Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3139302e302f32342d3234203d3e20323132323338.roa
File: 352e3232362e3139302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 5uRy3fwcHi7ZXw2Sw8r6ACVnyaenvRlrPt9RLdCW31M=
Subject key identifier: A5:62:BA:9C:8C:66:68:22:F6:24:18:9B:48:A2:AE:DA:24:0D:E2:DE
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 0A8AF8676847ECD3AE0E9F57F2F07A274BF8F05E
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3139302e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 29 Apr 2025 00:57:22 +0000
ROA not before: Tue 29 Apr 2025 00:52:22 +0000
ROA not after: Tue 28 Apr 2026 00:57:22 +0000
asID: 212238
IP address blocks: 5.226.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 May 2025 00:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:8a:f8:67:68:47:ec:d3:ae:0e:9f:57:f2:f0:7a:27:4b:f8:f0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Apr 29 00:52:22 2025 GMT
Not After : Apr 28 00:57:22 2026 GMT
Subject: CN=A562BA9C8C666822F624189B48A2AEDA240DE2DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:f8:bb:ac:9c:7d:d2:22:0f:97:5e:09:6e:
b0:3d:5a:b3:47:1f:1c:7a:85:ba:95:c3:c9:e1:93:
bb:f0:4d:7e:9f:8f:8a:5b:4d:92:74:63:86:2b:dd:
b8:8b:ee:7e:af:96:bd:a6:a1:ef:89:15:7a:dd:81:
4b:46:40:5b:bf:6b:9d:2a:28:e5:66:4e:f6:b7:d7:
d2:da:3e:d3:8a:52:9e:ea:36:50:11:e0:52:c0:5a:
a3:5e:22:b5:0b:da:a3:5b:81:e6:e8:db:d4:ec:ce:
ce:1e:84:21:3a:42:f5:ae:6a:3d:ca:66:2a:0c:79:
92:19:f9:da:4c:50:0f:95:16:1a:8c:6f:0a:a8:a1:
06:b3:08:e1:ab:37:ab:a6:b3:1e:87:f4:50:96:f0:
9d:61:a8:10:f4:8f:92:5f:12:5b:f8:ea:72:e3:f3:
e7:08:33:87:0b:fd:93:87:d7:4f:d9:a6:24:21:16:
37:76:6d:32:b8:67:3f:4c:8b:e3:88:f2:c0:c3:4e:
31:a5:18:35:a5:c2:29:c7:30:12:b2:a7:3f:c5:a8:
92:3f:32:92:23:a0:95:c8:8c:f2:4a:0d:25:6f:c0:
59:81:6a:04:84:bc:45:bb:d4:97:5b:c2:7e:23:5d:
02:8d:f8:fc:93:00:b8:c8:9c:d2:5e:3c:1c:31:b2:
fc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:62:BA:9C:8C:66:68:22:F6:24:18:9B:48:A2:AE:DA:24:0D:E2:DE
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3139302e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.190.0/24
Signature Algorithm: sha256WithRSAEncryption
04:de:cb:4f:9e:61:29:e6:e0:19:cc:25:75:64:23:ba:21:b6:
86:36:a9:b3:43:37:de:45:32:58:85:f6:6b:77:ca:a2:b4:34:
2e:56:42:89:dc:55:ae:d9:67:dd:e3:61:b0:c5:c5:5d:ba:6e:
d6:7b:56:03:7a:a1:c7:25:92:66:c2:7e:e7:c0:e4:a0:30:fb:
5c:3b:7c:9a:d2:5b:ee:8d:2e:11:da:90:1f:93:ac:53:6d:fb:
88:10:64:76:81:21:ae:3b:52:a8:98:33:33:b2:8d:d8:b0:9d:
85:b2:d7:c3:49:29:95:35:99:dd:60:c5:84:f2:04:de:8f:e5:
55:79:54:11:2d:82:62:01:7e:9c:71:10:ed:ba:2c:04:ba:44:
ed:13:69:95:49:a1:cc:08:47:ab:ae:4c:98:ea:38:46:ae:4d:
30:7c:95:04:8b:ae:9d:0f:f9:5a:f3:f5:24:8c:f0:50:0d:5c:
a4:9c:8c:c3:70:78:08:ac:f2:1e:96:d8:d2:c8:4b:b9:a8:ca:
ce:4b:ef:7a:b4:0f:ea:e0:40:c0:1b:e2:0f:39:15:b4:60:db:
65:4f:84:4d:f7:c8:6b:5b:18:8b:c6:cd:4a:95:7d:e1:e5:b6:
62:8d:1f:01:bf:67:ab:7f:c7:3d:16:8d:78:04:85:28:0f:e1:
66:35:37:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:12:50 2025 by rpki-client