Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3234382e302f32342d3234203d3e20383334.roa
File: 3138352e3231332e3234382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: E6FXoXqi2so8eGhxjRa327Ree4i9zzMluArd2pcVPUU=
Subject key identifier: 13:B6:C1:E1:6A:2E:25:45:54:2E:DA:C1:85:BF:4E:56:5F:10:15:B6
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 2380F353EC23BC141441E856807CAE315FE54970
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3234382e302f32342d3234203d3e20383334.roa
Signing time: Thu 10 Jul 2025 00:00:42 +0000
ROA not before: Wed 09 Jul 2025 23:55:42 +0000
ROA not after: Thu 09 Jul 2026 00:00:42 +0000
asID: 834
IP address blocks: 185.213.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Jul 2025 05:46:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:80:f3:53:ec:23:bc:14:14:41:e8:56:80:7c:ae:31:5f:e5:49:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jul 9 23:55:42 2025 GMT
Not After : Jul 9 00:00:42 2026 GMT
Subject: CN=13B6C1E16A2E2545542EDAC185BF4E565F1015B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6a:1d:c1:4e:6e:8a:8b:c2:0f:c5:6b:23:5b:
b7:06:7f:3e:7f:e7:ce:99:f2:c3:22:94:5e:b4:67:
f7:da:fe:fb:44:f1:33:9c:45:2c:c3:36:e5:6c:a3:
52:6d:55:da:ba:d8:fa:0e:ae:ef:43:55:d4:59:cf:
e4:a3:4c:bb:b1:0e:c1:b9:aa:52:01:38:36:a1:88:
6b:e9:f7:1b:9f:c3:7a:24:2f:8d:de:6e:69:54:c4:
2c:72:af:c0:f4:81:22:56:f6:5d:42:1b:33:13:2b:
68:60:c4:3b:cc:18:33:8b:ad:5f:c5:31:22:a2:63:
27:c7:c7:88:f2:e7:79:96:78:8b:71:75:5c:6d:7d:
09:8c:f0:10:67:97:d3:7c:d4:27:ad:6c:22:2c:8c:
98:3f:92:2b:32:e4:74:1f:7f:29:9e:a0:f0:f4:16:
e1:53:28:07:2a:79:db:e4:3f:4f:5d:11:c7:f7:62:
d4:0d:8b:a5:b4:8f:6c:34:55:06:3c:79:b1:c7:f2:
b8:e8:88:b8:d6:70:49:79:96:eb:8e:1a:3c:28:f7:
0e:38:7f:2f:7c:91:72:cf:0b:94:7e:f8:e5:b1:cb:
cf:d0:d2:e2:d3:70:d1:16:76:53:e5:57:cc:97:d6:
0d:03:39:99:37:7d:07:e7:a6:5f:10:3d:51:52:1d:
99:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B6:C1:E1:6A:2E:25:45:54:2E:DA:C1:85:BF:4E:56:5F:10:15:B6
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3234382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.248.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:26:eb:bf:2e:c6:7f:94:4b:ac:8b:5d:c1:d5:01:c8:53:33:
3a:d5:9b:ba:d5:35:d8:63:24:53:40:71:a7:ae:3c:71:ce:5a:
5f:b8:d1:0d:5e:4a:37:d9:08:32:89:5f:b4:e6:72:77:af:d3:
43:1a:a3:35:b7:19:93:91:84:0d:89:b4:97:54:8d:14:9e:98:
33:75:b9:46:bc:07:53:b1:d5:f8:ab:47:43:56:c9:5f:7a:5e:
84:c8:09:68:30:db:b5:64:a8:f8:44:71:ea:f2:ce:49:d4:6e:
6c:09:e4:0e:05:45:82:53:2e:84:a8:1c:fa:1c:e2:98:91:98:
38:16:8e:59:e9:f2:00:fc:05:58:e1:3f:2c:d7:e4:ec:ad:4f:
c1:48:c8:7d:23:7b:1d:7a:60:08:72:97:e6:75:36:60:c5:f3:
3d:40:48:32:dc:a1:c5:c5:59:1a:30:74:79:e7:80:65:5a:6b:
9b:d6:b0:ef:79:fa:bc:02:c6:ac:09:e4:0d:f1:3f:60:f8:c4:
e4:12:28:9c:37:56:5b:dc:52:6d:30:2b:b1:b4:e8:57:78:49:
e1:1e:6a:42:b6:59:e9:34:30:b4:1e:2d:3c:dd:96:aa:c7:64:
83:dc:3e:c9:50:e8:50:4e:4d:2c:ed:bd:90:7f:df:8a:ae:76:
05:23:05:dd
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUI4DzU+wjvBQUQehWgHyuMV/lSXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNTA3MDkyMzU1NDJaFw0yNjA3MDkwMDAwNDJaMDMxMTAvBgNV
BAMTKDEzQjZDMUUxNkEyRTI1NDU1NDJFREFDMTg1QkY0RTU2NUYxMDE1QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEah3BTm6Ki8IPxWsjW7cGfz5/
586Z8sMilF60Z/fa/vtE8TOcRSzDNuVso1JtVdq62PoOru9DVdRZz+SjTLuxDsG5
qlIBODahiGvp9xufw3okL43ebmlUxCxyr8D0gSJW9l1CGzMTK2hgxDvMGDOLrV/F
MSKiYyfHx4jy53mWeItxdVxtfQmM8BBnl9N81CetbCIsjJg/kisy5HQffymeoPD0
FuFTKAcqedvkP09dEcf3YtQNi6W0j2w0VQY8ebHH8rjoiLjWcEl5luuOGjwo9w44
fy98kXLPC5R++OWxy8/Q0uLTcNEWdlPlV8yX1g0DOZk3fQfnpl8QPVFSHZnNAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUE7bB4WouJUVULtrBhb9OVl8QFbYwHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt
N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzODM1MmUzMjMxMzMyZTMy
MzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnV
+DANBgkqhkiG9w0BAQsFAAOCAQEACybrvy7Gf5RLrItdwdUByFMzOtWbutU12GMk
U0Bxp648cc5aX7jRDV5KN9kIMolftOZyd6/TQxqjNbcZk5GEDYm0l1SNFJ6YM3W5
RrwHU7HV+KtHQ1bJX3pehMgJaDDbtWSo+ERx6vLOSdRubAnkDgVFglMuhKgc+hzi
mJGYOBaOWenyAPwFWOE/LNfk7K1PwUjIfSN7HXpgCHKX5nU2YMXzPUBIMtyhxcVZ
GjB0eeeAZVprm9aw73n6vALGrAnkDfE/YPjE5BIonDdWW9xSbTArsbToV3hJ4R5q
QrZZ6TQwtB4tPN2Wqsdkg9w+yVDoUE5NLO29kH/fiq52BSMF3Q==
-----END CERTIFICATE-----
Generated at Fri Jul 25 03:56:03 2025 by rpki-client