Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33362e302f32342d3234203d3e203630313137.roa
File: 3134392e36322e33362e302f32342d3234203d3e203630313137.roa (raw, json)
Hash identifier: S/t0wd9Nj2sGhUSdWvfMIjsIZagQVhiyRgXoqdyoAqA=
Subject key identifier: 25:04:2F:92:46:2A:26:52:57:8E:45:1B:1C:23:BA:03:0D:67:E0:33
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 75CDAAFC0901894F428B63926690DFB8CAC42E07
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33362e302f32342d3234203d3e203630313137.roa
Signing time: Mon 30 Jun 2025 21:00:17 +0000
ROA not before: Mon 30 Jun 2025 20:55:17 +0000
ROA not after: Mon 29 Jun 2026 21:00:17 +0000
asID: 60117
IP address blocks: 149.62.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Jul 2025 17:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:cd:aa:fc:09:01:89:4f:42:8b:63:92:66:90:df:b8:ca:c4:2e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jun 30 20:55:17 2025 GMT
Not After : Jun 29 21:00:17 2026 GMT
Subject: CN=25042F92462A2652578E451B1C23BA030D67E033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ad:9e:4d:24:9e:34:7c:a1:27:e2:f7:22:f0:
46:6f:3f:4b:b6:e0:ff:b2:3c:d2:8f:ab:3c:17:15:
69:80:58:82:67:8e:84:ea:74:3a:c3:0f:da:38:c9:
1f:23:e6:31:45:11:ae:6c:a3:cb:d4:c3:73:6f:6f:
64:f0:21:97:c8:cb:d6:b7:5d:f9:02:58:4a:bd:06:
0c:5b:25:35:47:97:fc:28:ea:0f:40:da:21:97:2c:
6e:69:e8:4e:5e:88:9e:41:2d:aa:5a:13:57:b8:71:
11:e3:63:4d:d2:00:f2:ff:e7:f4:ad:e4:5b:c9:83:
fe:9b:5c:71:28:a2:bf:fd:b0:86:bb:82:7e:30:2e:
1e:d9:5d:39:d6:60:3d:81:27:a9:8e:a2:f0:15:3e:
1b:1d:46:bc:58:4c:df:f8:c2:6d:d3:dc:68:8f:08:
01:f6:40:e6:0b:07:28:30:f2:7e:6f:a9:4e:46:5e:
cd:54:e2:83:a1:38:02:74:2a:e5:11:0e:4f:c6:65:
78:ca:64:1d:f2:8c:d6:dd:c8:c1:9e:96:c1:7c:a3:
3f:55:ed:9a:ae:c6:b9:26:fd:63:53:6e:88:11:f6:
73:70:c6:20:1f:d5:1e:eb:8a:6a:47:ac:3a:d7:74:
7d:0e:d6:41:b1:28:ed:3f:8c:fd:06:80:db:19:3b:
3b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:04:2F:92:46:2A:26:52:57:8E:45:1B:1C:23:BA:03:0D:67:E0:33
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33362e302f32342d3234203d3e203630313137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.36.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:6e:65:b9:e4:16:09:b5:96:3b:83:b6:d9:3e:15:00:ae:a6:
3c:3a:ab:a6:82:7c:c1:93:64:66:60:9b:19:a7:f4:69:71:fa:
1e:06:ad:35:a8:1e:24:a6:1b:a0:94:c4:07:bd:d2:7e:32:c6:
88:f9:f0:ba:28:07:95:c2:a3:8f:b9:1f:e8:a0:f7:27:bb:25:
04:59:a8:7a:66:5e:4c:4d:0f:d2:6d:e6:8c:61:ca:5e:d6:06:
2f:2f:5a:ae:84:ae:66:d5:e4:99:ed:4a:f5:24:4e:42:bd:bd:
ad:c0:ee:82:e6:9e:43:97:e6:b8:bd:c5:b3:95:24:50:d0:10:
b0:9e:3b:36:ff:99:a8:b1:15:47:84:b4:b7:ae:f7:bd:d7:22:
7f:ec:46:d3:09:d7:2e:ac:1c:34:78:7c:e9:46:4d:2a:e9:05:
1e:32:af:2a:88:29:52:0b:fd:41:e5:79:61:2d:9e:b0:bb:b4:
85:dc:15:13:53:55:ad:37:85:8b:af:40:f0:1a:8a:c6:14:c9:
9d:2f:65:14:37:9b:ee:36:c6:fe:0d:76:02:ad:6c:12:7c:0b:
78:55:0e:0d:0a:27:48:86:fd:10:73:02:81:04:82:fb:9b:76:
94:5c:65:fb:7f:e4:ff:c0:d5:5f:51:59:6d:6a:0f:cd:8d:af:
21:91:c7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:28:42 2025 by rpki-client