Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139352e302f32342d3234203d3e20383334.roa
File: 3137382e3133322e3139352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: MlQVyl04pJXbtqaLCRqAkCt/ITDAWOrTHIp9nC9bIng=
Subject key identifier: 7F:48:A7:D6:BD:86:F3:5F:EF:84:59:5F:F6:F2:31:26:15:FF:AB:41
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 5C3BAE14C06728F6DD1B8A313975B655ECF219D3
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139352e302f32342d3234203d3e20383334.roa
Signing time: Sat 25 Jan 2025 13:44:04 +0000
ROA not before: Sat 25 Jan 2025 13:39:04 +0000
ROA not after: Sat 24 Jan 2026 13:44:04 +0000
asID: 834
IP address blocks: 178.132.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 01:57:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:3b:ae:14:c0:67:28:f6:dd:1b:8a:31:39:75:b6:55:ec:f2:19:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Jan 25 13:39:04 2025 GMT
Not After : Jan 24 13:44:04 2026 GMT
Subject: CN=7F48A7D6BD86F35FEF84595FF6F2312615FFAB41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:37:e4:7e:0d:de:6b:5e:5a:9d:a7:51:b2:7d:
a0:6e:c6:17:78:fc:c2:67:11:ef:04:19:c3:d4:3a:
a9:02:68:50:eb:a5:f2:5b:a1:ce:8c:b6:3d:9f:46:
66:f2:73:11:cc:fa:15:36:c9:4b:09:09:e5:5f:37:
67:20:38:58:43:aa:1c:dd:1b:f7:41:d9:90:26:cc:
bb:76:d6:e0:c4:f7:f7:ea:1e:1f:87:dc:06:e1:fd:
1e:80:c2:1e:1f:c1:ea:7b:54:35:45:6f:a0:a8:0e:
c1:0d:1a:d7:25:8f:e8:c6:c2:90:1a:35:e4:13:10:
ed:d7:45:87:a2:1a:29:38:2a:3e:34:8b:c5:e8:ad:
a1:0a:23:47:df:6b:83:7d:de:b3:8b:2c:45:2d:b4:
fe:83:c9:db:6d:65:38:35:94:98:e5:9f:6b:09:ea:
57:1e:96:b5:2a:5f:f8:c0:d9:a5:0c:f7:24:4b:6b:
a8:73:72:96:09:e3:ce:55:97:4a:c7:2f:62:0c:3a:
58:9a:45:b7:16:9e:15:89:e7:9d:26:7f:68:46:ff:
c6:76:99:ce:16:a7:c6:e4:3b:d0:99:0a:fd:90:27:
eb:70:e2:7a:96:2d:df:46:ce:8c:62:93:be:10:c6:
93:33:52:70:51:8b:c3:bb:31:dd:72:13:77:13:80:
d6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:48:A7:D6:BD:86:F3:5F:EF:84:59:5F:F6:F2:31:26:15:FF:AB:41
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.195.0/24
Signature Algorithm: sha256WithRSAEncryption
48:05:d3:cb:b5:9d:b9:66:f1:20:f3:9e:bd:6d:c7:18:77:70:
c0:05:89:d6:71:cb:89:90:50:59:6d:ca:df:af:b9:c1:97:96:
74:a2:56:ca:bb:46:dc:a3:07:70:bd:a3:d8:4f:cb:82:40:0d:
7a:dc:4a:99:61:71:bc:85:16:7a:55:55:33:6b:16:e6:d6:70:
cd:b0:e4:4f:e7:b2:f5:79:df:eb:b1:55:b7:bc:3c:42:3d:0b:
43:0a:01:87:a6:f7:45:65:28:64:18:27:01:34:52:d9:87:0b:
15:e1:f0:99:96:32:46:57:52:81:3f:df:9f:70:20:5d:bc:3f:
b8:04:8a:a7:ce:77:df:ca:50:52:09:18:2f:cb:bc:a3:4c:d7:
4c:94:c0:9f:89:92:55:60:e1:7b:63:b0:4a:2f:bc:c9:d7:84:
8a:ec:b9:60:7a:97:47:7b:c5:b2:50:d4:aa:ab:0b:3a:cb:6a:
d8:0e:63:4a:2b:eb:e4:84:bd:bc:dc:ce:ca:a3:f3:b6:57:c1:
9b:20:5b:c1:65:72:74:d8:fb:cd:18:60:0d:4a:87:25:4e:47:
82:38:1d:ab:67:71:83:a1:fe:b5:05:a6:71:19:a8:65:dd:26:
21:2b:15:4f:40:95:46:6c:21:81:82:cb:89:dc:35:6e:35:61:
a7:cc:62:7f
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUXDuuFMBnKPbdG4oxOXW2VezyGdMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk
MTZjZWVkMzAeFw0yNTAxMjUxMzM5MDRaFw0yNjAxMjQxMzQ0MDRaMDMxMTAvBgNV
BAMTKDdGNDhBN0Q2QkQ4NkYzNUZFRjg0NTk1RkY2RjIzMTI2MTVGRkFCNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXN+R+Dd5rXlqdp1GyfaBuxhd4
/MJnEe8EGcPUOqkCaFDrpfJboc6Mtj2fRmbycxHM+hU2yUsJCeVfN2cgOFhDqhzd
G/dB2ZAmzLt21uDE9/fqHh+H3Abh/R6Awh4fwep7VDVFb6CoDsENGtclj+jGwpAa
NeQTEO3XRYeiGik4Kj40i8XoraEKI0ffa4N93rOLLEUttP6DydttZTg1lJjln2sJ
6lcelrUqX/jA2aUM9yRLa6hzcpYJ485Vl0rHL2IMOliaRbcWnhWJ550mf2hG/8Z2
mc4Wp8bkO9CZCv2QJ+tw4nqWLd9Gzoxik74QxpMzUnBRi8O7Md1yE3cTgNZ5AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUf0in1r2G81/vhFlf9vIxJhX/q0EwHwYDVR0j
BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0
NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G
czd0TS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGNjMDg3Mzct
OTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0NGVkLzAvMzEzNzM4MmUzMTMzMzIyZTMx
MzkzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALKE
wzANBgkqhkiG9w0BAQsFAAOCAQEASAXTy7WduWbxIPOevW3HGHdwwAWJ1nHLiZBQ
WW3K36+5wZeWdKJWyrtG3KMHcL2j2E/LgkANetxKmWFxvIUWelVVM2sW5tZwzbDk
T+ey9Xnf67FVt7w8Qj0LQwoBh6b3RWUoZBgnATRS2YcLFeHwmZYyRldSgT/fn3Ag
Xbw/uASKp85338pQUgkYL8u8o0zXTJTAn4mSVWDhe2OwSi+8ydeEiuy5YHqXR3vF
slDUqqsLOstq2A5jSivr5IS9vNzOyqPztlfBmyBbwWVydNj7zRhgDUqHJU5Hgjgd
q2dxg6H+tQWmcRmoZd0mISsVT0CVRmwhgYLLidw1bjVhp8xifw==
-----END CERTIFICATE-----
Generated at Mon Mar 10 00:50:17 2025 by rpki-client