Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3132302e302f32342d3234203d3e203630363035.roa
File: 3135362e36372e3132302e302f32342d3234203d3e203630363035.roa (raw, json)
Hash identifier: XUzgCBNPNkG3RUVWaMNiIUuahKMqit2CoJ8LaTGaSvQ=
Subject key identifier: 78:D3:C6:60:C9:A3:EC:34:24:BA:02:42:3F:85:60:39:93:DE:C3:79
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 64BC98C629D67A8A71281759867740DE46EC78B3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3132302e302f32342d3234203d3e203630363035.roa
Signing time: Thu 10 Apr 2025 11:39:18 +0000
ROA not before: Thu 10 Apr 2025 11:34:18 +0000
ROA not after: Thu 09 Apr 2026 11:39:18 +0000
asID: 60605
IP address blocks: 156.67.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 18:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:bc:98:c6:29:d6:7a:8a:71:28:17:59:86:77:40:de:46:ec:78:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 10 11:34:18 2025 GMT
Not After : Apr 9 11:39:18 2026 GMT
Subject: CN=78D3C660C9A3EC3424BA02423F85603993DEC379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0f:b4:18:58:48:0f:c9:3e:fe:3c:fb:cd:4e:
0a:94:22:7f:3c:16:3e:8b:4f:f2:63:99:db:9e:52:
85:a9:da:69:02:e4:ae:92:34:d1:33:7f:d5:05:56:
f1:84:c8:db:2a:06:5d:13:26:fa:40:70:4b:c2:5b:
0c:4d:46:74:ae:02:31:24:a1:04:bc:d0:ac:68:f1:
76:e9:5e:29:26:c3:8e:73:0e:0d:d9:f2:e1:3c:b7:
a4:86:d8:db:10:11:f8:eb:d3:49:cb:ce:c2:08:92:
54:ee:1d:00:47:b5:08:55:3a:87:a4:cf:06:a3:64:
3e:ae:83:04:88:b5:34:5f:4c:d0:52:bb:77:bf:c0:
a5:c2:b0:13:34:67:c0:2d:76:64:f5:0e:f4:b2:89:
40:06:be:fd:da:73:10:87:07:4c:c7:f3:ee:4b:be:
f6:55:2f:74:8e:fa:44:36:7e:e1:fa:db:65:63:4e:
28:3e:d8:fe:a3:74:15:77:cd:ad:3b:8e:07:c0:73:
79:1c:c2:bf:62:57:fe:d2:66:a7:12:ff:9c:a3:8e:
c0:2f:dd:6b:f6:92:65:66:e7:57:ce:eb:81:1a:c5:
7e:ff:91:e3:13:f3:02:32:a5:bd:3b:c9:d8:94:0e:
3e:4a:93:f4:7d:dc:75:4c:56:8e:50:2f:a3:a8:0a:
4a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D3:C6:60:C9:A3:EC:34:24:BA:02:42:3F:85:60:39:93:DE:C3:79
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3132302e302f32342d3234203d3e203630363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.120.0/24
Signature Algorithm: sha256WithRSAEncryption
95:f4:d1:db:77:83:af:3e:5b:20:c5:b9:9a:5a:74:ff:68:53:
2a:17:8a:54:47:e3:9b:23:f1:3b:aa:0e:ef:6c:9a:2f:cb:7b:
50:61:0c:18:4e:ec:27:c3:8d:d2:f4:17:c5:ee:16:8f:46:e5:
17:7e:0f:5e:b9:f8:fb:d4:e4:d0:79:2c:27:66:70:f9:f3:99:
d6:65:be:26:9c:71:29:17:93:82:00:3f:c0:4b:4f:e6:93:b5:
0d:0c:05:b5:4c:84:71:16:14:af:ee:52:88:80:81:0a:91:5f:
ec:5e:49:5b:68:ec:f3:ff:82:97:6a:18:a6:4a:59:8a:e6:6b:
80:c4:7e:0c:0c:70:a9:b6:5f:fd:83:ee:d3:0b:83:97:ef:7c:
99:72:78:49:1e:fb:d3:75:ab:aa:33:a2:6f:78:2a:2f:d8:f8:
cc:15:d8:94:68:e3:9c:01:6f:54:64:0a:84:da:01:81:91:4d:
6e:57:61:f7:62:27:07:64:59:78:39:7d:6f:e6:99:3c:50:be:
68:83:2e:ea:17:37:7a:4f:6b:29:3c:dd:b8:7b:81:43:d4:05:
eb:73:7b:b8:1e:09:35:c6:8f:d4:25:de:ce:33:37:25:f8:f4:
75:d3:36:a1:ad:6f:a3:0e:3d:93:84:83:3b:78:09:51:4f:42:
dc:70:35:66
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUZLyYxinWeopxKBdZhndA3kbseLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA0MTAxMTM0MThaFw0yNjA0MDkxMTM5MThaMDMxMTAvBgNV
BAMTKDc4RDNDNjYwQzlBM0VDMzQyNEJBMDI0MjNGODU2MDM5OTNERUMzNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrD7QYWEgPyT7+PPvNTgqUIn88
Fj6LT/JjmdueUoWp2mkC5K6SNNEzf9UFVvGEyNsqBl0TJvpAcEvCWwxNRnSuAjEk
oQS80Kxo8XbpXikmw45zDg3Z8uE8t6SG2NsQEfjr00nLzsIIklTuHQBHtQhVOoek
zwajZD6ugwSItTRfTNBSu3e/wKXCsBM0Z8AtdmT1DvSyiUAGvv3acxCHB0zH8+5L
vvZVL3SO+kQ2fuH622VjTig+2P6jdBV3za07jgfAc3kcwr9iV/7SZqcS/5yjjsAv
3Wv2kmVm51fO64EaxX7/keMT8wIypb07ydiUDj5Kk/R93HVMVo5QL6OoCkrZAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUeNPGYMmj7DQkugJCP4VgOZPew3kwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM2MmUzNjM3MmUzMTMy
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzYzMDM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
nEN4MA0GCSqGSIb3DQEBCwUAA4IBAQCV9NHbd4OvPlsgxbmaWnT/aFMqF4pUR+Ob
I/E7qg7vbJovy3tQYQwYTuwnw43S9BfF7haPRuUXfg9eufj71OTQeSwnZnD585nW
Zb4mnHEpF5OCAD/AS0/mk7UNDAW1TIRxFhSv7lKIgIEKkV/sXklbaOzz/4KXahim
SlmK5muAxH4MDHCptl/9g+7TC4OX73yZcnhJHvvTdauqM6JveCov2PjMFdiUaOOc
AW9UZAqE2gGBkU1uV2H3YicHZFl4OX1v5pk8UL5ogy7qFzd6T2spPN24e4FD1AXr
c3u4Hgk1xo/UJd7OMzcl+PR10zahrW+jDj2ThIM7eAlRT0LccDVm
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:58:17 2025 by rpki-client