Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/38342e35342e322e302f32332d3234203d3e203438393736.roa
File: 38342e35342e322e302f32332d3234203d3e203438393736.roa (raw, json)
Hash identifier: 0UtGmd5RKanTHtXUjtbf+ytjvPuK2CrWeyxIGjxnG2I=
Subject key identifier: DB:6C:15:50:5B:AE:98:E4:D0:AA:A6:7D:7C:93:61:D7:D1:58:C9:C8
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 6F74402DD8E6B6DBE107D7DCBC00F4DA88A0DB58
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/38342e35342e322e302f32332d3234203d3e203438393736.roa
Signing time: Wed 15 Jan 2025 14:40:41 +0000
ROA not before: Wed 15 Jan 2025 14:35:41 +0000
ROA not after: Wed 14 Jan 2026 14:40:41 +0000
asID: 48976
IP address blocks: 84.54.2.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 16:37:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:74:40:2d:d8:e6:b6:db:e1:07:d7:dc:bc:00:f4:da:88:a0:db:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jan 15 14:35:41 2025 GMT
Not After : Jan 14 14:40:41 2026 GMT
Subject: CN=DB6C15505BAE98E4D0AAA67D7C9361D7D158C9C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:41:8a:54:97:95:4e:a8:95:2e:e6:1d:0e:
51:da:00:aa:a8:b6:a8:32:b7:1e:6a:89:63:08:7b:
41:b0:e5:1d:45:8e:f9:56:81:5b:86:04:3f:2b:83:
8d:2a:62:a9:3f:84:9c:4d:80:4c:dc:f7:4a:f8:7b:
c0:ce:fd:fc:91:54:cd:91:9b:e2:0b:f4:a5:84:2f:
cc:2e:49:ef:87:a5:b7:b8:8f:50:ad:a4:1b:96:f8:
25:91:a7:25:4d:84:3a:7e:b9:ee:0b:9a:66:24:07:
ba:04:a6:52:1d:2c:79:2a:f3:71:86:5e:50:d8:dc:
1b:21:18:c1:31:7f:1b:34:9d:75:99:52:9a:d7:23:
61:05:2f:d5:ea:ce:db:6a:1d:8c:40:7f:5c:54:3e:
e2:eb:e7:92:0c:64:fe:a7:a1:5e:66:89:c6:82:9d:
c7:4e:61:59:89:64:d5:58:8a:af:0f:9d:24:59:91:
c3:6a:67:0c:ce:37:e1:70:04:59:ac:12:c0:46:e6:
f2:3c:7b:cf:cf:e9:f4:11:b8:ac:92:d4:5a:c2:87:
ae:e5:f6:62:86:e6:e1:1e:be:14:61:86:e0:83:3a:
cb:d8:a8:71:21:cc:a5:6e:dd:44:b5:03:bf:bb:a8:
45:7e:9a:df:3e:bb:9e:18:e6:e8:27:9c:15:d9:6d:
e4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6C:15:50:5B:AE:98:E4:D0:AA:A6:7D:7C:93:61:D7:D1:58:C9:C8
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/38342e35342e322e302f32332d3234203d3e203438393736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.2.0/23
Signature Algorithm: sha256WithRSAEncryption
af:34:19:28:96:c6:52:36:38:dc:d3:dc:4a:61:30:66:bd:95:
42:f3:bd:fd:f9:d0:43:f7:7e:e0:f5:ba:4d:48:0e:39:f2:28:
d3:1c:ab:4d:0b:3a:80:a6:c9:d8:ae:f0:4e:36:be:cf:03:5a:
22:b7:80:64:34:dd:93:6c:80:4a:b8:61:bf:d5:27:4c:58:57:
fa:ac:f7:53:72:16:da:05:e8:76:81:49:6a:89:ad:70:2e:1f:
d2:1a:0a:a4:9f:d3:c9:76:e6:d8:f2:07:e7:04:a0:67:2d:c7:
c2:c2:96:42:04:96:b5:20:85:06:f4:e3:46:61:37:b0:4e:5a:
de:fe:e3:8b:0a:7c:8f:c7:4b:24:8b:35:b8:e4:db:f8:90:b2:
21:dc:47:d5:08:fc:f0:1f:77:2c:ba:66:ac:9d:bc:b8:1c:e7:
b7:c6:0b:31:fd:55:88:64:e3:90:a4:07:ff:bd:73:0e:27:77:
92:36:a1:2b:f3:93:5e:7e:64:2e:87:0a:13:87:f6:fb:16:9d:
59:b7:3f:8c:01:96:d9:90:0d:04:1f:1b:50:c8:79:9a:b8:d9:
9a:b2:e7:0a:f7:99:57:16:56:38:46:96:9c:ef:a1:e0:4b:74:
07:cc:6b:6e:06:ce:92:59:5c:c8:ca:2e:77:7d:15:65:10:f5:
0a:f0:e7:49
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUb3RALdjmttvhB9fcvAD02oig21gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy
ZjJmNDE1YjAeFw0yNTAxMTUxNDM1NDFaFw0yNjAxMTQxNDQwNDFaMDMxMTAvBgNV
BAMTKERCNkMxNTUwNUJBRTk4RTREMEFBQTY3RDdDOTM2MUQ3RDE1OEM5QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDNUGKVJeVTqiVLuYdDlHaAKqo
tqgytx5qiWMIe0Gw5R1FjvlWgVuGBD8rg40qYqk/hJxNgEzc90r4e8DO/fyRVM2R
m+IL9KWEL8wuSe+Hpbe4j1CtpBuW+CWRpyVNhDp+ue4LmmYkB7oEplIdLHkq83GG
XlDY3BshGMExfxs0nXWZUprXI2EFL9XqzttqHYxAf1xUPuLr55IMZP6noV5micaC
ncdOYVmJZNVYiq8PnSRZkcNqZwzON+FwBFmsEsBG5vI8e8/P6fQRuKyS1FrCh67l
9mKG5uEevhRhhuCDOsvYqHEhzKVu3US1A7+7qEV+mt8+u54Y5ugnnBXZbeQJAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQU22wVUFuumOTQqqZ9fJNh19FYycgwHwYDVR0j
BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0
ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4
dlFWcy5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEt
OWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0ODkzLzAvMzgzNDJlMzUzNDJlMzIyZTMw
MmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM4MzkzNzM2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVDYCMA0G
CSqGSIb3DQEBCwUAA4IBAQCvNBkolsZSNjjc09xKYTBmvZVC8739+dBD937g9bpN
SA458ijTHKtNCzqApsnYrvBONr7PA1oit4BkNN2TbIBKuGG/1SdMWFf6rPdTchba
Beh2gUlqia1wLh/SGgqkn9PJdubY8gfnBKBnLcfCwpZCBJa1IIUG9ONGYTewTlre
/uOLCnyPx0skizW45Nv4kLIh3EfVCPzwH3csumasnby4HOe3xgsx/VWIZOOQpAf/
vXMOJ3eSNqEr85NefmQuhwoTh/b7Fp1Ztz+MAZbZkA0EHxtQyHmauNmasucK95lX
FlY4Rpac76HgS3QHzGtuBs6SWVzIyi53fRVlEPUK8OdJ
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:19:09 2025 by rpki-client