Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS38186.roa
File: AS38186.roa (raw, json)
Hash identifier: w6Gr7Wgsn02tJp5u5z/Yy3Yccx00VU2Cu/oRQ5WZ6vc=
Subject key identifier: 38:10:EE:15:49:04:82:30:EC:36:F2:23:24:DC:A7:8E:07:BB:DC:C2
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4D913AC3AFD4E14A59BABA5C2C2D8D9C6FA6B763
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS38186.roa
Signing time: Tue 15 Jul 2025 13:30:11 +0000
ROA not before: Tue 15 Jul 2025 13:25:11 +0000
ROA not after: Tue 14 Jul 2026 13:30:11 +0000
asID: 38186
IP address blocks: 178.95.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 16 Jul 2025 11:20:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:91:3a:c3:af:d4:e1:4a:59:ba:ba:5c:2c:2d:8d:9c:6f:a6:b7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 15 13:25:11 2025 GMT
Not After : Jul 14 13:30:11 2026 GMT
Subject: CN=3810EE1549048230EC36F22324DCA78E07BBDCC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:c0:53:13:76:78:a0:d4:6b:dc:12:93:e5:
98:48:f2:9f:4d:0b:48:01:ec:01:38:0e:15:73:76:
a3:40:61:70:f8:7d:75:8e:3a:d4:51:5b:bf:bf:c4:
35:a4:c6:12:51:c4:6e:80:60:09:cb:ed:e8:72:a3:
79:5b:2b:2d:54:4a:a4:ab:a6:6f:2f:b6:40:23:f6:
02:f3:d0:fb:55:a0:87:6b:a0:ff:e3:9d:d0:83:fe:
1d:6e:2c:68:0b:ee:25:03:30:1a:ce:10:bc:25:28:
ce:ce:46:22:cd:90:6e:2e:15:a5:5c:ce:d9:3f:ad:
29:0f:46:da:65:ca:9e:6b:c3:23:8a:bb:f9:af:3a:
ef:5f:15:11:a0:3d:64:c4:fc:0d:ac:41:a3:ab:fb:
58:b6:09:0d:f0:e2:35:55:f9:29:c6:ec:1f:04:12:
99:e7:4e:60:45:1b:82:91:46:49:f3:27:c9:ab:fe:
63:ac:0b:fb:83:c7:cc:6e:51:a7:12:4a:0f:26:81:
f9:92:a1:a0:e1:a0:96:7c:14:17:bd:09:a2:c0:9d:
b9:73:b8:b6:70:ea:ef:96:fc:50:21:60:24:84:23:
b5:80:56:37:87:e1:c9:50:d3:20:33:2f:42:3d:3b:
13:41:04:1b:cc:9c:01:10:29:7b:55:74:e7:c9:ff:
11:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:10:EE:15:49:04:82:30:EC:36:F2:23:24:DC:A7:8E:07:BB:DC:C2
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS38186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.232.0/22
Signature Algorithm: sha256WithRSAEncryption
39:a3:04:e5:25:7d:4d:14:94:c6:15:71:ee:31:2c:c9:2e:60:
ff:a4:2e:8f:59:4d:fa:21:99:67:38:48:58:59:f4:5e:fa:b8:
d0:5d:f9:53:0c:02:5f:f8:3b:29:4d:4d:02:ff:39:21:b3:d0:
dd:e3:4b:c5:ad:d2:aa:d9:3a:a8:43:81:3c:7d:9b:3f:d1:a8:
71:12:03:3d:66:69:3d:9f:fc:94:c6:61:e0:0e:a9:52:e7:4e:
b7:68:af:e5:e6:21:19:c0:43:06:59:2d:99:b8:69:5b:2e:a7:
46:53:f7:bf:98:ef:3b:bc:30:57:0f:0f:16:38:67:30:40:aa:
9e:a8:7c:39:7b:1c:94:f3:72:84:53:2d:8e:22:70:f6:93:c6:
a4:67:81:18:bc:73:e1:92:fa:4d:93:1b:3a:a2:96:79:ad:b3:
59:58:40:3a:f8:8c:d3:de:d2:ec:17:b5:be:72:81:e0:03:c4:
36:88:7b:30:49:51:97:7f:87:60:d0:e5:21:19:96:8c:db:ac:
35:86:de:47:9a:ec:99:fd:2c:98:0e:25:c1:83:e4:ec:4d:a7:
dc:5d:34:db:a9:54:44:e0:ab:d2:26:ca:e6:a1:0a:85:88:43:
a6:de:32:e5:32:5a:fd:00:62:8b:d5:e6:45:f5:81:22:65:e6:
94:8f:d3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:29:33 2025 by rpki-client