Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e38302e302f32302d3234203d3e20383334.roa
File: 3134332e32302e38302e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier: CjscouJ7XLbCStcdu1Vgb5SmuTXnSCIAK8a69vQNdSo=
Subject key identifier: 39:00:3F:A9:93:75:0B:EE:64:BE:7A:4C:94:9C:F3:70:FF:F5:67:44
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 3985224F5D471F6A4216E8943CC8A90BE52CEB3E
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e38302e302f32302d3234203d3e20383334.roa
Signing time: Sun 18 May 2025 17:41:35 +0000
ROA not before: Sun 18 May 2025 17:36:35 +0000
ROA not after: Sun 17 May 2026 17:41:35 +0000
asID: 834
IP address blocks: 143.20.80.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 May 2025 08:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:85:22:4f:5d:47:1f:6a:42:16:e8:94:3c:c8:a9:0b:e5:2c:eb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 18 17:36:35 2025 GMT
Not After : May 17 17:41:35 2026 GMT
Subject: CN=39003FA993750BEE64BE7A4C949CF370FFF56744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4a:c6:f9:d8:2f:6f:6f:cc:a1:51:f5:16:8a:
4d:7f:40:9c:44:64:e7:35:bf:96:a5:3c:6c:b9:9f:
cb:17:4d:1c:b9:26:58:35:ac:b2:90:ff:e0:b1:f8:
62:64:e9:3e:be:bf:f5:2a:c1:8d:9a:db:a1:07:94:
fe:d6:f7:71:94:2b:40:b4:8a:d1:64:62:21:03:89:
59:82:6b:04:84:80:23:01:c2:58:51:db:37:0c:db:
b5:47:5e:cd:b5:70:c3:70:cc:84:51:3d:e2:5b:fe:
74:c7:e2:4b:eb:7e:fa:57:6d:74:54:1e:2b:33:fa:
ae:44:4a:3d:59:7e:32:69:95:c9:55:d8:d1:64:2c:
7c:4f:36:56:51:f2:88:09:82:82:18:c5:ca:fe:b8:
0c:dd:27:7d:2c:b6:9a:c1:7b:1d:a4:00:56:b5:44:
08:ee:54:c9:29:f4:36:88:49:bf:65:b5:af:57:da:
04:4f:03:75:6f:40:7d:21:ca:cf:fb:1b:e6:1a:8f:
22:b7:22:c3:c2:4a:ce:2a:6c:31:2d:f9:89:a4:99:
20:0c:a9:3a:53:a7:37:e4:8e:23:81:cb:47:ed:0b:
89:3e:63:21:52:86:db:1d:3a:1a:37:80:e6:76:a8:
1f:ca:a5:13:be:65:1b:80:aa:f8:5e:b4:10:71:05:
77:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:00:3F:A9:93:75:0B:EE:64:BE:7A:4C:94:9C:F3:70:FF:F5:67:44
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e38302e302f32302d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.80.0/20
Signature Algorithm: sha256WithRSAEncryption
31:51:c6:9f:d7:a9:59:b8:ce:a9:da:3c:d5:ec:e3:26:07:d6:
d7:43:65:55:81:db:d3:ba:58:49:e1:1e:b5:14:f9:50:2a:e5:
e0:a5:37:79:44:9b:8b:36:64:f6:b5:73:35:3b:49:35:08:09:
da:2d:ea:ab:a7:33:45:02:00:15:10:9f:ee:42:19:a3:6d:8d:
9e:81:76:67:b9:e8:d8:a7:dd:e2:a4:97:c0:15:2a:60:80:94:
a0:1f:92:5f:58:18:6f:7e:7a:28:85:b8:82:eb:07:91:cd:43:
63:05:32:5a:6a:f3:7e:d0:63:e1:16:87:c2:fb:dd:aa:a2:a7:
89:02:13:a9:63:6c:b1:4d:74:c4:a2:0e:3e:1d:2b:d7:bc:ff:
66:e7:ab:b0:3a:01:fb:22:dc:24:05:89:da:75:3d:7e:15:db:
22:71:06:de:f5:f6:80:53:b7:8e:a2:d1:83:fa:59:f0:96:54:
37:66:8d:21:65:53:e5:bb:01:ac:5b:6c:8f:ef:02:f4:c3:4c:
e4:07:96:32:82:28:eb:eb:9a:06:c1:bd:6f:71:ac:56:f7:4b:
18:db:a1:43:e2:c4:0e:7e:05:5c:92:31:77:1b:a8:1d:07:9d:
11:06:20:6e:8c:e2:71:29:6d:5e:93:eb:3f:32:a5:8d:b7:86:
f6:18:10:cc
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUOYUiT11HH2pCFuiUPMipC+Us6z4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNTA1MTgxNzM2MzVaFw0yNjA1MTcxNzQxMzVaMDMxMTAvBgNV
BAMTKDM5MDAzRkE5OTM3NTBCRUU2NEJFN0E0Qzk0OUNGMzcwRkZGNTY3NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoSsb52C9vb8yhUfUWik1/QJxE
ZOc1v5alPGy5n8sXTRy5Jlg1rLKQ/+Cx+GJk6T6+v/UqwY2a26EHlP7W93GUK0C0
itFkYiEDiVmCawSEgCMBwlhR2zcM27VHXs21cMNwzIRRPeJb/nTH4kvrfvpXbXRU
Hisz+q5ESj1ZfjJplclV2NFkLHxPNlZR8ogJgoIYxcr+uAzdJ30stprBex2kAFa1
RAjuVMkp9DaISb9lta9X2gRPA3VvQH0hys/7G+YajyK3IsPCSs4qbDEt+YmkmSAM
qTpTpzfkjiOBy0ftC4k+YyFShtsdOho3gOZ2qB/KpRO+ZRuAqvhetBBxBXfrAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUOQA/qZN1C+5kvnpMlJzzcP/1Z0QwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjIt
ZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2MmUwLzAvMzEzNDMzMmUzMjMwMmUzODMw
MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjxRQMA0G
CSqGSIb3DQEBCwUAA4IBAQAxUcaf16lZuM6p2jzV7OMmB9bXQ2VVgdvTulhJ4R61
FPlQKuXgpTd5RJuLNmT2tXM1O0k1CAnaLeqrpzNFAgAVEJ/uQhmjbY2egXZnuejY
p93ipJfAFSpggJSgH5JfWBhvfnoohbiC6weRzUNjBTJaavN+0GPhFofC+92qoqeJ
AhOpY2yxTXTEog4+HSvXvP9m56uwOgH7ItwkBYnadT1+FdsicQbe9faAU7eOotGD
+lnwllQ3Zo0hZVPluwGsW2yP7wL0w0zkB5Yygijr65oGwb1vcaxW90sY26FD4sQO
fgVckjF3G6gdB50RBiBujOJxKW1ek+s/MqWNt4b2GBDM
-----END CERTIFICATE-----
Generated at Fri Jun 6 23:26:00 2025 by rpki-client