Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213734.roa
File: AS213734.roa (raw, json)
Hash identifier: SZM796u/nlayBDFb4p7G+1CAuKCip2D/IEExUV78nCk=
Subject key identifier: 28:43:3B:6B:95:A8:B9:36:A7:EE:F0:A9:E9:CB:75:AE:2C:01:D9:E0
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 60AD48D7A9A5B32F87B7E0A450BE7BF69922D1FA
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213734.roa
Signing time: Sat 08 Feb 2025 09:41:19 +0000
ROA not before: Sat 08 Feb 2025 09:36:19 +0000
ROA not after: Sat 07 Feb 2026 09:41:19 +0000
asID: 213734
IP address blocks: 46.203.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Mar 2025 11:13:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ad:48:d7:a9:a5:b3:2f:87:b7:e0:a4:50:be:7b:f6:99:22:d1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 8 09:36:19 2025 GMT
Not After : Feb 7 09:41:19 2026 GMT
Subject: CN=28433B6B95A8B936A7EEF0A9E9CB75AE2C01D9E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:e2:af:f3:1f:4d:1a:df:b8:84:0b:40:dc:
7f:69:06:1f:1a:7c:b0:91:6e:46:8d:0e:b5:48:fc:
51:f6:0c:78:1f:8f:7d:3d:c3:0d:6b:4c:5c:24:27:
10:ca:7c:b8:a7:98:7c:fd:eb:dc:31:22:fb:3a:b8:
fc:60:15:e1:dd:36:a4:73:8c:fc:73:f1:c7:37:90:
70:c2:e7:b7:ed:2a:3a:c3:23:bd:c7:e4:cd:69:8b:
24:65:b9:d9:65:31:03:35:e1:74:86:df:d3:8a:37:
b5:23:40:ca:51:3b:49:3f:25:e8:23:e6:c4:da:0c:
62:e0:a5:06:11:b1:b0:f2:7a:09:c8:7f:60:88:eb:
09:9f:1b:e0:db:46:80:01:a5:ba:2f:c8:bd:37:03:
c5:a1:15:68:57:b1:ad:11:df:9d:40:a6:d8:26:0a:
42:c8:9c:bd:25:cf:72:c0:14:9d:72:4f:e8:20:24:
c6:8b:da:31:49:51:60:36:e9:2a:01:ce:7e:19:a8:
92:0f:d8:22:8f:83:35:ac:68:be:83:3e:a3:22:8b:
e7:1d:ff:e2:76:cf:6d:ae:b6:fc:71:bb:7f:1e:36:
9c:7d:44:11:ea:30:e3:da:60:5d:23:b1:c4:de:19:
ea:3f:3e:59:19:00:71:83:95:90:00:f9:6b:a4:99:
ec:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:43:3B:6B:95:A8:B9:36:A7:EE:F0:A9:E9:CB:75:AE:2C:01:D9:E0
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.93.0/24
Signature Algorithm: sha256WithRSAEncryption
91:62:9a:83:8f:08:24:6a:3f:25:f6:f7:2a:84:a8:f9:19:a0:
b4:11:f6:2d:ca:9e:d7:c7:f3:03:4b:40:fe:b0:4d:80:cd:6e:
48:b3:5e:a0:53:28:5a:d3:49:66:b7:46:4c:14:ea:de:f1:49:
2f:4e:7d:05:29:1f:4d:b5:f4:f3:63:56:f3:75:12:58:2f:88:
ce:46:0b:a1:12:92:cb:33:6a:5e:8f:73:94:cd:ce:e4:b1:29:
c7:26:90:02:d6:f7:db:05:8e:aa:59:de:f4:8d:c9:d3:54:da:
9f:86:24:0b:d4:23:ed:50:8b:e8:d3:65:fa:9f:37:6a:c9:0c:
77:89:56:17:27:e6:30:0c:8b:2a:11:29:e7:5c:93:0b:5d:c5:
45:22:4f:e0:f5:25:3c:4a:28:34:fa:8f:db:b8:7f:74:a3:ee:
ba:e2:cf:26:23:3b:45:fa:57:4d:af:b5:b2:4a:85:90:c8:8e:
3f:f5:a6:36:9c:10:ae:bb:42:a8:97:36:f1:92:0e:9b:ac:18:
2f:86:1d:17:58:d6:b0:cf:7c:c1:c6:a2:54:a9:44:90:81:81:
df:04:e0:6a:92:2c:a4:e6:a1:c0:c3:91:87:3f:95:0f:4c:b8:
53:35:88:37:08:da:13:08:7b:59:84:ed:79:1f:50:eb:f7:ac:
5c:18:13:bd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUYK1I16mlsy+Ht+CkUL579pki0fowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTAyMDgwOTM2MTlaFw0yNjAyMDcwOTQxMTlaMDMxMTAvBgNV
BAMTKDI4NDMzQjZCOTVBOEI5MzZBN0VFRjBBOUU5Q0I3NUFFMkMwMUQ5RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnLeKv8x9NGt+4hAtA3H9pBh8a
fLCRbkaNDrVI/FH2DHgfj309ww1rTFwkJxDKfLinmHz969wxIvs6uPxgFeHdNqRz
jPxz8cc3kHDC57ftKjrDI73H5M1piyRludllMQM14XSG39OKN7UjQMpRO0k/Jegj
5sTaDGLgpQYRsbDyegnIf2CI6wmfG+DbRoABpbovyL03A8WhFWhXsa0R351Aptgm
CkLInL0lz3LAFJ1yT+ggJMaL2jFJUWA26SoBzn4ZqJIP2CKPgzWsaL6DPqMii+cd
/+J2z22utvxxu38eNpx9RBHqMOPaYF0jscTeGeo/PlkZAHGDlZAA+WukmexXAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUKEM7a5WouTan7vCp6ct1riwB2eAwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjEzNzM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALstd
MA0GCSqGSIb3DQEBCwUAA4IBAQCRYpqDjwgkaj8l9vcqhKj5GaC0EfYtyp7Xx/MD
S0D+sE2AzW5Is16gUyha00lmt0ZMFOre8UkvTn0FKR9NtfTzY1bzdRJYL4jORguh
EpLLM2pej3OUzc7ksSnHJpAC1vfbBY6qWd70jcnTVNqfhiQL1CPtUIvo02X6nzdq
yQx3iVYXJ+YwDIsqESnnXJMLXcVFIk/g9SU8Sig0+o/buH90o+664s8mIztF+ldN
r7WySoWQyI4/9aY2nBCuu0Kolzbxkg6brBgvhh0XWNawz3zBxqJUqUSQgYHfBOBq
kiyk5qHAw5GHP5UPTLhTNYg3CNoTCHtZhO15H1Dr96xcGBO9
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:12:30 2025 by rpki-client