Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233372e302f32342d3234203d3e20383334.roa
File: 3231322e322e3233372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: I0iLD2CAlQBi3UEDnOizk26zxn7JfZ1IvwreqBOPkag=
Subject key identifier: 80:4E:23:31:EC:0A:12:65:DB:80:47:34:43:20:95:E2:8D:D4:8A:72
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 5222309957903738AA1B2270501D7FB33E04D0F0
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233372e302f32342d3234203d3e20383334.roa
Signing time: Fri 10 Jan 2025 10:54:52 +0000
ROA not before: Fri 10 Jan 2025 10:49:52 +0000
ROA not after: Fri 09 Jan 2026 10:54:52 +0000
asID: 834
IP address blocks: 212.2.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 03:15:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:22:30:99:57:90:37:38:aa:1b:22:70:50:1d:7f:b3:3e:04:d0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Jan 10 10:49:52 2025 GMT
Not After : Jan 9 10:54:52 2026 GMT
Subject: CN=804E2331EC0A1265DB804734432095E28DD48A72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:57:a6:48:d5:5f:5c:09:8f:94:62:99:7f:a9:
6d:30:6b:3b:1e:b0:d1:f5:d5:91:2a:bb:b1:19:35:
96:09:67:ad:fb:3b:aa:50:fa:75:8d:ab:19:9f:2b:
04:6a:de:81:7e:e9:12:19:47:e3:e5:2f:54:04:7f:
70:c0:08:51:37:8b:ac:e5:5c:a8:ff:87:69:29:23:
2f:99:3e:6a:52:8f:5a:d0:80:71:90:1a:0a:cc:7f:
2d:b1:21:e2:1d:c4:9d:33:bc:6a:b5:1e:68:33:aa:
c1:49:07:da:41:a1:eb:a0:10:66:ef:80:d6:43:fb:
e6:29:b9:ef:bb:1a:78:13:3b:38:9d:d8:63:34:09:
87:e9:11:ff:48:ee:e0:d0:97:81:6b:cf:42:4a:bb:
88:bc:18:54:44:76:41:4a:2a:33:de:44:01:c2:fc:
16:b5:28:b5:b1:bb:51:65:f7:70:14:ed:5a:75:94:
4d:12:46:59:26:de:5d:12:c9:51:9b:48:21:34:d4:
40:3a:dd:5f:72:23:e0:9a:15:50:d9:3c:ea:63:54:
2a:08:28:dd:06:aa:6d:c9:ec:5b:1b:9d:a8:ca:61:
65:0b:cc:ca:5d:83:c5:78:74:75:5f:f8:b2:7b:6d:
de:8b:bb:33:5c:0c:6d:e9:a8:fb:fe:ed:6c:18:36:
fc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4E:23:31:EC:0A:12:65:DB:80:47:34:43:20:95:E2:8D:D4:8A:72
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.2.237.0/24
Signature Algorithm: sha256WithRSAEncryption
41:96:79:86:0c:a2:bc:f9:a5:00:28:63:62:8d:3b:be:b6:cd:
da:83:25:08:f6:80:bf:e9:8d:63:42:99:b5:5b:0e:9c:69:02:
5c:84:95:4e:a5:5a:e8:17:7c:ea:1f:5a:8f:a2:30:bc:ad:88:
03:e8:a0:7f:fc:2f:28:78:d8:40:18:72:33:6c:f0:31:5f:4d:
9f:eb:cf:f8:9b:14:1a:11:e9:6b:4a:7a:a2:6f:4b:4a:2d:6e:
8c:52:d0:a6:c5:f0:f6:59:3d:5a:ad:4e:11:7d:94:0a:a6:04:
dd:95:2c:0f:33:91:51:d6:12:bb:b0:a7:fd:00:bc:21:f8:35:
57:95:7c:8c:1a:10:9f:2b:71:2c:5d:1a:40:fb:aa:d8:da:12:
6f:2e:10:2b:5c:65:b4:e3:bc:6a:9f:b6:de:65:42:49:98:64:
df:2f:93:1f:f2:28:52:fa:22:cc:20:1a:30:fd:4f:2d:38:33:
85:d6:fe:f5:4c:fb:3b:4f:bf:8f:eb:dd:0d:a1:c8:f6:bc:bf:
e1:c2:3b:d2:1d:0a:df:5d:5c:72:bb:52:51:09:3e:55:48:e1:
a1:51:a9:5f:13:42:6c:c2:4c:88:6d:b9:71:02:4b:13:4d:a8:
7c:58:7c:37:84:db:93:d5:a0:a7:23:fa:8e:6c:1d:be:b9:69:
c7:6e:4a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:49:00 2025 by rpki-client