87:f0:79:35:17:
24:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:26:4D:3C:2F:7B:ED:DC:A2:B3:BB:BB:ED:69:99:CC:2F:7A:4F:80
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e34302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.40.0/23
Signature Algorithm: sha256WithRSAEncryption
37:96:3b:7d:06:1d:c9:bb:bd:5c:ca:51:96:56:57:63:e4:76:
f6:dc:4d:c0:f1:78:2d:8c:54:0e:9b:9d:d4:b3:c5:ea:5e:5a:
c7:52:75:8d:f6:7e:d9:c1:b1:29:f6:be:bc:c7:cc:f2:6a:94:
40:f7:9b:c6:d3:b7:aa:4b:6c:bc:30:2d:c6:1a:17:0a:e9:da:
cc:ee:45:8f:79:71:b4:b0:78:4d:56:50:34:10:37:b2:1c:7f:
7d:3a:a7:50:b8:07:a5:eb:a9:dc:e7:11:49:47:08:e7:2c:73:
04:7d:54:dc:96:0e:46:b7:98:70:60:c7:84:b8:78:7b:6e:f3:
9e:fa:a9:70:3e:67:63:98:70:5b:31:46:6c:65:44:49:ba:07:
c6:f0:2d:4f:47:40:be:97:e3:26:4a:99:b3:ce:b3:02:f3:48:
01:41:a7:09:62:04:fd:ad:f6:78:a3:2e:48:05:3a:e8:93:df:
ee:a8:c2:46:0f:a4:50:58:5d:ef:2a:11:c3:70:5a:6c:f7:d4:
c9:1f:41:20:6d:ca:ef:0b:c0:6b:fc:6b:88:e4:da:b1:3d:a9:
0c:96:7a:c4:a6:cb:94:f2:8b:eb:6f:b4:5b:7e:ab:d1:42:5f:
ee:78:8c:47:2f:dc:c5:32:9f:20:1f:7b:18:2c:09:a0:4d:a1:
c1:89:5b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:34:14 2025 by rpki-client