Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e34342e302f32322d3234203d3e20383334.roa
File: 3134332e32302e34342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: vQdFCw3Hm7Ry9Sw5tr/us3l3qHyZ2YRPxKkKeBBaDp8=
Subject key identifier: 7A:8C:4F:37:DF:7D:C6:38:80:9E:DB:6F:91:D1:0D:F7:D3:65:00:E3
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 28CAA4088B7188E0ED984DE5CA1426F66E9DC66F
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e34342e302f32322d3234203d3e20383334.roa
Signing time: Wed 04 Jun 2025 09:33:10 +0000
ROA not before: Wed 04 Jun 2025 09:28:10 +0000
ROA not after: Wed 03 Jun 2026 09:33:10 +0000
asID: 834
IP address blocks: 143.20.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 17:39:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ca:a4:08:8b:71:88:e0:ed:98:4d:e5:ca:14:26:f6:6e:9d:c6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 4 09:28:10 2025 GMT
Not After : Jun 3 09:33:10 2026 GMT
Subject: CN=7A8C4F37DF7DC638809EDB6F91D10DF7D36500E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c0:60:a9:d0:da:b0:5f:d0:01:94:5f:dc:e6:
6f:86:af:a6:4a:7e:54:ea:09:f0:23:0e:95:d2:ba:
b1:2c:2d:f8:d8:12:66:bf:d6:e0:c9:64:ef:39:4a:
f4:6f:29:98:b0:27:d6:13:17:30:3f:9d:69:af:cc:
03:dc:a1:cb:ed:6b:54:79:a5:dd:a4:8b:07:f2:af:
82:13:40:2a:4f:1c:35:16:a2:ad:58:0e:64:f1:a2:
73:c0:ba:ad:86:5a:dc:2c:f5:0e:c7:7b:71:f0:7d:
4d:5f:fc:b7:95:5f:81:91:b0:9b:b3:f7:17:8a:67:
a8:ad:48:5c:10:a5:ad:98:56:12:19:5c:ad:5c:61:
5f:57:9f:98:91:eb:35:e1:41:9f:6c:88:59:da:e7:
bd:c0:18:7a:53:de:3b:b4:03:29:13:97:74:96:2a:
d0:10:0d:c6:a5:b1:53:30:2a:00:b8:d3:41:56:1a:
ed:7f:b2:58:2e:7c:b0:36:f1:44:cd:0b:cf:75:c3:
61:5e:16:77:15:71:ea:25:7a:7c:da:7e:ce:d5:85:
b3:a1:1c:59:6b:13:ea:43:f7:f9:ff:65:21:a8:0d:
21:0e:de:68:b3:48:89:ba:f3:51:6f:a9:ad:2b:ee:
61:38:79:f8:17:aa:b9:58:a1:8a:4a:32:2b:ad:18:
8f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8C:4F:37:DF:7D:C6:38:80:9E:DB:6F:91:D1:0D:F7:D3:65:00:E3
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e34342e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.44.0/22
Signature Algorithm: sha256WithRSAEncryption
ce:ba:c5:23:d1:17:0c:e7:17:fd:cf:a7:67:09:92:8b:0b:f0:
b0:a9:0f:a0:21:4c:9c:af:3c:86:12:4f:52:74:e9:fc:58:46:
19:8f:b1:37:4d:6a:71:64:33:d2:ec:76:91:93:78:23:35:7c:
da:3a:33:b1:f2:33:b8:f7:7d:53:ed:bd:00:bb:33:cc:14:f8:
2b:1d:70:45:b1:a4:45:33:a8:df:82:d6:47:f7:ea:be:1f:25:
7b:be:cc:61:9a:76:20:47:9e:3e:d8:e5:83:64:70:e2:c7:d4:
15:16:8e:58:02:c5:21:97:64:82:b8:8d:67:8a:53:e9:3f:a1:
21:f2:54:ef:be:6c:1a:50:fd:99:f6:4b:ee:43:68:2c:a6:08:
77:22:60:9e:64:8a:98:51:88:9e:3f:1d:98:69:0c:6b:15:b0:
a8:33:21:1c:a3:a9:af:52:4f:68:6a:d0:ff:e4:6f:87:1f:26:
c0:e6:ef:bc:69:c6:62:d6:86:e5:3d:f0:79:41:9d:31:5f:7e:
bf:c1:99:05:c7:28:04:fd:6a:a8:5f:dd:d6:c4:c0:d1:14:d7:
04:9f:63:8c:26:dd:ec:de:56:83:dc:64:95:41:eb:47:f6:36:
05:56:19:cd:9f:61:ed:10:93:4b:8b:5c:74:e0:67:ef:72:30:
00:e4:d0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:27:44 2025 by rpki-client