Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213430.roa
File: AS213430.roa (raw, json)
Hash identifier: ZaWcHELWaFvo8nnwfWoOT4Y0I5t3bdmUflKT0IIpb8M=
Subject key identifier: 1D:5C:AF:FB:5C:7A:80:A1:A4:0A:61:12:90:85:27:61:3C:DD:AD:8E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 55B1CA48C42FE61788ABC6B8E1C2CC0100DA35F9
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213430.roa
Signing time: Thu 15 May 2025 07:05:38 +0000
ROA not before: Thu 15 May 2025 07:00:38 +0000
ROA not after: Thu 14 May 2026 07:05:38 +0000
asID: 213430
IP address blocks: 143.14.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Jun 2025 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:b1:ca:48:c4:2f:e6:17:88:ab:c6:b8:e1:c2:cc:01:00:da:35:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 15 07:00:38 2025 GMT
Not After : May 14 07:05:38 2026 GMT
Subject: CN=1D5CAFFB5C7A80A1A40A6112908527613CDDAD8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6a:d0:f4:b0:91:04:5a:fd:d9:e8:4d:b3:02:
4d:be:d6:68:0e:ad:51:21:f9:9b:e3:69:17:bb:b7:
2a:56:4c:ad:53:57:54:5c:e5:39:08:8e:ea:b8:a2:
76:62:32:83:09:71:2f:69:79:28:cc:67:48:57:f5:
b0:99:27:30:e4:42:c4:2b:b1:40:d2:30:8f:0c:0a:
8f:45:ae:a9:7d:2d:1f:3a:f9:20:32:c7:a6:4b:56:
ef:51:74:b3:bb:73:3f:96:fd:d5:68:ee:e6:34:bc:
c4:e7:3f:4b:b6:48:34:8c:c4:23:45:79:19:5e:8f:
15:32:86:9b:90:06:1d:55:15:31:75:52:8d:16:03:
69:7a:44:b1:49:82:1d:5f:52:bb:c2:53:d4:e8:01:
99:98:bc:f0:36:44:e4:c1:30:0a:23:ca:39:d0:9f:
2c:a5:0a:90:6c:a0:0a:d1:84:09:39:a8:c4:23:f4:
ea:f3:7b:21:db:62:c7:6c:84:69:24:6a:cb:4a:f5:
11:ab:97:51:2f:2c:85:0f:7c:8e:c9:85:40:21:29:
31:4c:78:6f:25:8c:fb:97:e7:b7:e3:7b:30:27:1b:
00:9e:59:50:ca:ba:62:2e:48:e2:44:47:bf:c8:15:
96:dd:f5:3d:e9:d5:6a:ba:1f:7c:84:82:ab:19:3f:
f5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5C:AF:FB:5C:7A:80:A1:A4:0A:61:12:90:85:27:61:3C:DD:AD:8E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.34.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:e3:0e:f9:1a:f3:a0:d2:17:54:a3:a8:7b:d3:a3:da:4f:90:
a6:39:25:ac:78:10:0f:2a:5b:73:a9:ce:e7:67:63:8e:68:82:
16:b4:9d:d2:7d:85:e1:88:99:4c:74:53:40:24:b1:88:22:06:
15:b4:c2:33:29:1c:36:98:71:83:73:eb:92:af:b5:34:c4:47:
13:3b:18:7a:1d:47:6d:5b:0f:ec:d5:2e:a4:cb:ec:dd:12:35:
57:8f:da:8e:56:cf:43:fc:e8:61:f6:a9:ca:9c:fb:60:7d:f9:
7b:e2:f6:88:7f:ba:d8:c9:b2:2b:2e:0b:28:81:92:60:61:18:
ce:4f:f1:99:37:a0:c0:d7:39:a9:64:20:eb:f3:46:fb:2a:7b:
e3:78:a5:7e:f9:e6:64:ed:a3:ba:79:1f:eb:3b:84:0f:7a:a7:
2e:37:cd:ea:df:10:11:8e:95:48:37:6e:6d:7d:d1:7f:d3:d5:
de:f0:85:5c:91:77:23:38:56:ae:e1:38:fe:c5:16:31:df:26:
cf:46:e7:96:2e:32:d8:1c:bb:5a:03:65:94:6d:4d:bb:3a:19:
47:aa:34:3d:66:0a:44:9d:83:6b:1b:bf:54:bd:34:cc:28:8e:
e5:4c:23:3c:ef:b2:9f:9f:89:3e:9d:22:9b:e6:a5:b4:60:37:
e0:f7:c0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:16:18 2025 by rpki-client