Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130352e302f32342d3234203d3e20383334.roa
File: 3138352e3234302e3130352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: X030+hBFDqIgwu9BrUWJObYeuBpHtryBCH0Z1M6DcS8=
Subject key identifier: B4:C6:2C:F9:C3:12:D7:89:BF:6F:42:41:7A:FC:C0:4B:B8:57:3F:B1
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 37401D2A6BC66EC8C34E9DCF60CFD7359B6F3C16
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130352e302f32342d3234203d3e20383334.roa
Signing time: Thu 03 Jul 2025 00:03:04 +0000
ROA not before: Wed 02 Jul 2025 23:58:04 +0000
ROA not after: Thu 02 Jul 2026 00:03:04 +0000
asID: 834
IP address blocks: 185.240.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Jul 2025 14:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:40:1d:2a:6b:c6:6e:c8:c3:4e:9d:cf:60:cf:d7:35:9b:6f:3c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Jul 2 23:58:04 2025 GMT
Not After : Jul 2 00:03:04 2026 GMT
Subject: CN=B4C62CF9C312D789BF6F42417AFCC04BB8573FB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3f:ae:6c:69:3e:e2:b5:33:5e:f3:ca:85:fa:
d6:54:ae:7e:15:e8:22:36:88:e4:4a:c7:4e:f7:cd:
cc:b8:34:bc:99:1d:0c:0a:f1:c1:2d:fd:e5:09:1d:
a8:8a:90:97:25:2e:f3:f4:08:36:93:fe:90:f1:cc:
ff:ff:f4:26:16:86:1f:29:34:5f:6e:d3:e3:70:e2:
42:0e:ec:9f:a7:38:e4:4e:bb:f3:6a:a2:24:22:ee:
1b:e3:99:86:42:f4:3a:3f:46:8b:3e:a3:99:07:1d:
3f:3c:e5:d2:2e:7f:7a:52:3a:c6:41:7f:c8:ba:f2:
90:06:12:d0:42:06:cc:b5:a5:a0:89:22:61:cb:ba:
79:cd:27:64:4b:33:1d:e7:fb:cd:79:c7:71:c2:7a:
13:7c:05:2f:3b:f4:4a:28:7a:66:53:fc:b4:b7:97:
ca:e1:f6:ee:39:c6:25:80:b2:a2:db:2f:d5:e0:60:
52:aa:63:d0:a8:94:46:91:e8:f7:31:8e:38:03:1c:
b6:af:d5:2a:67:70:ef:0c:f0:77:29:4f:dd:77:7f:
fc:2a:22:a5:ad:1f:41:cc:26:9a:c0:ff:0d:c8:00:
b9:cd:48:a0:1a:1c:db:f9:11:dc:c2:c3:1b:1a:00:
b7:69:25:08:1a:7d:9d:e2:38:9c:3d:db:e1:50:03:
23:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C6:2C:F9:C3:12:D7:89:BF:6F:42:41:7A:FC:C0:4B:B8:57:3F:B1
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.105.0/24
Signature Algorithm: sha256WithRSAEncryption
54:74:f8:bc:73:37:36:41:54:5d:e4:0a:09:03:fe:c7:53:98:
dc:cd:5c:38:4e:7c:c8:1c:22:02:3d:ec:fd:0b:aa:55:61:91:
87:86:e1:ae:44:31:2c:cb:9f:52:ca:eb:ed:95:89:67:25:16:
53:2b:f0:0d:50:6a:4a:00:3a:15:5e:53:40:c0:24:b4:ba:f5:
