Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/34362e3138322e32302e302f32332d3234203d3e203433383437.roa
File: 34362e3138322e32302e302f32332d3234203d3e203433383437.roa (raw, json)
Hash identifier: kiDaYYo3UyepSXOV+IEt2z9gUXWq/hmJcWpgdX6uoQ0=
Subject key identifier: 23:68:D2:81:9C:9B:71:5E:22:46:E1:E1:9E:E9:C8:4C:27:5B:F7:93
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 0747D4B3A2F8C315CD834BC1529B2B8378B64A2F
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/34362e3138322e32302e302f32332d3234203d3e203433383437.roa
Signing time: Tue 08 Apr 2025 14:37:29 +0000
ROA not before: Tue 08 Apr 2025 14:32:29 +0000
ROA not after: Tue 07 Apr 2026 14:37:29 +0000
asID: 43847
IP address blocks: 46.182.20.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Apr 2025 15:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:47:d4:b3:a2:f8:c3:15:cd:83:4b:c1:52:9b:2b:83:78:b6:4a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Apr 8 14:32:29 2025 GMT
Not After : Apr 7 14:37:29 2026 GMT
Subject: CN=2368D2819C9B715E2246E1E19EE9C84C275BF793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:f2:cb:9b:fe:bb:7d:3a:28:7b:d0:06:e7:
2e:be:e9:51:ed:7f:db:1f:e1:db:48:82:5e:aa:ac:
58:75:04:15:97:5b:36:53:c8:8e:79:5b:6d:24:f6:
4f:7f:b5:64:cf:ff:ab:c0:18:ca:72:68:37:91:88:
3f:bd:25:14:81:8c:fd:f4:84:c6:8e:59:f7:2e:29:
56:7f:0c:de:f7:71:d0:29:60:ce:09:9d:28:ba:c6:
e3:49:7e:80:05:56:a6:b0:20:0e:b1:66:13:b0:97:
5c:45:b6:48:4a:54:d7:a0:7c:12:7d:8e:d1:4b:88:
83:1c:96:c4:35:1e:fb:a0:34:50:03:40:b3:1b:d5:
40:bf:1c:bb:36:9f:a1:2e:21:18:3d:c4:6d:d0:1f:
c4:0d:53:91:6d:c6:a4:fb:c3:77:74:5b:f9:de:49:
2f:76:74:4c:12:d2:74:93:7d:93:2f:70:46:96:23:
a0:f6:8a:af:80:6f:0e:69:ec:ce:dd:6f:1a:b2:51:
8f:fc:7b:65:33:dc:3d:c5:bf:30:28:63:46:ed:85:
ec:18:98:d0:29:52:e3:9f:82:93:ce:c5:b6:5d:c1:
13:f0:1b:1c:6f:d6:da:35:7c:1e:49:c7:fc:4b:e3:
12:f5:19:e8:2c:0f:e2:87:cc:fd:32:74:f2:da:7c:
cf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:68:D2:81:9C:9B:71:5E:22:46:E1:E1:9E:E9:C8:4C:27:5B:F7:93
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/34362e3138322e32302e302f32332d3234203d3e203433383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.20.0/23
Signature Algorithm: sha256WithRSAEncryption
39:84:49:0f:d8:29:65:a0:e7:a7:f1:af:29:6b:0a:14:9f:f5:
98:59:f9:c4:1d:4e:bc:fe:f0:7b:13:90:2b:53:db:c8:4e:39:
9c:54:8d:3c:eb:ed:9b:2d:de:5a:c3:3e:e6:fb:48:7b:cb:84:
7c:19:8f:48:e6:ad:b0:1e:6e:6b:68:87:04:22:18:6a:4f:69:
ef:b2:29:d6:18:0b:b5:df:c7:d4:5d:f0:4f:cc:5d:7a:d6:09:
06:70:c8:db:55:60:28:9b:f4:78:17:f4:c1:99:02:77:41:37:
60:18:8c:34:c1:76:2c:39:7c:2c:09:04:49:ad:f5:f2:42:21:
ab:ab:b0:d8:a6:0a:04:e9:bc:2a:95:0f:a7:08:28:e6:50:e6:
3d:04:d7:d3:60:c6:19:ae:c0:4c:3a:fc:59:d5:a8:46:4a:a1:
96:fc:d5:56:c0:e1:a8:22:44:20:1e:af:78:5f:a9:e6:8f:95:
41:79:85:ba:48:aa:3b:43:b8:7f:b0:82:36:f1:1b:fb:09:0e:
0e:0d:4e:89:f5:c4:ef:09:f3:6e:dd:ff:89:4a:32:20:36:41:
83:6c:9e:22:8d:f9:33:6e:bc:23:11:10:c2:1f:a3:2a:6e:26:
53:5a:dd:b9:22:fa:7d:72:61:ad:f0:7b:f0:2d:64:c3:73:9f:
df:ef:1a:84
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUB0fUs6L4wxXNg0vBUpsrg3i2Si8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx
NTAxMjBmODAeFw0yNTA0MDgxNDMyMjlaFw0yNjA0MDcxNDM3MjlaMDMxMTAvBgNV
BAMTKDIzNjhEMjgxOUM5QjcxNUUyMjQ2RTFFMTlFRTlDODRDMjc1QkY3OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9nPLLm/67fTooe9AG5y6+6VHt
f9sf4dtIgl6qrFh1BBWXWzZTyI55W20k9k9/tWTP/6vAGMpyaDeRiD+9JRSBjP30
hMaOWfcuKVZ/DN73cdApYM4JnSi6xuNJfoAFVqawIA6xZhOwl1xFtkhKVNegfBJ9
jtFLiIMclsQ1HvugNFADQLMb1UC/HLs2n6EuIRg9xG3QH8QNU5FtxqT7w3d0W/ne
SS92dEwS0nSTfZMvcEaWI6D2iq+Abw5p7M7dbxqyUY/8e2Uz3D3FvzAoY0bthewY
mNApUuOfgpPOxbZdwRPwGxxv1to1fB5Jx/xL4xL1GegsD+KHzP0ydPLafM+xAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUI2jSgZybcV4iRuHhnunITCdb95MwHwYDVR0j
BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm
OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV
QklQZy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTgyYzY1Yjkt
NzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZmOWI4LzAvMzQzNjJlMzEzODMyMmUzMjMw
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzQzMzM4MzQzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS62
FDANBgkqhkiG9w0BAQsFAAOCAQEAOYRJD9gpZaDnp/GvKWsKFJ/1mFn5xB1OvP7w
exOQK1PbyE45nFSNPOvtmy3eWsM+5vtIe8uEfBmPSOatsB5ua2iHBCIYak9p77Ip
1hgLtd/H1F3wT8xdetYJBnDI21VgKJv0eBf0wZkCd0E3YBiMNMF2LDl8LAkESa31
8kIhq6uw2KYKBOm8KpUPpwgo5lDmPQTX02DGGa7ATDr8WdWoRkqhlvzVVsDhqCJE
IB6veF+p5o+VQXmFukiqO0O4f7CCNvEb+wkODg1OifXE7wnzbt3/iUoyIDZBg2ye
Io35M268IxEQwh+jKm4mU1rduSL6fXJhrfB78C1kw3Of3+8ahA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:03:08 2025 by rpki-client