Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139332e302f32342d3234203d3e20383334.roa
File: 3137382e3133322e3139332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: j0dm8nCxo2c5FlS4PrSO666/+G2R+EpBp0j9IYBL3Ok=
Subject key identifier: E8:73:86:CB:35:CC:EA:E3:E2:53:E8:41:CA:1C:8B:4C:7B:D5:8F:2D
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 3B309FBEB2578F759773E0A449B2E1E029774674
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139332e302f32342d3234203d3e20383334.roa
Signing time: Sat 25 Jan 2025 13:44:03 +0000
ROA not before: Sat 25 Jan 2025 13:39:03 +0000
ROA not after: Sat 24 Jan 2026 13:44:03 +0000
asID: 834
IP address blocks: 178.132.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Jan 2025 14:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:30:9f:be:b2:57:8f:75:97:73:e0:a4:49:b2:e1:e0:29:77:46:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Jan 25 13:39:03 2025 GMT
Not After : Jan 24 13:44:03 2026 GMT
Subject: CN=E87386CB35CCEAE3E253E841CA1C8B4C7BD58F2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4a:da:b4:0c:8b:8d:c4:a4:2d:93:05:71:fc:
15:51:6b:a9:e2:97:1e:90:1e:26:57:d1:a3:e5:8a:
55:45:54:0b:c3:62:25:94:48:12:fe:0d:bd:6b:d1:
3e:ad:b3:63:2a:3c:65:64:31:84:66:79:3c:88:73:
f5:b5:fe:6e:b4:d8:74:fc:a4:26:53:8c:39:19:55:
70:e3:1a:d9:1c:44:14:36:17:c7:fe:5b:81:cc:15:
ad:86:64:10:ef:17:a1:b1:73:59:26:cb:c5:3e:14:
4b:88:5f:6c:31:cd:b7:fe:36:87:99:ed:74:cb:62:
89:38:57:cb:bf:3b:c2:74:16:a1:5a:cd:b5:96:23:
5e:4f:93:98:09:ae:4c:1c:ba:d8:58:24:a6:b3:19:
f7:60:3a:01:20:da:c9:53:26:d4:74:3c:f1:d4:2c:
41:38:3d:60:84:7f:7d:a1:f0:91:7f:4d:b0:fd:5e:
99:de:d5:c2:b2:21:bb:f3:57:ed:92:75:bb:4c:7b:
5f:40:39:53:91:6e:b5:a3:69:cf:87:85:43:6b:c6:
ca:ff:3f:ab:5a:e6:33:cb:90:fd:a7:29:3f:66:68:
77:bc:51:6b:ab:6a:4b:98:19:db:4f:a1:c6:24:0b:
99:8d:03:72:5f:5e:0e:6c:02:3c:2f:7c:1f:4f:82:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:73:86:CB:35:CC:EA:E3:E2:53:E8:41:CA:1C:8B:4C:7B:D5:8F:2D
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.193.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:92:5b:ac:5c:fc:ae:c5:31:12:7d:f5:03:aa:e0:be:f9:34:
df:37:c5:42:87:3b:f8:52:f3:69:ec:94:b2:27:85:b6:0b:5b:
51:e2:24:4b:b7:09:92:bd:de:b0:74:4b:86:30:25:67:e9:2b:
31:63:96:99:c8:eb:64:6a:b2:8e:69:cd:63:e5:9c:54:e7:38:
72:bc:a6:bd:bb:0a:b8:17:60:ca:db:02:5e:36:f9:79:73:47:
fe:70:1a:4f:2b:2e:a6:f7:19:c0:26:37:6a:77:87:ff:9d:0a:
06:7f:86:33:fe:16:c2:85:ee:9a:c4:0f:5d:e7:44:cf:c5:b8:
cf:48:17:17:e2:53:47:79:2d:e0:2e:40:4d:34:a9:50:c9:49:
ee:c8:8c:73:58:ec:3e:d8:3c:5f:9e:28:3c:2f:da:ed:7b:45:
df:f8:26:48:d6:fe:be:3e:14:39:d5:20:c3:55:d2:0e:93:4d:
e9:b2:5b:15:90:08:c8:13:25:0f:0d:3f:9e:4a:99:a9:f3:4c:
a6:2b:12:ae:c6:18:c2:67:ae:79:84:e3:69:d1:45:72:5d:96:
45:70:f6:47:6c:5f:2e:85:57:69:15:40:35:08:65:2b:e0:c2:
7e:16:b9:75:c1:b5:dd:11:7f:74:b7:02:f0:b6:12:8e:99:0c:
84:f9:0c:8a
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUOzCfvrJXj3WXc+CkSbLh4Cl3RnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk
MTZjZWVkMzAeFw0yNTAxMjUxMzM5MDNaFw0yNjAxMjQxMzQ0MDNaMDMxMTAvBgNV
BAMTKEU4NzM4NkNCMzVDQ0VBRTNFMjUzRTg0MUNBMUM4QjRDN0JENThGMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOStq0DIuNxKQtkwVx/BVRa6ni
lx6QHiZX0aPlilVFVAvDYiWUSBL+Db1r0T6ts2MqPGVkMYRmeTyIc/W1/m602HT8
pCZTjDkZVXDjGtkcRBQ2F8f+W4HMFa2GZBDvF6Gxc1kmy8U+FEuIX2wxzbf+NoeZ
7XTLYok4V8u/O8J0FqFazbWWI15Pk5gJrkwcuthYJKazGfdgOgEg2slTJtR0PPHU
LEE4PWCEf32h8JF/TbD9Xpne1cKyIbvzV+2SdbtMe19AOVORbrWjac+HhUNrxsr/
P6ta5jPLkP2nKT9maHe8UWurakuYGdtPocYkC5mNA3JfXg5sAjwvfB9PgjKJAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU6HOGyzXM6uPiU+hByhyLTHvVjy0wHwYDVR0j
BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0
NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G
czd0TS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGNjMDg3Mzct
OTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0NGVkLzAvMzEzNzM4MmUzMTMzMzIyZTMx
MzkzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALKE
wTANBgkqhkiG9w0BAQsFAAOCAQEApZJbrFz8rsUxEn31A6rgvvk03zfFQoc7+FLz
aeyUsieFtgtbUeIkS7cJkr3esHRLhjAlZ+krMWOWmcjrZGqyjmnNY+WcVOc4crym
vbsKuBdgytsCXjb5eXNH/nAaTysupvcZwCY3aneH/50KBn+GM/4WwoXumsQPXedE
z8W4z0gXF+JTR3kt4C5ATTSpUMlJ7siMc1jsPtg8X54oPC/a7XtF3/gmSNb+vj4U
OdUgw1XSDpNN6bJbFZAIyBMlDw0/nkqZqfNMpisSrsYYwmeueYTjadFFcl2WRXD2
R2xfLoVXaRVANQhlK+DCfha5dcG13RF/dLcC8LYSjpkMhPkMig==
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:17:53 2025 by rpki-client