Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e20383334.roa
File: 34332e3233302e38342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: L4vRSkSEhbXzD6U3GmsJK5aXt97fTpajPDe9eeX6wRU=
Subject key identifier: FE:26:EB:67:45:CB:E5:4E:D9:E5:91:8F:CC:B1:C4:D1:E4:95:09:BF
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 12AC280DAC0817A572B781013E2E22C8D9AFB987
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e20383334.roa
Signing time: Mon 28 Apr 2025 11:35:33 +0000
ROA not before: Mon 28 Apr 2025 11:30:33 +0000
ROA not after: Mon 27 Apr 2026 11:35:33 +0000
asID: 834
IP address blocks: 43.230.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 09:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ac:28:0d:ac:08:17:a5:72:b7:81:01:3e:2e:22:c8:d9:af:b9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Apr 28 11:30:33 2025 GMT
Not After : Apr 27 11:35:33 2026 GMT
Subject: CN=FE26EB6745CBE54ED9E5918FCCB1C4D1E49509BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8a:79:ef:bf:1b:e2:dc:58:38:c8:ac:ed:c8:
3c:d4:bf:b2:cc:21:69:25:88:da:10:b4:37:ec:ad:
bf:11:96:19:18:7a:0a:45:cf:37:aa:42:78:d2:51:
c9:cd:7e:49:9a:be:c7:65:c6:92:bf:d5:00:a9:6a:
1b:0d:32:41:7b:94:f5:46:c5:40:ec:fb:7d:18:98:
0d:ce:43:0e:7f:1b:6e:70:d2:d7:2f:05:56:6d:57:
1a:c3:48:ee:9e:53:9c:61:ed:bb:65:49:bc:ce:00:
a4:fa:e1:fa:11:32:3d:9b:c6:4f:9a:d0:a4:18:4b:
30:0a:18:9d:14:53:ec:68:7e:4c:eb:f3:68:3e:87:
e6:a2:2b:04:97:e4:cc:2f:fc:ff:f9:99:38:12:e1:
ed:e6:ab:e2:87:c3:e7:2e:35:8b:a8:0e:af:99:e1:
48:51:4c:5a:c9:09:81:9b:47:a6:c8:c0:ec:77:d9:
70:4c:cf:03:92:b3:29:03:ae:77:46:51:1b:11:ff:
f9:7a:54:a3:01:3b:5f:5e:8f:e9:b9:3d:79:42:ef:
0e:28:37:ee:93:42:2e:f6:92:8c:7d:0f:32:bb:7b:
ea:e7:d7:73:86:e3:9d:4a:37:9c:a1:36:68:8b:79:
7e:0b:56:4f:84:69:5b:a2:ad:4e:5a:be:46:14:f5:
dd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:26:EB:67:45:CB:E5:4E:D9:E5:91:8F:CC:B1:C4:D1:E4:95:09:BF
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.84.0/24
Signature Algorithm: sha256WithRSAEncryption
64:bc:06:1a:9d:bc:dc:80:80:1f:c5:3d:4d:29:f1:b0:83:61:
d4:32:f0:82:a9:36:a5:65:b8:2e:09:b2:d4:e6:a9:08:48:18:
dc:59:78:ce:18:34:3d:b8:2a:2c:f8:e0:2d:c4:79:a7:0c:c9:
01:41:2f:35:bf:0b:85:f8:fb:87:25:b6:1e:15:3d:c3:16:47:
2b:ae:65:e1:19:74:df:c7:79:25:36:f6:fa:12:ab:51:36:75:
97:dd:b3:60:01:ba:c1:93:67:99:26:39:5a:d4:76:5f:6a:6a:
99:b2:f9:b0:47:f5:32:22:33:92:ce:0b:62:05:4d:35:e7:34:
46:8c:53:f6:e0:e2:48:66:28:c2:d0:45:40:99:f0:51:f4:50:
e9:dc:5e:9a:bf:92:89:7d:e5:0b:20:fb:3e:0c:3c:72:20:e1:
8e:c3:43:1e:0d:60:98:a4:09:b4:67:0d:ee:64:2b:ca:35:d9:
76:e4:67:24:79:a7:4d:64:73:38:25:79:ec:11:78:23:57:80:
20:d3:8c:c2:89:d0:ae:1e:78:0f:ba:a1:b7:11:5c:f7:12:30:
05:b4:c4:89:16:0a:bf:2f:38:39:f9:c9:62:98:3d:e7:49:16:
21:12:3a:aa:08:af:de:fe:d0:a0:1e:e3:97:11:ac:c9:f8:22:
99:7f:f4:2f
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUEqwoDawIF6Vyt4EBPi4iyNmvuYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw
YWVhYjI5ZDAeFw0yNTA0MjgxMTMwMzNaFw0yNjA0MjcxMTM1MzNaMDMxMTAvBgNV
BAMTKEZFMjZFQjY3NDVDQkU1NEVEOUU1OTE4RkNDQjFDNEQxRTQ5NTA5QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSinnvvxvi3Fg4yKztyDzUv7LM
IWkliNoQtDfsrb8RlhkYegpFzzeqQnjSUcnNfkmavsdlxpK/1QCpahsNMkF7lPVG
xUDs+30YmA3OQw5/G25w0tcvBVZtVxrDSO6eU5xh7btlSbzOAKT64foRMj2bxk+a
0KQYSzAKGJ0UU+xofkzr82g+h+aiKwSX5Mwv/P/5mTgS4e3mq+KHw+cuNYuoDq+Z
4UhRTFrJCYGbR6bIwOx32XBMzwOSsykDrndGURsR//l6VKMBO19ej+m5PXlC7w4o
N+6TQi72kox9DzK7e+rn13OG451KN5yhNmiLeX4LVk+EaVuirU5avkYU9d2dAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQU/ibrZ0XL5U7Z5ZGPzLHE0eSVCb8wHwYDVR0j
BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2
NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy
cXNwMC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQt
NmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2NjIwLzAvMzQzMzJlMzIzMzMwMmUzODM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK+ZUMA0G
CSqGSIb3DQEBCwUAA4IBAQBkvAYanbzcgIAfxT1NKfGwg2HUMvCCqTalZbguCbLU
5qkISBjcWXjOGDQ9uCos+OAtxHmnDMkBQS81vwuF+PuHJbYeFT3DFkcrrmXhGXTf
x3klNvb6EqtRNnWX3bNgAbrBk2eZJjla1HZfamqZsvmwR/UyIjOSzgtiBU015zRG
jFP24OJIZijC0EVAmfBR9FDp3F6av5KJfeULIPs+DDxyIOGOw0MeDWCYpAm0Zw3u
ZCvKNdl25GckeadNZHM4JXnsEXgjV4Ag04zCidCuHngPuqG3EVz3EjAFtMSJFgq/
Lzg5+climD3nSRYhEjqqCK/e/tCgHuOXEazJ+CKZf/Qv
-----END CERTIFICATE-----
Generated at Fri Jun 6 22:41:28 2025 by rpki-client