Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133302e302f32332d3234203d3e20383334.roa
File: 3130332e34392e3133302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: +ZqCcUx6+OAmaGQz4J9g2lRZTy1DTHmSMp5VnCHvk30=
Subject key identifier: F4:E1:C8:73:CA:A6:44:DF:CB:B9:9D:4C:BB:7B:2A:B3:8D:01:92:53
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 3F3029B6DC027ED49836821F670B4F518CB4059F
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133302e302f32332d3234203d3e20383334.roa
Signing time: Thu 10 Apr 2025 11:17:16 +0000
ROA not before: Thu 10 Apr 2025 11:12:16 +0000
ROA not after: Thu 09 Apr 2026 11:17:16 +0000
asID: 834
IP address blocks: 103.49.130.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 14:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:30:29:b6:dc:02:7e:d4:98:36:82:1f:67:0b:4f:51:8c:b4:05:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Apr 10 11:12:16 2025 GMT
Not After : Apr 9 11:17:16 2026 GMT
Subject: CN=F4E1C873CAA644DFCBB99D4CBB7B2AB38D019253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a9:15:4e:dc:0a:a2:8b:00:da:d4:a9:75:76:
94:ac:2c:66:51:27:1e:37:6c:17:fe:aa:f0:65:3a:
c0:61:db:6e:72:59:09:a8:50:c3:89:7f:8a:2b:21:
a2:2f:13:ec:1a:f9:37:11:0a:39:26:a6:3e:65:92:
b1:a2:05:d1:b8:91:85:8d:6e:f4:ab:ed:2a:3b:5a:
9d:21:81:44:dc:b5:0c:75:71:9c:59:ac:b4:7b:6c:
73:d9:40:76:f6:6e:af:2f:66:c3:df:25:75:26:73:
d2:bc:73:ff:5b:3b:5a:71:c4:06:e1:89:46:6d:8c:
96:a4:c4:7f:a3:ab:26:93:95:bc:ae:ee:e8:ad:70:
04:ea:da:65:76:31:c8:80:07:ae:fb:87:6a:df:fb:
ae:7d:2b:2f:f2:3a:4e:a9:2c:fa:a2:d8:82:86:1a:
ec:d3:e5:ae:cf:7d:fc:2e:f0:1b:c1:b1:5e:3b:6f:
3d:75:0b:31:87:ef:ea:57:43:42:fc:9b:b8:a7:ad:
d7:58:f5:5a:54:05:39:b9:1b:ec:13:5f:33:c3:b3:
2e:2a:20:72:51:b4:da:de:f5:6c:6b:3c:a0:f4:29:
3c:24:3d:37:e0:e2:28:a5:d5:5d:93:09:a5:4d:80:
3c:59:3e:49:7d:41:26:5f:bc:31:92:49:ed:60:23:
5c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E1:C8:73:CA:A6:44:DF:CB:B9:9D:4C:BB:7B:2A:B3:8D:01:92:53
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.130.0/23
Signature Algorithm: sha256WithRSAEncryption
91:80:c7:a5:a2:96:cc:9c:e5:63:20:25:f8:62:c1:f2:30:62:
41:62:1f:f9:44:cc:4d:4f:b5:91:f1:88:56:9c:2a:3d:6d:85:
85:d5:c6:a5:5e:a8:4b:4e:87:1d:88:91:e2:f0:f3:95:9d:9a:
db:f0:15:ef:3e:ac:80:09:bd:d1:b3:e5:d3:92:9a:90:83:c5:
08:4c:fb:c7:4e:d7:5b:37:05:6c:9f:f4:c5:81:dc:8f:91:93:
1d:fe:d7:cb:43:ff:f8:fb:91:95:ef:3c:d5:6d:de:a0:1c:9d:
29:0d:86:84:c6:10:ba:f7:a3:0f:51:70:04:64:d2:29:79:33:
7e:76:64:72:b0:a2:dc:65:14:43:bf:05:62:25:ac:08:1b:fc:
d2:7a:0c:d7:a7:b9:61:46:b1:b5:01:e2:00:c2:c4:ad:83:9e:
6c:ed:e0:0b:2e:93:87:df:44:54:b1:0b:70:e4:63:5c:40:b3:
d3:89:9d:6e:73:24:68:cf:47:07:75:d5:19:7a:39:93:8f:20:
42:39:5c:37:6f:cc:fa:26:87:47:fa:59:a7:c7:cb:04:e6:d3:
ce:73:6a:99:5d:ca:5a:7c:d7:1b:ea:16:81:21:f6:72:9b:75:
d9:79:a7:9b:90:aa:e2:aa:49:73:5a:f3:1c:d9:2b:3e:7a:05:
b1:ac:19:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:47:06 2025 by rpki-client