3f:5f:a2:73:26:39:75:82:b9:b3:0e:ae:f8:2d:c4:88:32:ef:
d0:e8:8f:12:59:99:30:af:b9:9a:cf:a4:5f:42:8c:2d:40:97:
89:7f:89:51:f8:83:62:aa:dc:f1:cc:39:d5:b1:f5:23:35:f9:
e6:d0:a9:56:c6:4d:c2:b9:56:5e:df:17:c4:cf:fc:a9:5e:0f:
93:b4:5c:6f:6d:8d:7e:3a:fe:fc:cc:1a:ed:6a:25:b4:0b:cf:
0d:09:71:6c:28:fc:b6:da:63:a1:4c:14:da:fd:87:5f:44:bc:
20:00:5b:f8:38:9a:9c:1a:51:bf:de:ae:28:15:dc:75:93:31:
db:68:ec:4b:c5:24:bd:e3:18:be:41:cd:c9:c1:49:40:fb:f0:
37:af:d9:ee:16:f4:b9:e1:5d:4b:c7:cc:10:b8:a0:ec:2c:f8:
bb:6c:e6:a3:8f:b1:af:a2:31:ea:8a:98:32:a8:ab:ce:fb:55:
73:5e:95:61
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUN0AdKmvGbsjDTp3PYM/XNZtvPBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGMxMmI0MjczODMyYjQxNTZmZTAwOTJmNmFlN2U1YjNj
ZTIzYWQ4YjAeFw0yNTA3MDIyMzU4MDRaFw0yNjA3MDIwMDAzMDRaMDMxMTAvBgNV
BAMTKEI0QzYyQ0Y5QzMxMkQ3ODlCRjZGNDI0MTdBRkNDMDRCQjg1NzNGQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOP65saT7itTNe88qF+tZUrn4V
6CI2iORKx073zcy4NLyZHQwK8cEt/eUJHaiKkJclLvP0CDaT/pDxzP//9CYWhh8p
NF9u0+Nw4kIO7J+nOOROu/NqoiQi7hvjmYZC9Do/Ros+o5kHHT885dIuf3pSOsZB
f8i68pAGEtBCBsy1paCJImHLunnNJ2RLMx3n+815x3HCehN8BS879EooemZT/LS3
l8rh9u45xiWAsqLbL9XgYFKqY9ColEaR6PcxjjgDHLav1SpncO8M8HcpT913f/wq
IqWtH0HMJprA/w3IALnNSKAaHNv5EdzCwxsaALdpJQgafZ3iOJw92+FQAyM7AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUtMYs+cMS14m/b0JBevzAS7hXP7EwHwYDVR0j
BBgwFoAUjBK0JzgytBVv4Akvaufls84jrYswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGJmZDY4ODItZDZiMy00YWE4LWJjMGEtNzExZDY4YmQx
OThiLzAvOEMxMkI0MjczODMyQjQxNTZGRTAwOTJGNkFFN0U1QjNDRTIzQUQ4Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pCSzBKemd5dEJWdjRBa3ZhdWZsczg0
anJZcy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGJmZDY4ODIt
ZDZiMy00YWE4LWJjMGEtNzExZDY4YmQxOThiLzAvMzEzODM1MmUzMjM0MzAyZTMx
MzAzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnw
aTANBgkqhkiG9w0BAQsFAAOCAQEAVHT4vHM3NkFUXeQKCQP+x1OY3M1cOE58yBwi
Aj3s/QuqVWGRh4bhrkQxLMufUsrr7ZWJZyUWUyvwDVBqSgA6FV5TQMAktLr1P1+i
cyY5dYK5sw6u+C3EiDLv0OiPElmZMK+5ms+kX0KMLUCXiX+JUfiDYqrc8cw51bH1
IzX55tCpVsZNwrlWXt8XxM/8qV4Pk7Rcb22Nfjr+/Mwa7WoltAvPDQlxbCj8ttpj
oUwU2v2HX0S8IABb+DianBpRv96uKBXcdZMx22jsS8UkveMYvkHNycFJQPvwN6/Z
7hb0ueFdS8fMELig7Cz4u2zmo4+xr6Ix6oqYMqirzvtVc16VYQ==
-----END CERTIFICATE-----
Generated at Tue Jul 22 19:34:08 2025 by rpki-client