Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130362e302f32342d3234203d3e20383334.roa
File: 34352e3134362e3130362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: wFYkcv5o2PzjOZD08tieyw2T2vYG4yAThlJZUFsqbF0=
Subject key identifier: B5:C8:57:84:C2:93:5B:B4:4F:A6:BC:41:A4:53:99:95:0A:B6:D9:86
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 11DAD0839195747599D598C3C337257B42AC12A7
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130362e302f32342d3234203d3e20383334.roa
Signing time: Mon 12 May 2025 11:30:55 +0000
ROA not before: Mon 12 May 2025 11:25:55 +0000
ROA not after: Mon 11 May 2026 11:30:55 +0000
asID: 834
IP address blocks: 45.146.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 13:47:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:da:d0:83:91:95:74:75:99:d5:98:c3:c3:37:25:7b:42:ac:12:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: May 12 11:25:55 2025 GMT
Not After : May 11 11:30:55 2026 GMT
Subject: CN=B5C85784C2935BB44FA6BC41A45399950AB6D986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2e:a2:f4:34:33:15:37:cf:bd:eb:3a:d4:24:
40:7e:55:4e:36:79:9d:a1:2d:b5:d6:30:3f:99:dd:
74:c5:df:29:6c:0c:30:57:41:d4:18:3f:b8:c3:81:
7f:4c:43:70:cc:8a:43:d7:27:08:d4:bc:cc:45:c3:
a0:3a:cd:e3:b8:00:87:37:17:9b:66:80:ef:e6:51:
9b:be:15:8e:27:2b:1a:55:b7:71:45:c3:1c:d4:48:
e6:75:96:8d:d2:e9:88:31:b4:79:2c:24:91:d8:6a:
26:68:4d:ef:a0:77:83:8e:ca:78:ab:f9:a6:8c:40:
01:0e:a7:5a:39:ab:16:12:c9:04:27:90:69:44:f2:
66:9c:ed:35:79:4c:92:d0:47:57:49:2f:cb:07:eb:
25:d4:fe:96:f9:42:b8:77:c9:5d:bc:5f:af:2f:53:
68:d9:78:78:b6:b5:70:ff:dd:64:00:59:88:76:f8:
31:6d:98:ce:e1:5e:fe:03:ba:d3:12:15:b4:86:33:
1a:4c:ad:6d:ec:50:d6:61:ca:c8:54:36:d4:af:54:
fd:0b:38:f6:69:9a:87:e1:6e:9e:98:e3:a5:02:34:
76:25:c5:cf:3f:02:45:7d:06:22:56:99:80:1e:c2:
33:ad:4d:91:5d:5c:c2:b6:3b:03:30:78:db:eb:48:
f9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C8:57:84:C2:93:5B:B4:4F:A6:BC:41:A4:53:99:95:0A:B6:D9:86
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.106.0/24
Signature Algorithm: sha256WithRSAEncryption
16:69:28:7f:6e:4f:2b:82:17:30:17:7b:1b:e5:a0:20:05:45:
ae:de:3c:35:7b:f2:11:d0:b7:1a:35:3d:b1:0f:30:74:e6:bb:
11:c6:fa:b3:e6:da:2a:c0:eb:ed:5f:bb:95:e4:a4:0b:86:6d:
22:17:7f:0b:69:ff:8b:1b:7c:23:93:51:81:70:8d:58:61:7b:
b1:7e:f3:67:9d:b9:17:5d:55:e6:ff:14:99:bb:9b:f7:5c:85:
50:a6:18:c1:0b:d9:84:fe:53:4b:42:62:be:14:ab:ab:61:c1:
46:2f:c3:a3:ab:ad:89:5d:83:0a:ff:70:00:cb:e5:1f:88:cd:
b6:22:d8:56:53:16:ec:03:91:5a:1b:40:bc:b3:03:13:76:fd:
9a:19:21:4d:74:27:92:16:5b:81:d8:0d:d6:66:95:0b:6c:39:
d1:ae:03:15:71:c4:8e:ed:d5:a8:3d:99:f9:1e:eb:c8:9d:44:
cb:33:02:48:89:bb:0b:84:a0:1c:67:87:a9:58:96:8e:89:6c:
6c:1e:a3:50:50:e4:51:e6:73:8f:be:62:33:cf:c8:bf:c2:bd:
b6:00:8a:e0:27:fd:3c:5e:e9:ed:a0:56:22:ae:ed:71:df:40:
75:48:6c:8d:5f:40:cc:81:3a:d4:1d:5b:2e:fc:e0:58:fc:28:
70:f9:ee:20
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUEdrQg5GVdHWZ1ZjDwzcle0KsEqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3
ZTMwNTY0YTAeFw0yNTA1MTIxMTI1NTVaFw0yNjA1MTExMTMwNTVaMDMxMTAvBgNV
BAMTKEI1Qzg1Nzg0QzI5MzVCQjQ0RkE2QkM0MUE0NTM5OTk1MEFCNkQ5ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxLqL0NDMVN8+96zrUJEB+VU42
eZ2hLbXWMD+Z3XTF3ylsDDBXQdQYP7jDgX9MQ3DMikPXJwjUvMxFw6A6zeO4AIc3
F5tmgO/mUZu+FY4nKxpVt3FFwxzUSOZ1lo3S6YgxtHksJJHYaiZoTe+gd4OOynir
+aaMQAEOp1o5qxYSyQQnkGlE8mac7TV5TJLQR1dJL8sH6yXU/pb5Qrh3yV28X68v
U2jZeHi2tXD/3WQAWYh2+DFtmM7hXv4DutMSFbSGMxpMrW3sUNZhyshUNtSvVP0L
OPZpmofhbp6Y46UCNHYlxc8/AkV9BiJWmYAewjOtTZFdXMK2OwMweNvrSPkjAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUtchXhMKTW7RPprxBpFOZlQq22YYwHwYDVR0j
BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0
d1Zrby5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzQzNTJlMzEzNDM2MmUzMTMw
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtkmow
DQYJKoZIhvcNAQELBQADggEBABZpKH9uTyuCFzAXexvloCAFRa7ePDV78hHQtxo1
PbEPMHTmuxHG+rPm2irA6+1fu5XkpAuGbSIXfwtp/4sbfCOTUYFwjVhhe7F+82ed
uRddVeb/FJm7m/dchVCmGMEL2YT+U0tCYr4Uq6thwUYvw6OrrYldgwr/cADL5R+I
zbYi2FZTFuwDkVobQLyzAxN2/ZoZIU10J5IWW4HYDdZmlQtsOdGuAxVxxI7t1ag9
mfke68idRMszAkiJuwuEoBxnh6lYlo6JbGweo1BQ5FHmc4++YjPPyL/CvbYAiuAn
/Txe6e2gViKu7XHfQHVIbI1fQMyBOtQdWy784Fj8KHD57iA=
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:47:02 2025 by rpki-client