Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: IrGVm3GwThbie5ds9zXWh1Gbmqmjk0/DyiPrVTp1/4A=
Subject key identifier: 27:05:48:15:CC:1E:1F:7A:7B:4D:3C:13:90:C6:A5:E0:F9:9A:08:57
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 34B9BDC22820C6F7C1DAF80AC3DD1BC37A1A7AA5
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13335.roa
Signing time: Tue 17 Jun 2025 17:29:22 +0000
ROA not before: Tue 17 Jun 2025 17:24:22 +0000
ROA not after: Tue 16 Jun 2026 17:29:22 +0000
asID: 13335
IP address blocks: 95.135.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Jun 2025 05:35:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:b9:bd:c2:28:20:c6:f7:c1:da:f8:0a:c3:dd:1b:c3:7a:1a:7a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 17 17:24:22 2025 GMT
Not After : Jun 16 17:29:22 2026 GMT
Subject: CN=27054815CC1E1F7A7B4D3C1390C6A5E0F99A0857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:51:36:08:b3:cf:c1:1a:f6:cc:6b:1f:6d:
a0:e1:24:18:f6:86:f4:02:04:86:2d:e0:a8:8e:9b:
05:e2:ed:e9:bd:de:1b:3b:dc:19:2b:15:f2:4a:67:
bd:e6:75:22:e4:c0:69:80:03:e2:26:06:d4:a3:cd:
f6:73:9e:3a:40:d3:ca:fa:c4:55:49:27:7f:ec:4e:
e2:77:e4:5b:36:25:bd:3d:2c:93:93:5f:dc:db:3c:
61:ed:98:ab:62:8c:0c:77:b3:ff:d0:d5:c9:eb:c6:
08:3c:ac:0d:f5:67:94:12:95:b2:d2:cf:21:06:16:
9e:b6:30:9b:38:0a:1f:c0:3e:14:2b:18:e1:f7:f2:
be:2f:bb:4d:f5:62:25:e5:0c:95:97:7b:09:e5:f3:
92:3e:04:6b:b1:d6:3d:7e:03:cc:7d:15:63:f3:89:
ff:ab:04:f0:74:d6:33:49:9c:c9:36:d1:d2:9c:86:
16:4a:c6:60:a1:73:ee:d7:7a:5a:20:dc:57:b5:a3:
f5:10:99:3a:89:6b:d9:6d:a8:49:96:df:03:62:34:
a0:0e:cb:5b:e9:1a:30:c0:df:09:32:0d:0d:12:05:
76:59:d0:5e:97:76:f1:fe:77:bb:b1:b0:0b:b6:37:
7f:58:e1:81:38:c6:f7:8a:c1:6e:4c:8a:33:1b:c2:
59:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:05:48:15:CC:1E:1F:7A:7B:4D:3C:13:90:C6:A5:E0:F9:9A:08:57
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.224.0/24
Signature Algorithm: sha256WithRSAEncryption
60:6c:0e:04:30:fa:a7:9e:98:e0:ba:48:f7:98:11:2a:10:3d:
95:72:b4:5d:70:af:8e:84:ec:bf:eb:ce:ff:a3:4a:4e:07:4e:
23:87:a8:d9:2c:e6:f8:d8:5a:c5:c6:4d:90:9d:e2:d6:ea:3f:
80:4c:c2:36:ba:ee:15:9e:af:27:bc:5c:71:00:8e:69:b8:50:
64:22:e0:18:c7:1d:20:6c:20:cb:c4:b2:e5:bf:e5:36:83:5e:
04:02:a1:c7:fa:9d:6c:6e:89:e6:5a:b9:4d:06:1e:0d:3c:6a:
fe:17:4c:4b:47:56:34:2c:7b:cb:4c:69:21:c4:b5:ae:d1:8c:
c3:43:34:b9:11:f3:7d:74:52:2f:c0:ff:72:09:f4:08:3c:a4:
57:a5:81:e4:db:bf:c9:09:bb:26:97:d1:a1:bd:83:7c:96:4e:
0d:9d:7b:b6:af:3f:de:c4:e1:7b:0f:19:55:ab:0c:f9:02:0c:
80:27:bb:42:81:9a:da:a5:ea:46:8b:f7:7b:30:7f:57:94:1c:
52:41:ed:6b:81:8b:2b:d5:41:90:e1:b5:32:b2:f1:74:9b:2b:
e8:67:db:fd:de:d6:ce:4b:e9:50:c8:d2:90:33:f6:34:58:7d:
52:27:75:7d:c1:4f:c3:9f:64:37:1b:44:a8:a0:42:6b:8e:e8:
1e:f1:d3:55
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUNLm9wiggxvfB2vgKw90bw3oaeqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA2MTcxNzI0MjJaFw0yNjA2MTYxNzI5MjJaMDMxMTAvBgNV
BAMTKDI3MDU0ODE1Q0MxRTFGN0E3QjREM0MxMzkwQzZBNUUwRjk5QTA4NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs7lE2CLPPwRr2zGsfbaDhJBj2
hvQCBIYt4KiOmwXi7em93hs73BkrFfJKZ73mdSLkwGmAA+ImBtSjzfZznjpA08r6
xFVJJ3/sTuJ35Fs2Jb09LJOTX9zbPGHtmKtijAx3s//Q1cnrxgg8rA31Z5QSlbLS
zyEGFp62MJs4Ch/APhQrGOH38r4vu031YiXlDJWXewnl85I+BGux1j1+A8x9FWPz
if+rBPB01jNJnMk20dKchhZKxmChc+7Xelog3Fe1o/UQmTqJa9ltqEmW3wNiNKAO
y1vpGjDA3wkyDQ0SBXZZ0F6XdvH+d7uxsAu2N39Y4YE4xveKwW5MijMbwlkrAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUJwVIFcweH3p7TTwTkMal4PmaCFcwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTMzMzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABfh+Aw
DQYJKoZIhvcNAQELBQADggEBAGBsDgQw+qeemOC6SPeYESoQPZVytF1wr46E7L/r
zv+jSk4HTiOHqNks5vjYWsXGTZCd4tbqP4BMwja67hWerye8XHEAjmm4UGQi4BjH
HSBsIMvEsuW/5TaDXgQCocf6nWxuieZauU0GHg08av4XTEtHVjQse8tMaSHEta7R
jMNDNLkR8310Ui/A/3IJ9Ag8pFelgeTbv8kJuyaX0aG9g3yWTg2de7avP97E4XsP
GVWrDPkCDIAnu0KBmtql6kaL93swf1eUHFJB7WuBiyvVQZDhtTKy8XSbK+hn2/3e
1s5L6VDI0pAz9jRYfVIndX3BT8OfZDcbRKigQmuO6B7x01U=
-----END CERTIFICATE-----
Generated at Tue Jul 22 19:29:34 2025 by rpki-client