Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138312e302f32342d3234203d3e20383334.roa
File: 39352e3231342e3138312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: gS3RhhYgpNnwmIer24Kk+Fhlt7t6j+Veq0wIf48HXZQ=
Subject key identifier: 87:91:8D:1B:36:53:14:2C:14:C3:EA:7A:08:36:63:C4:96:CB:31:F6
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 687F62EBBD23746153A0FE7FE3C999CB65AC15CD
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138312e302f32342d3234203d3e20383334.roa
Signing time: Sun 06 Jul 2025 00:03:03 +0000
ROA not before: Sat 05 Jul 2025 23:58:03 +0000
ROA not after: Sun 05 Jul 2026 00:03:03 +0000
asID: 834
IP address blocks: 95.214.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Jul 2025 14:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:7f:62:eb:bd:23:74:61:53:a0:fe:7f:e3:c9:99:cb:65:ac:15:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Jul 5 23:58:03 2025 GMT
Not After : Jul 5 00:03:03 2026 GMT
Subject: CN=87918D1B3653142C14C3EA7A083663C496CB31F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:43:63:66:ee:f4:9d:02:d7:b3:72:cc:52:cc:
a7:53:b6:a2:d7:6e:c0:95:00:c0:18:fd:9c:41:60:
38:d0:43:99:24:5f:54:25:87:72:06:07:4e:85:c6:
c7:3a:71:e9:34:2f:db:26:36:06:d7:38:57:fb:74:
2c:69:91:cc:b5:a9:00:bd:a7:67:28:d0:c1:2d:2b:
03:39:ee:32:6c:91:1d:6b:33:9c:c8:c5:f2:34:7a:
e8:40:55:c2:6f:53:b0:f7:84:51:f9:59:b0:a6:0f:
5d:5d:f2:17:1d:9d:b8:17:b8:09:b7:a0:9a:12:1b:
bf:f3:fd:41:51:ec:4b:4f:d8:47:90:6b:fe:b2:bb:
c5:16:4d:60:d4:2f:ca:82:fa:6a:c1:0d:51:08:09:
11:eb:d8:c7:0c:99:ce:65:36:8e:26:0a:bf:06:96:
fb:de:1e:37:12:aa:e2:6a:53:e7:d6:28:4d:e8:49:
09:90:31:79:9d:20:c1:34:e6:80:fc:eb:aa:6a:2a:
e2:8c:40:34:86:17:c7:3e:e7:ac:b6:d0:af:ee:5b:
9e:fe:e1:48:b6:9d:69:45:9e:ad:7c:74:49:6c:26:
42:10:8d:0d:ce:fa:1b:9a:c5:60:38:7a:8a:99:59:
f7:b6:7e:9d:b5:3f:1e:c0:31:f4:f4:b1:5c:e2:f2:
8f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:91:8D:1B:36:53:14:2C:14:C3:EA:7A:08:36:63:C4:96:CB:31:F6
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.181.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:d2:73:22:1c:f2:bb:80:b0:5b:83:96:a4:be:fb:94:64:e2:
ab:f1:52:dc:76:cf:95:20:8b:86:43:7e:e8:aa:aa:b6:95:41:
a0:7d:07:4e:a9:eb:f8:c0:da:b9:94:08:69:d0:0d:dc:83:dd:
88:a7:45:eb:43:ad:5e:99:f2:3b:47:de:48:18:82:4f:e8:30:
da:76:fc:f4:b8:4c:36:42:cd:31:e0:fc:da:42:46:b0:00:42:
f4:88:2e:ab:f0:d7:05:0e:10:f2:d1:a9:e6:d1:b7:33:02:48:
bc:ec:0d:2f:99:a7:2c:02:31:b8:b1:9f:f4:bb:b1:b0:04:6a:
63:51:4e:b0:2b:6a:27:c5:9d:65:9f:35:cd:00:a9:d1:d3:67:
e1:45:af:d3:34:31:95:5b:a2:77:1e:31:de:88:0f:56:5a:6b:
cd:68:ff:15:f9:5c:8a:85:84:41:8f:fe:a2:96:4b:c5:e7:09:
8a:c2:17:a3:d0:17:64:a5:3c:ef:58:d4:31:f0:d8:55:6c:c7:
6b:bc:a6:b8:b8:a6:d8:94:4d:6e:b3:0c:61:90:bd:fe:29:9a:
13:48:93:e8:20:9d:7c:2f:3d:00:5c:e0:85:56:08:55:c4:98:
d3:21:90:31:ca:3a:11:11:a6:3a:05:ba:af:6d:38:c2:19:4c:
9c:82:81:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:27 2025 by rpki-client