Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130372e302f32342d3234203d3e203539343332.roa
File: 33312e32322e3130372e302f32342d3234203d3e203539343332.roa (raw, json)
Hash identifier: 32P4wcQ4+ZlqGJuAtax5CECJU0VJI/is+RCkCV24CtU=
Subject key identifier: A4:7C:6F:B6:04:F7:2E:08:DD:50:8A:EF:2E:0B:7E:E1:36:62:0F:52
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 11BD111D1B0067547F13F6EFC586BAB4C323DB39
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130372e302f32342d3234203d3e203539343332.roa
Signing time: Tue 06 May 2025 20:34:04 +0000
ROA not before: Tue 06 May 2025 20:29:04 +0000
ROA not after: Tue 05 May 2026 20:34:04 +0000
asID: 59432
IP address blocks: 31.22.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jun 2025 00:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:bd:11:1d:1b:00:67:54:7f:13:f6:ef:c5:86:ba:b4:c3:23:db:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: May 6 20:29:04 2025 GMT
Not After : May 5 20:34:04 2026 GMT
Subject: CN=A47C6FB604F72E08DD508AEF2E0B7EE136620F52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:c7:d7:83:83:53:16:c3:b9:10:dc:a3:49:
57:aa:5c:13:20:fa:fe:b7:a7:43:72:fa:2c:3c:5b:
21:3e:cd:f4:00:da:27:94:2e:ee:c9:7d:6a:1c:aa:
87:af:c1:8e:d2:78:5e:2e:0d:f5:d2:7a:22:39:4c:
56:e1:64:00:00:a0:59:c5:51:9e:7e:60:64:28:ec:
84:3c:04:f1:09:ba:34:12:ff:4a:cd:13:18:e7:3b:
49:1f:e9:b3:b4:da:ac:b5:89:d2:c0:0d:c7:01:29:
0a:89:6c:97:e8:81:7b:51:c8:62:b9:3b:0d:09:06:
5b:b5:de:29:a6:27:72:04:af:9e:49:9c:5e:07:b5:
03:11:f2:29:3f:96:92:f2:67:49:12:f6:33:fd:1f:
8b:76:8e:17:ca:ea:25:e8:24:38:32:4e:e2:5a:da:
56:3c:ac:c2:98:49:7a:c8:4e:da:9e:17:dd:72:49:
dc:2a:22:fb:91:a4:04:98:7d:ec:3e:3a:18:2a:49:
2c:8a:ff:3d:87:38:3e:b7:38:6a:8d:c1:ab:1f:14:
8a:a4:78:84:47:76:8e:44:2f:ae:9d:bc:69:c9:cc:
df:58:18:e7:e4:dc:36:b9:fc:02:fe:0a:33:9c:14:
d6:29:9e:b8:22:8a:64:f9:b2:b0:96:7c:36:a0:02:
d2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7C:6F:B6:04:F7:2E:08:DD:50:8A:EF:2E:0B:7E:E1:36:62:0F:52
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130372e302f32342d3234203d3e203539343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.107.0/24
Signature Algorithm: sha256WithRSAEncryption
38:34:ea:69:81:c7:82:b7:94:3e:cf:ec:57:f7:74:c0:a4:3a:
f4:ce:8a:e6:9b:ce:74:d5:51:88:96:94:05:f3:3a:51:ff:cc:
74:da:d5:2b:b9:84:43:17:26:7b:ae:3c:7c:2b:d6:b2:f9:bb:
cc:df:2e:9a:7e:83:05:62:e9:61:54:dd:ea:91:ff:fd:81:33:
cb:a6:64:95:45:09:b3:7a:73:b5:de:06:1f:37:32:42:7c:c8:
fb:f8:c0:4a:17:1b:ed:cf:9a:75:5e:e5:1f:95:24:37:c9:f2:
d1:72:b9:b9:a8:be:b2:9b:d4:d0:3f:d7:aa:72:d8:5d:37:d5:
fb:61:3c:b4:10:15:89:ce:a7:0b:8c:ee:53:d8:ee:39:95:de:
f8:1d:06:c5:e3:72:a9:9c:ab:98:8d:25:92:f6:dd:2a:7c:30:
4c:8e:3e:47:df:f4:0b:74:79:48:f0:5c:5b:df:bc:e7:ff:a0:
b0:23:0b:3c:b1:98:65:d5:45:6c:98:6f:6e:6b:53:bd:83:37:
d1:01:16:54:e5:ce:2e:4d:ca:e7:04:27:96:57:16:a2:14:00:
cd:b2:3f:b4:d2:ce:51:8e:43:2a:69:ce:3e:9a:d3:9d:92:ea:
5f:eb:51:91:fb:04:65:4c:a6:8b:78:d0:55:da:a1:1b:c9:1f:
14:75:ad:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:45:26 2025 by rpki-client