Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e36342e302f31392d3234203d3e20383334.roa
File: 3134332e32302e36342e302f31392d3234203d3e20383334.roa (raw, json)
Hash identifier: azm/av7/f7XrLJJZYI8ZZ3vWJhyDIEIvOwwXo8wEIPE=
Subject key identifier: E5:F8:41:DE:64:EA:68:6D:44:B0:C8:AD:54:60:D9:58:8C:30:0E:27
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5BC305A31AD3A60C8FF1AF5A66AC892427AF6F13
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e36342e302f31392d3234203d3e20383334.roa
Signing time: Wed 07 May 2025 15:09:08 +0000
ROA not before: Wed 07 May 2025 15:04:08 +0000
ROA not after: Wed 06 May 2026 15:09:08 +0000
asID: 834
IP address blocks: 143.20.64.0/19 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 May 2025 17:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:c3:05:a3:1a:d3:a6:0c:8f:f1:af:5a:66:ac:89:24:27:af:6f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 7 15:04:08 2025 GMT
Not After : May 6 15:09:08 2026 GMT
Subject: CN=E5F841DE64EA686D44B0C8AD5460D9588C300E27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bf:dd:86:36:9b:dd:78:fe:94:d0:f1:97:0a:
6b:41:3b:fc:28:45:db:e0:55:a5:09:01:da:11:5d:
99:b2:bb:61:6c:da:c4:25:93:3a:70:c3:7b:7e:3f:
bd:cf:7a:37:36:64:e9:47:2c:18:06:b0:40:d7:c8:
ef:c1:0a:6b:c1:4c:fd:8c:33:4f:54:7e:0d:5b:c9:
1f:50:e1:92:45:5c:99:6b:73:ef:d9:4a:ee:ab:ca:
81:ea:2c:3b:f0:4c:93:aa:13:6f:e0:71:2b:33:8f:
c1:97:57:42:6d:9f:bf:bf:77:c8:a0:71:1a:95:5a:
bf:19:47:20:48:98:ae:10:7c:29:60:36:45:01:69:
f7:e6:3e:ba:f2:f5:f3:a3:9d:a1:8b:4a:26:c5:65:
9b:d5:a8:be:56:2e:9f:61:4a:00:8a:26:75:27:4b:
37:82:a2:a6:bb:b6:fa:9c:ad:64:fe:1b:cf:d3:b3:
3d:74:6c:5b:2b:5e:74:5c:88:82:e1:9c:92:a7:8a:
e6:4b:5b:05:42:20:67:23:bf:0f:9d:a1:09:46:b8:
1b:5c:b2:f2:32:d9:f7:2c:b8:9a:b1:d3:c3:bf:22:
54:f0:4e:20:b2:19:e7:53:41:28:0d:b3:ac:28:17:
f6:fb:ef:30:70:b8:07:9d:e6:7a:d9:8e:56:66:ae:
9a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F8:41:DE:64:EA:68:6D:44:B0:C8:AD:54:60:D9:58:8C:30:0E:27
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e36342e302f31392d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.64.0/19
Signature Algorithm: sha256WithRSAEncryption
c8:f3:ad:02:c7:20:5c:f3:74:be:92:33:7e:65:3e:2b:22:2b:
6f:c6:d4:d0:bd:9d:c1:a6:f7:1a:c6:2f:d5:5c:5c:b7:a1:fe:
4e:65:d4:a1:4e:56:bf:af:df:b1:10:c7:f1:f9:72:8b:48:7a:
a2:28:0e:de:4d:03:7a:1e:de:a3:35:42:85:80:d0:02:c9:1c:
72:2b:9c:61:3e:9e:ca:2f:f5:dc:a8:bb:f7:e5:7b:59:86:2e:
3a:ac:23:82:38:a5:e6:1b:bd:d6:87:9a:58:5e:94:7d:a4:ea:
19:65:01:fa:9b:25:54:78:73:ef:a6:b7:29:64:e5:12:fa:f8:
57:c4:6a:f2:b3:13:85:76:5c:9d:1d:a7:ab:23:56:5f:94:e9:
d0:b0:f5:1e:56:08:0b:01:16:a9:31:12:d5:21:66:6d:50:4d:
9b:db:78:68:3e:5e:96:25:b9:48:7e:3b:68:8a:54:70:8d:63:
93:2f:17:30:d0:b0:9a:0b:50:21:dd:9d:8e:24:0d:fa:77:da:
bd:45:b8:aa:f7:40:a0:f8:5c:1b:a4:cd:b2:a2:f7:6d:26:02:
9f:96:6d:5b:c5:cc:d7:55:70:a2:7a:b4:40:98:27:d4:51:a7:
10:32:70:92:a2:63:d4:e3:11:86:58:d4:f4:31:1a:01:59:fc:
bb:13:3f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:21:05 2025 by rpki-client