Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/34352e3134392e3135332e302f32342d3234203d3e20383334.roa
File: 34352e3134392e3135332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: YbFQf7IyrExeJTZudRrkWqBafwyoGrbeN2dcmflHIPs=
Subject key identifier: 9D:D2:33:1E:E4:0B:A6:12:48:EE:72:4C:A5:07:C6:69:1B:27:8E:94
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 0B6F1C117A4FBCDD0A4DA24142039B64E197C051
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/34352e3134392e3135332e302f32342d3234203d3e20383334.roa
Signing time: Fri 23 May 2025 12:37:22 +0000
ROA not before: Fri 23 May 2025 12:32:22 +0000
ROA not after: Fri 22 May 2026 12:37:22 +0000
asID: 834
IP address blocks: 45.149.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 May 2025 17:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:6f:1c:11:7a:4f:bc:dd:0a:4d:a2:41:42:03:9b:64:e1:97:c0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: May 23 12:32:22 2025 GMT
Not After : May 22 12:37:22 2026 GMT
Subject: CN=9DD2331EE40BA61248EE724CA507C6691B278E94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:a0:b2:b0:b7:54:30:29:4f:c2:20:49:df:
6f:31:7a:81:3a:38:41:ef:71:c8:a4:8b:e7:94:51:
64:a1:58:f2:65:4a:89:8b:87:e3:71:a3:1c:8c:10:
72:a4:11:1f:a3:5a:5b:ea:70:ab:a7:77:1b:e1:bb:
36:42:8b:8f:68:90:54:f0:9d:17:ac:58:43:3b:17:
3a:4e:d8:bc:6b:bd:58:f2:c4:35:b6:3d:80:27:19:
7c:9c:a8:e6:21:49:61:41:d2:d1:30:69:9c:b1:9b:
fe:ca:47:17:df:77:d8:ce:c0:20:67:77:27:42:3d:
3b:a3:40:c8:07:5a:f5:03:db:6b:98:21:cd:cb:a2:
6e:b6:f9:0f:64:48:ed:a0:06:72:75:34:7c:79:05:
e7:32:bb:0c:98:31:5a:5c:a7:b0:b8:8e:de:a8:79:
e2:6f:91:03:20:f1:04:ea:7d:44:38:b7:a3:41:0c:
4e:7d:de:d7:2b:c5:e9:70:26:d4:29:92:74:6a:98:
81:56:c7:d3:33:83:20:ed:bc:ca:62:c3:bd:b9:ca:
5d:90:bd:63:1e:3a:e8:5e:e7:45:ce:6e:0e:71:d2:
da:ed:fb:11:6c:6f:a1:f7:23:7a:ca:06:76:65:63:
d8:d5:b9:47:b2:e0:81:71:eb:50:39:ef:2e:f1:02:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D2:33:1E:E4:0B:A6:12:48:EE:72:4C:A5:07:C6:69:1B:27:8E:94
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/34352e3134392e3135332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.153.0/24
Signature Algorithm: sha256WithRSAEncryption
51:0e:3d:c1:83:fd:b2:eb:d4:d3:27:5a:a9:4a:90:88:99:66:
2e:2a:79:9b:f3:40:53:01:3a:88:2d:8f:49:15:fb:1e:77:29:
45:52:f3:87:1a:bc:d6:78:d0:18:36:67:40:3b:2e:87:36:12:
08:05:85:89:3d:13:5b:1b:6a:d6:71:e3:95:5e:f9:3c:72:ab:
c8:ce:3f:3d:9d:e8:86:43:e5:5e:1a:c6:3b:d8:74:34:40:f0:
86:b9:16:79:79:89:39:30:1d:56:19:95:11:b6:84:2c:a9:f5:
7b:e6:40:43:75:a6:e5:6e:31:6d:2e:08:e0:b6:98:27:c9:80:
d6:62:e2:d3:46:28:ec:96:c1:ab:e5:f7:c5:0c:3a:c9:7e:a2:
e1:09:cb:ef:f0:6d:b5:52:8d:4f:92:9d:b9:51:33:58:8a:af:
f0:98:84:a8:f8:05:ea:08:9a:37:68:33:86:37:08:db:42:9c:
b6:09:dd:67:2a:e3:6f:2a:e7:10:04:8f:01:4a:31:4f:70:94:
39:48:af:22:e1:8f:25:cb:d3:c5:4b:14:70:fe:8a:09:7b:6b:
02:9e:52:b7:36:52:b5:25:fd:ec:4e:b0:e8:46:45:8a:a0:a2:
69:78:ed:01:6d:c4:88:4a:ac:82:a2:cb:fa:0c:63:8f:2a:fa:
5b:b3:4e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:07:23 2025 by rpki-client