Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/38342e35342e302e302f32332d3234203d3e203531383437.roa
File: 38342e35342e302e302f32332d3234203d3e203531383437.roa (raw, json)
Hash identifier: 9ymekHJNg7eHawLPpqCXHNl1/9XdMPaEoc+h4S0S0hU=
Subject key identifier: 53:4C:9D:9D:56:23:68:76:DF:8D:7E:B6:E0:5C:59:49:B0:E1:A3:11
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 5D31DB24660ADB08EF59623F7A3307726A4124B5
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/38342e35342e302e302f32332d3234203d3e203531383437.roa
Signing time: Wed 15 Jan 2025 14:41:36 +0000
ROA not before: Wed 15 Jan 2025 14:36:36 +0000
ROA not after: Wed 14 Jan 2026 14:41:36 +0000
asID: 51847
IP address blocks: 84.54.0.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 16:37:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:31:db:24:66:0a:db:08:ef:59:62:3f:7a:33:07:72:6a:41:24:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jan 15 14:36:36 2025 GMT
Not After : Jan 14 14:41:36 2026 GMT
Subject: CN=534C9D9D56236876DF8D7EB6E05C5949B0E1A311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:53:3a:5f:2e:61:56:f0:e3:29:02:a7:ce:ea:
7b:a2:ae:77:d1:77:eb:c1:ac:26:c6:61:53:be:4f:
14:a1:4d:05:f7:dd:98:48:c7:91:0c:61:c9:e1:91:
55:a1:a8:37:c4:86:3b:5b:de:30:e3:85:33:15:7d:
9d:0d:41:3a:64:62:25:f3:e9:a7:cc:36:28:c4:06:
45:22:c2:0d:d2:4e:ad:4a:9e:4a:79:ab:25:30:5f:
2d:40:3e:7a:3f:80:8a:6f:64:a9:7f:6e:a6:2e:11:
90:19:af:c5:ba:42:1f:d5:da:2b:64:f4:d0:df:c3:
0a:41:8c:05:ef:da:be:8c:cc:1d:58:9c:33:6f:12:
0c:16:12:bd:e8:3b:22:74:2d:2f:b4:4c:73:cb:48:
92:53:7b:9c:eb:a4:94:38:0c:58:0b:71:f4:66:97:
fe:94:4e:79:8a:89:79:18:1f:90:bf:af:52:16:48:
3b:8b:fa:d8:03:09:1f:35:d8:1a:f6:f7:b7:68:d2:
c5:59:b2:b6:08:d4:47:b1:b3:26:da:92:7a:a7:ae:
96:14:36:4e:02:26:ef:09:7d:42:eb:d8:ee:1a:da:
1b:bb:4f:46:54:d5:0b:43:e0:b3:8b:8a:94:9a:b6:
5d:f6:45:aa:78:cb:01:fc:5b:64:05:56:d5:3e:72:
8e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4C:9D:9D:56:23:68:76:DF:8D:7E:B6:E0:5C:59:49:B0:E1:A3:11
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/38342e35342e302e302f32332d3234203d3e203531383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.0.0/23
Signature Algorithm: sha256WithRSAEncryption
99:c9:67:4b:43:8c:ed:d1:52:a6:79:55:28:6e:45:27:f3:44:
68:ab:92:6f:37:b8:9a:18:e6:78:06:03:a8:01:89:8e:83:e5:
6e:1c:d7:e7:6e:23:ad:76:57:b0:94:f5:5a:02:49:93:fb:6a:
e2:31:30:fb:4c:df:91:0b:b8:c6:91:a1:6e:7f:d0:98:5e:3c:
fb:3f:2b:f6:dd:b1:7d:4c:79:f7:0d:d5:c5:44:5f:3b:ba:04:
4e:47:85:54:b5:0d:f0:4a:cb:b9:3a:c4:6d:fa:e4:b4:51:22:
7b:93:f4:bc:1d:87:5a:fa:a7:b5:ce:6a:22:10:6f:b0:83:73:
45:cd:b3:44:63:9c:8a:b8:3e:2a:ee:86:37:53:ff:30:d4:7a:
4f:fa:02:53:92:90:d0:b8:29:58:24:aa:44:90:68:12:fd:1b:
04:79:c9:60:41:9e:5e:45:d0:01:57:d3:5b:36:24:9c:b5:74:
65:91:08:c6:f9:6d:ba:11:34:4e:30:6a:9a:59:2d:fc:73:ec:
2c:0f:61:df:29:06:28:22:63:3b:0e:ae:d8:a7:e4:1d:70:a2:
92:aa:fe:1d:1a:c8:4f:e2:66:26:54:56:44:1a:2b:66:16:75:
7f:64:4d:4a:6d:d4:b1:ae:d8:43:c3:af:1e:27:cf:ab:6a:36:
08:16:f6:07
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUXTHbJGYK2wjvWWI/ejMHcmpBJLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy
ZjJmNDE1YjAeFw0yNTAxMTUxNDM2MzZaFw0yNjAxMTQxNDQxMzZaMDMxMTAvBgNV
BAMTKDUzNEM5RDlENTYyMzY4NzZERjhEN0VCNkUwNUM1OTQ5QjBFMUEzMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQUzpfLmFW8OMpAqfO6nuirnfR
d+vBrCbGYVO+TxShTQX33ZhIx5EMYcnhkVWhqDfEhjtb3jDjhTMVfZ0NQTpkYiXz
6afMNijEBkUiwg3STq1Knkp5qyUwXy1APno/gIpvZKl/bqYuEZAZr8W6Qh/V2itk
9NDfwwpBjAXv2r6MzB1YnDNvEgwWEr3oOyJ0LS+0THPLSJJTe5zrpJQ4DFgLcfRm
l/6UTnmKiXkYH5C/r1IWSDuL+tgDCR812Br297do0sVZsrYI1EexsybaknqnrpYU
Nk4CJu8JfULr2O4a2hu7T0ZU1QtD4LOLipSatl32Rap4ywH8W2QFVtU+co6FAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUU0ydnVYjaHbfjX624FxZSbDhoxEwHwYDVR0j
BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0
ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4
dlFWcy5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEt
OWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0ODkzLzAvMzgzNDJlMzUzNDJlMzAyZTMw
MmYzMjMzMmQzMjM0MjAzZDNlMjAzNTMxMzgzNDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVDYAMA0G
CSqGSIb3DQEBCwUAA4IBAQCZyWdLQ4zt0VKmeVUobkUn80Roq5JvN7iaGOZ4BgOo
AYmOg+VuHNfnbiOtdlewlPVaAkmT+2riMTD7TN+RC7jGkaFuf9CYXjz7Pyv23bF9
THn3DdXFRF87ugROR4VUtQ3wSsu5OsRt+uS0USJ7k/S8HYda+qe1zmoiEG+wg3NF
zbNEY5yKuD4q7oY3U/8w1HpP+gJTkpDQuClYJKpEkGgS/RsEeclgQZ5eRdABV9Nb
NiSctXRlkQjG+W26ETROMGqaWS38c+wsD2HfKQYoImM7Dq7Yp+QdcKKSqv4dGshP
4mYmVFZEGitmFnV/ZE1KbdSxrthDw68eJ8+rajYIFvYH
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:37:42 2025 by rpki-client