Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/3133392e32382e35302e302f32332d3234203d3e20323132323338.roa
File: 3133392e32382e35302e302f32332d3234203d3e20323132323338.roa (raw, json)
Hash identifier: RfY3I/ROkQ/+I2NV0fB8uH0ZSi6qoLdv50yxBOVlPvE=
Subject key identifier: 5C:9F:63:7A:9C:3F:AE:7D:2E:B4:FA:A9:F5:42:38:A9:AE:9D:DD:5B
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 56B624E5401DEA26A56AAACA30110D0B5EEACB5A
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/3133392e32382e35302e302f32332d3234203d3e20323132323338.roa
Signing time: Wed 15 Jan 2025 14:34:52 +0000
ROA not before: Wed 15 Jan 2025 14:29:52 +0000
ROA not after: Wed 14 Jan 2026 14:34:52 +0000
asID: 212238
IP address blocks: 139.28.50.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 16:37:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:b6:24:e5:40:1d:ea:26:a5:6a:aa:ca:30:11:0d:0b:5e:ea:cb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jan 15 14:29:52 2025 GMT
Not After : Jan 14 14:34:52 2026 GMT
Subject: CN=5C9F637A9C3FAE7D2EB4FAA9F54238A9AE9DDD5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:76:5a:86:56:ee:6e:d6:9e:b7:19:6d:ca:92:
94:32:a1:09:ac:a0:09:b2:d4:ef:ed:25:f6:1b:da:
72:9b:8c:6f:8f:ab:5a:52:e5:7a:6b:62:3e:ad:82:
2a:fb:37:e2:02:4f:ab:34:74:9c:ba:7f:d8:32:39:
7a:b1:d2:3c:80:9c:c9:ce:e7:5c:86:49:47:ca:49:
4f:a8:49:51:06:7b:c1:9c:80:d2:52:49:e0:23:f2:
8b:0e:02:d2:0c:89:0d:0e:12:e5:40:8f:45:1b:52:
3c:d0:88:0c:bc:57:dc:ee:4d:cd:81:12:87:0a:f3:
28:2f:ea:75:c1:ae:68:60:69:fd:3c:f9:c4:58:e6:
ae:77:a0:5d:33:6c:fa:c5:f2:d7:6d:17:40:40:8f:
5b:f6:06:63:a4:d5:d1:cd:bf:5c:85:a0:40:ab:8b:
5f:09:5e:88:b7:fc:4d:f0:2c:59:f4:0f:0c:68:9f:
65:cb:3c:52:85:97:0b:79:f6:33:2e:fb:3c:6c:7e:
b9:64:ab:20:6d:31:ac:d2:22:b5:21:6b:1a:fd:19:
db:94:3b:87:22:3c:88:69:f8:79:0f:d1:8b:ab:2d:
2c:04:f3:82:67:a8:b8:93:e1:34:40:b2:00:ae:ad:
9d:ba:4c:e4:8a:69:95:77:99:5b:e9:76:91:62:57:
f4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9F:63:7A:9C:3F:AE:7D:2E:B4:FA:A9:F5:42:38:A9:AE:9D:DD:5B
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/3133392e32382e35302e302f32332d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.50.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:ec:94:09:dd:d8:0c:f9:5f:98:8c:5e:99:29:84:8d:f4:ba:
cc:05:9c:ab:0a:89:d0:76:26:9f:0d:67:42:6d:0d:6e:e1:67:
43:94:dc:12:be:15:56:5f:01:8f:57:0a:c6:0c:79:2b:81:d8:
0f:1b:0e:2b:7f:8f:62:03:30:b5:a7:80:f7:d0:29:25:cc:e5:
e6:1c:88:96:f5:00:c4:17:0d:6a:57:0a:ca:7c:31:38:06:d1:
9c:63:0e:97:01:24:07:48:65:58:3f:e2:2e:5c:81:53:61:87:
95:be:90:9a:96:eb:13:db:2d:17:61:6c:92:41:3e:b1:ad:e1:
19:90:94:d6:46:19:98:39:1a:9c:80:c6:ab:97:de:93:3b:5d:
f0:85:a6:6a:af:b6:d3:af:ee:8b:55:40:79:d8:b4:83:1e:97:
72:5a:ee:f9:7e:4e:01:c2:78:18:a6:4e:a0:e8:c4:3e:6e:16:
0d:40:46:66:9c:d3:8d:8d:d4:84:5a:63:36:98:05:a7:23:c4:
c3:ea:ce:5b:0f:2e:2c:f3:31:54:2a:10:d0:ea:d1:54:d6:fd:
f6:c6:14:3c:7d:ca:3e:4c:84:cc:93:93:3b:68:f5:02:48:b2:
0f:86:c0:65:07:02:64:42:c1:3a:e6:1a:e7:f4:d4:9c:c4:89:
e4:47:93:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:47:35 2025 by rpki-client