Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32332d3234203d3e20383334.roa
File: 3231322e3130332e34362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: GMwWJRljoQbuAMC2pt2Z7S2kbjXLcZnWDBiho8K/Hj4=
Subject key identifier: 3C:DB:9C:36:94:F6:8E:6F:09:1D:A3:A1:12:05:6B:E8:69:3C:E6:7F
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: CF2F6F769B74B81A847E21412F52FB07B81632
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32332d3234203d3e20383334.roa
Signing time: Sun 11 May 2025 00:01:23 +0000
ROA not before: Sat 10 May 2025 23:56:23 +0000
ROA not after: Sun 10 May 2026 00:01:23 +0000
asID: 834
IP address blocks: 212.103.46.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 May 2025 14:22:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
cf:2f:6f:76:9b:74:b8:1a:84:7e:21:41:2f:52:fb:07:b8:16:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: May 10 23:56:23 2025 GMT
Not After : May 10 00:01:23 2026 GMT
Subject: CN=3CDB9C3694F68E6F091DA3A112056BE8693CE67F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8f:c7:7b:53:5d:fa:9b:8f:71:28:6d:d2:f4:
44:93:c9:1f:d9:29:18:c5:89:09:86:86:f0:41:41:
c0:e8:a4:e2:be:0b:82:26:ae:d4:83:8b:e1:e3:ee:
70:63:86:68:c7:c2:f7:23:fe:64:3c:b8:c1:85:f9:
5c:b9:a3:77:c3:27:0d:f9:b5:d1:f9:72:00:46:24:
47:a3:1d:9b:aa:0b:eb:de:c4:9c:b5:7e:2c:06:d2:
ab:ea:ac:39:19:93:71:53:be:09:ef:ad:aa:3a:9d:
06:24:f9:d8:ac:23:e8:fa:50:2a:3e:16:f9:07:bb:
c6:d0:4a:2a:54:49:02:d5:5c:f0:59:06:e0:ff:a4:
7a:cb:e8:fe:2f:ef:b8:5e:80:88:45:a9:a1:3a:7f:
45:64:5f:98:b0:ba:9d:b8:57:85:76:30:77:58:06:
12:0e:ae:f7:c0:e4:3e:a4:f1:12:75:7b:d8:5c:55:
e3:97:88:64:30:23:1d:91:63:86:e7:9a:eb:24:41:
25:c8:39:5b:61:c6:dd:5a:8c:aa:4a:70:a2:1c:c1:
ce:23:4d:4c:d4:24:46:ed:5f:f9:ef:a6:cd:8d:80:
a5:59:95:36:cd:9f:e8:87:d0:66:97:7b:b2:1b:34:
79:c1:de:b8:f2:16:eb:45:e1:17:0f:c7:ab:28:c5:
7c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DB:9C:36:94:F6:8E:6F:09:1D:A3:A1:12:05:6B:E8:69:3C:E6:7F
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.46.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:c0:a4:de:66:1e:44:d3:7d:d2:b7:dc:ae:d9:fd:5c:3b:70:
46:40:2f:8d:76:f3:40:a2:68:06:0d:d5:77:2a:ab:77:66:73:
8c:f1:d0:63:bf:3a:00:ca:72:2d:ca:81:04:d8:04:a4:7d:19:
2f:a9:19:67:97:30:96:62:99:fe:0b:3e:f7:6a:2f:ec:fd:1e:
47:2b:1f:b0:a9:32:04:83:76:cf:73:e2:f3:ea:5f:ae:8e:39:
04:f1:03:12:08:ce:f8:a4:b2:a1:9a:d9:d7:52:d6:11:87:c3:
9a:da:5d:0a:b6:1f:21:e2:ec:db:60:74:63:de:c9:46:41:f2:
ab:7f:49:ed:d0:cc:95:6c:88:be:2c:42:13:72:2b:54:be:6e:
18:80:5e:d6:c6:31:af:61:4c:8e:76:59:bc:09:19:29:3a:dc:
a5:39:28:83:3e:4d:be:33:95:b0:14:64:53:4c:17:c3:29:1a:
81:6e:87:be:4a:58:e1:66:99:31:cf:90:ed:c4:d8:7b:1d:55:
ff:87:fa:80:45:0d:9a:c7:9d:4b:16:ae:cb:ae:45:1f:45:d6:
7a:dd:8d:75:a5:83:47:b7:52:f8:22:5d:0d:e6:c6:ce:3f:4d:
8d:78:ea:24:dc:ec:a7:18:76:b1:79:49:d1:3b:73:49:c9:d2:
90:24:e2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:25:19 2025 by rpki-client