Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/38342e35342e302e302f32332d3234203d3e20313437303033.roa
File: 38342e35342e302e302f32332d3234203d3e20313437303033.roa (raw, json)
Hash identifier: Nc10/sms9n+2bD7BUkr00oBf+obREdpOTHETqBiLFhM=
Subject key identifier: AC:B7:D6:C9:B4:9C:77:B9:25:DB:8C:6F:DE:5D:30:5B:07:E4:2F:89
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 16C4A6918E575FDA0AC99BDCCF0909490E978282
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/38342e35342e302e302f32332d3234203d3e20313437303033.roa
Signing time: Wed 15 Jan 2025 14:41:52 +0000
ROA not before: Wed 15 Jan 2025 14:36:52 +0000
ROA not after: Wed 14 Jan 2026 14:41:52 +0000
asID: 147003
IP address blocks: 84.54.0.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 16:37:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:c4:a6:91:8e:57:5f:da:0a:c9:9b:dc:cf:09:09:49:0e:97:82:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jan 15 14:36:52 2025 GMT
Not After : Jan 14 14:41:52 2026 GMT
Subject: CN=ACB7D6C9B49C77B925DB8C6FDE5D305B07E42F89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2a:a4:33:a7:7b:02:35:f8:e9:b0:8f:c7:60:
1f:d0:f2:fe:d7:00:a5:ea:24:1b:81:dc:e8:3e:fb:
24:d7:4d:35:46:2f:9c:22:43:82:b8:3c:37:07:e3:
a0:e9:f4:7a:9d:1f:90:0b:51:1c:85:11:ec:6a:af:
f5:8d:5d:1a:87:b4:e1:53:da:0d:6e:2c:31:1a:4e:
99:8f:b9:68:ab:49:4b:47:21:74:39:10:18:87:56:
4a:1d:40:79:80:37:f3:08:96:f7:18:c6:4d:b6:63:
18:8e:f0:bd:53:6c:ef:1d:cb:d8:e6:1f:39:38:1e:
d5:d0:85:04:68:c6:99:26:fe:f7:fe:3d:44:f2:1d:
3f:90:d3:8d:77:15:f8:ea:71:68:d8:ab:af:34:c0:
ae:57:3c:db:71:8b:c7:70:b3:3e:5f:46:d2:38:bd:
d3:0f:42:ee:d0:31:d9:05:d7:b0:18:53:c7:ea:e8:
0d:a1:9f:d3:2b:ac:1b:df:e3:8b:ed:53:cb:fe:03:
58:33:af:31:80:f9:1f:58:49:67:a0:5b:02:93:50:
79:49:0f:0f:7c:e0:0b:ae:93:9d:19:07:c3:d4:4c:
b2:1b:0b:26:84:00:4e:48:c5:5d:1d:03:23:06:d1:
98:54:7c:17:b6:c2:9c:ed:f1:d8:c7:c9:6d:7d:31:
d9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B7:D6:C9:B4:9C:77:B9:25:DB:8C:6F:DE:5D:30:5B:07:E4:2F:89
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/38342e35342e302e302f32332d3234203d3e20313437303033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.0.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:dd:66:e7:48:73:e0:06:4b:1c:18:c6:d6:c5:73:f1:fd:8f:
26:73:88:d0:1e:f0:9d:05:9e:2b:b3:82:eb:94:3c:68:f2:f6:
e2:82:16:30:12:8b:bb:5b:54:37:9e:df:47:68:25:0d:d1:32:
60:87:6e:4b:56:75:5c:cf:04:c2:64:46:b1:33:82:50:5c:ca:
2c:d8:4b:43:0e:ca:e6:5f:4e:bc:b7:b9:16:9b:74:bc:f9:a2:
f9:1f:ee:61:b4:32:e2:6b:ee:cc:18:2e:27:12:7e:4b:54:21:
bb:ab:4b:f8:91:bf:1a:4b:b2:2c:62:eb:ce:49:62:62:9b:b1:
59:8b:c6:2f:c1:a8:ba:f3:40:1d:b1:94:52:17:23:e8:9f:69:
a1:30:85:6c:17:f4:5e:ba:4a:f7:f8:18:ba:54:c2:08:34:00:
a4:dd:da:84:c8:09:86:a9:5d:6b:c6:02:e6:71:c9:aa:6b:86:
a1:08:03:c5:6c:97:26:5c:c0:12:09:a1:47:e4:54:c0:22:b2:
d3:8a:d8:66:55:29:32:b0:89:7c:8c:e6:08:3d:98:c5:6a:de:
7e:fb:9d:08:06:57:9f:a7:27:bc:7b:a0:2b:1f:88:99:58:e5:
b7:71:3b:4f:cf:6a:7f:21:1d:0f:79:45:93:37:3e:79:56:e4:
8c:f5:57:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:41:16 2025 by rpki-client