Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/3138352e39312e3131332e302f32342d3234203d3e20383334.roa
File: 3138352e39312e3131332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: mTuUzavmw9ZwzNMD1ZMiBI2BxGbf0NnyoY+nsblWiG4=
Subject key identifier: 12:50:BA:8A:86:0A:18:D9:BA:FA:3E:41:31:C8:E2:DF:CD:AD:93:15
Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9
Certificate serial: 786FC9F2938B6E55CC9BF8AC4587FB86E6FA8AA3
Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/3138352e39312e3131332e302f32342d3234203d3e20383334.roa
Signing time: Tue 24 Jun 2025 00:03:42 +0000
ROA not before: Mon 23 Jun 2025 23:58:42 +0000
ROA not after: Tue 23 Jun 2026 00:03:42 +0000
asID: 834
IP address blocks: 185.91.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jun 2025 11:41:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:6f:c9:f2:93:8b:6e:55:cc:9b:f8:ac:45:87:fb:86:e6:fa:8a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9
Validity
Not Before: Jun 23 23:58:42 2025 GMT
Not After : Jun 23 00:03:42 2026 GMT
Subject: CN=1250BA8A860A18D9BAFA3E4131C8E2DFCDAD9315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b5:59:54:cb:48:db:d6:85:37:99:01:2b:c7:
28:d8:fe:c9:2d:ef:52:37:ee:f9:8a:6a:b1:7c:92:
2e:60:a4:08:72:44:e6:4b:28:94:cb:8c:d4:28:1b:
bd:c4:e1:21:8b:99:3a:59:08:4e:d1:ce:a2:bd:3d:
70:c2:45:f9:e0:19:eb:dd:12:b4:a0:1e:60:8b:3a:
81:ea:59:b0:4c:60:6b:e4:43:20:07:74:50:4b:a4:
ae:a2:c7:14:52:97:8c:94:f1:5b:3e:11:a7:18:e5:
78:c6:d6:43:3f:74:9b:0e:96:8d:40:e5:99:4e:43:
3a:40:b4:f6:69:1d:64:54:00:b5:73:6b:8d:71:3e:
7f:4e:17:02:8c:93:de:ba:59:b4:bf:c6:64:cf:a8:
36:1d:26:51:b1:42:81:12:7a:67:7a:4b:45:3b:6f:
f2:65:ed:19:a1:c7:6c:77:4d:19:7b:b8:cb:a3:82:
76:a0:e0:4d:09:6a:2c:dd:6e:7b:10:2d:97:d5:90:
0c:38:20:6f:a5:e8:13:ab:76:c9:11:35:23:49:e6:
cb:a6:5e:61:10:f4:60:9d:28:55:04:67:44:9e:45:
c0:30:99:82:68:89:bb:7f:cb:59:97:8b:b8:92:ab:
cf:a6:64:82:87:d6:36:61:67:1b:69:26:71:f0:2a:
22:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:50:BA:8A:86:0A:18:D9:BA:FA:3E:41:31:C8:E2:DF:CD:AD:93:15
X509v3 Authority Key Identifier:
keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/3138352e39312e3131332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.113.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:cb:83:2f:37:bd:a4:b1:9c:6c:0a:29:61:09:d9:f4:17:da:
27:62:c3:c5:6b:6b:77:b2:89:c4:5a:a9:e6:0c:98:76:24:61:
