Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e34332e302f32342d3234203d3e20323132323338.roa
File: 3134332e32302e34332e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: JSzP6eSUh99lPqutItKg5CecyW7SYI3L48uqloAt0Pg=
Subject key identifier: 82:07:B0:DD:2D:D8:8A:4B:CB:4F:1F:17:CF:5C:BE:BC:12:29:D3:8A
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 299F964A4740FDC185D9ADD147BD2DD9ED111DDE
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e34332e302f32342d3234203d3e20323132323338.roa
Signing time: Wed 04 Jun 2025 09:33:04 +0000
ROA not before: Wed 04 Jun 2025 09:28:04 +0000
ROA not after: Wed 03 Jun 2026 09:33:04 +0000
asID: 212238
IP address blocks: 143.20.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 17:39:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:9f:96:4a:47:40:fd:c1:85:d9:ad:d1:47:bd:2d:d9:ed:11:1d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 4 09:28:04 2025 GMT
Not After : Jun 3 09:33:04 2026 GMT
Subject: CN=8207B0DD2DD88A4BCB4F1F17CF5CBEBC1229D38A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a8:64:2e:2e:81:15:32:a8:b6:d1:74:dd:93:
ea:ad:b3:8e:ce:12:11:a4:d2:c3:4f:37:0f:4b:be:
53:10:a0:09:7d:47:85:5b:bb:4d:d1:c2:75:0b:32:
c5:eb:ce:78:a4:db:69:d3:0e:70:33:45:cb:3c:8e:
22:d4:cd:9e:ad:16:8e:f0:4b:ed:2e:16:4a:93:bc:
78:23:4d:42:c1:bb:94:3a:10:be:2a:ce:dd:90:ef:
e7:ae:d8:68:ca:9d:71:d0:c6:7c:67:1f:b4:fb:16:
48:75:cf:7f:53:dd:fd:21:ad:d8:78:4d:6a:c6:2a:
d7:ca:35:4a:72:b1:e1:bb:bc:07:f1:91:e9:10:e3:
8e:87:92:42:18:fd:14:ef:71:64:b9:b4:16:9c:43:
2d:0a:f4:e1:94:f8:5d:82:44:5b:21:60:c3:2f:6d:
c7:ce:4b:be:06:21:be:66:d9:fe:31:b2:8b:a2:5e:
fe:de:68:ad:7b:5a:f9:b8:17:0e:a5:ec:ea:b3:0b:
1b:bb:af:a3:14:43:9e:2d:37:2a:2f:ba:96:a5:23:
06:0e:f7:b3:31:19:6f:73:ad:7f:58:c0:e3:2e:0a:
e3:17:71:55:d9:05:30:05:d2:1c:35:03:54:aa:5c:
d6:c6:19:ae:18:eb:fa:7a:10:ff:3f:a3:42:4f:c0:
d1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:07:B0:DD:2D:D8:8A:4B:CB:4F:1F:17:CF:5C:BE:BC:12:29:D3:8A
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e34332e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.43.0/24
Signature Algorithm: sha256WithRSAEncryption
81:e4:aa:3f:48:0e:d3:78:fb:b1:7e:e0:a5:11:f5:e0:a9:45:
f7:f4:f6:36:d7:66:62:53:77:6d:18:ef:89:08:31:69:ed:a8:
3f:a2:6c:b5:53:75:10:56:e3:fa:36:0a:0f:34:38:25:22:4d:
df:90:94:e7:22:53:1f:4c:aa:d0:73:c8:c9:55:32:f9:1a:0f:
a4:8a:bc:a4:02:aa:c7:5f:14:00:f7:76:bd:3f:37:62:3a:ef:
60:a8:e6:77:35:5d:b1:06:ce:e3:01:be:6d:3c:5b:c3:90:fe:
ec:8f:77:83:c9:e6:88:e9:3a:2c:dc:05:8a:70:be:80:8d:4a:
fa:fb:d6:03:51:eb:c3:bd:23:5c:fb:22:4d:52:39:7e:d7:f2:
8b:f7:04:38:cd:2b:c8:ac:a5:1f:35:f5:22:7d:49:1c:ce:5e:
76:ca:bb:84:ab:d3:47:48:27:4f:4a:c1:ae:20:83:e3:7a:5c:
84:2b:80:a0:ff:56:44:e5:db:f7:be:db:83:d1:bb:95:76:80:
fb:bd:51:1f:6d:92:d3:9f:f8:3b:35:fb:b8:f6:91:86:74:20:
6f:1a:71:18:53:a1:d4:2f:43:8f:ce:30:4e:42:cc:f8:db:b0:
aa:9c:38:ab:58:8d:ea:c5:1d:54:7b:37:eb:99:f7:9b:e6:02:
32:5f:21:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:39:32 2025 by rpki-client