8c:08:c5:33:c6:b7:33:50:1a:af:94:56:32:35:a2:47:91:be:
08:bc:47:79:56:33:6b:9f:37:91:7d:37:a8:3b:65:1a:ea:04:
6f:88:95:ab:c2:b3:18:3e:6b:42:d4:8b:8d:77:99:45:64:15:
75:8d:76:d1:0a:2d:8c:54:6c:0f:03:b1:e4:fc:fe:e8:53:26:
b5:c4:d7:08:16:45:7e:23:12:80:42:fb:c4:4b:bc:9e:f9:63:
92:bc:fb:21:02:40:d5:2e:38:38:a6:ac:3d:8b:fd:6e:5a:5d:
95:59:d0:12:18:61:b0:89:27:7e:4a:04:55:41:b5:cd:76:4b:
53:22:8e:25:e5:ad:f5:36:52:1c:45:7e:c8:16:3f:7f:66:d0:
0a:58:a3:2f:53:68:f5:b7:93:cd:3c:cd:5d:f9:f9:7d:91:53:
5a:e6:f3:db:5a:81:86:44:3b:b5:f1:27:ff:7a:5f:98:48:46:
35:16:95:84:66:10:60:b8:93:41:ed:20:7e:33:4f:53:6c:7f:
be:9a:d9:2c:15:c9:9c:c9:c8:b5:ef:ec:f8:ac:99:3a:ee:93:
bb:8e:4f:a6
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUeG/J8pOLblXMm/isRYf7hub6iqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5ODE0MTgxOTExMmI4NDQ2YzJkNGEzMTExZjUzMDM4
ZjA1ZGJlOTAeFw0yNTA2MjMyMzU4NDJaFw0yNjA2MjMwMDAzNDJaMDMxMTAvBgNV
BAMTKDEyNTBCQThBODYwQTE4RDlCQUZBM0U0MTMxQzhFMkRGQ0RBRDkzMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUtVlUy0jb1oU3mQErxyjY/skt
71I37vmKarF8ki5gpAhyROZLKJTLjNQoG73E4SGLmTpZCE7RzqK9PXDCRfngGevd
ErSgHmCLOoHqWbBMYGvkQyAHdFBLpK6ixxRSl4yU8Vs+EacY5XjG1kM/dJsOlo1A
5ZlOQzpAtPZpHWRUALVza41xPn9OFwKMk966WbS/xmTPqDYdJlGxQoESemd6S0U7
b/Jl7Rmhx2x3TRl7uMujgnag4E0JaizdbnsQLZfVkAw4IG+l6BOrdskRNSNJ5sum
XmEQ9GCdKFUEZ0SeRcAwmYJoibt/y1mXi7iSq8+mZIKH1jZhZxtpJnHwKiILAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUElC6ioYKGNm6+j5BMcji382tkxUwHwYDVR0j
BBgwFoAUFJgUGBkRK4RGwtSjER9TA48F2+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjkwNjZmNWQtZWNjMS00OTI3LTk1YzEtZTFhOGRmOGY5
ODk3LzAvMTQ5ODE0MTgxOTExMkI4NDQ2QzJENEEzMTExRjUzMDM4RjA1REJFOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ZKZ1VHQmtSSzRSR3d0U2pFUjlUQTQ4
RjItay5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjkwNjZmNWQt
ZWNjMS00OTI3LTk1YzEtZTFhOGRmOGY5ODk3LzAvMzEzODM1MmUzOTMxMmUzMTMx
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5W3Ew
DQYJKoZIhvcNAQELBQADggEBAFzLgy83vaSxnGwKKWEJ2fQX2idiw8Vra3eyicRa
qeYMmHYkYYwIxTPGtzNQGq+UVjI1okeRvgi8R3lWM2ufN5F9N6g7ZRrqBG+IlavC
sxg+a0LUi413mUVkFXWNdtEKLYxUbA8DseT8/uhTJrXE1wgWRX4jEoBC+8RLvJ75
Y5K8+yECQNUuODimrD2L/W5aXZVZ0BIYYbCJJ35KBFVBtc12S1MijiXlrfU2UhxF
fsgWP39m0ApYoy9TaPW3k808zV35+X2RU1rm89tagYZEO7XxJ/96X5hIRjUWlYRm
EGC4k0HtIH4zT1Nsf76a2SwVyZzJyLXv7PismTruk7uOT6Y=
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:16:16 2025 by rpki-client