Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139362e302f32342d3234203d3e20323132313530.roa
File: 3137382e3133322e3139362e302f32342d3234203d3e20323132313530.roa (raw, json)
Hash identifier: rg6ISIntZQ3t0lbqjNvMqhGg8i4fuvZiJpSEDnjLs6c=
Subject key identifier: E4:11:23:3B:5C:9E:D8:0E:D7:C6:88:F3:0A:36:06:15:F5:99:D6:A9
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 2D9B1A8EA460E6E31F1231C53C8069AA76E0FDEA
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139362e302f32342d3234203d3e20323132313530.roa
Signing time: Thu 06 Feb 2025 20:00:58 +0000
ROA not before: Thu 06 Feb 2025 19:55:58 +0000
ROA not after: Thu 05 Feb 2026 20:00:58 +0000
asID: 212150
IP address blocks: 178.132.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 19:20:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:9b:1a:8e:a4:60:e6:e3:1f:12:31:c5:3c:80:69:aa:76:e0:fd:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Feb 6 19:55:58 2025 GMT
Not After : Feb 5 20:00:58 2026 GMT
Subject: CN=E411233B5C9ED80ED7C688F30A360615F599D6A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fe:8c:75:e0:3c:23:5a:ad:dc:a0:c3:5c:38:
c7:68:80:bf:52:27:1c:26:9b:49:72:06:6e:63:e0:
fa:fc:8f:41:31:4b:de:c2:67:84:37:ad:ec:9e:7e:
78:19:77:e7:7f:ec:f8:e5:87:4f:2f:f8:56:03:f9:
1f:cc:5d:6a:52:b0:5e:b4:26:c7:26:1f:30:ae:2c:
c9:45:62:90:90:e7:54:01:2a:6c:cf:f1:38:e1:76:
be:7b:88:a5:3b:70:38:92:ef:df:57:7d:c4:15:94:
b3:cf:ac:1d:04:9b:e6:9c:0a:ea:e3:d7:2e:b4:cc:
0e:54:82:01:ea:d0:31:22:dd:ea:dc:10:1a:61:96:
40:ce:a2:f4:c5:1a:02:b4:3a:0a:39:c3:45:da:6c:
92:4b:7c:0c:4c:cf:e8:97:38:a4:3a:79:99:83:ad:
bc:7d:ab:d1:86:af:67:db:03:95:c2:6b:2a:41:fd:
40:3b:16:c8:8e:94:b4:3f:0f:41:28:a9:9b:88:8d:
5d:e6:f1:bf:83:8e:33:4f:c6:7f:ec:66:e3:70:e2:
7c:4c:81:27:24:3d:45:50:e9:21:d4:b6:63:5f:a8:
e4:b6:09:bc:f8:1b:37:dc:7d:15:01:49:a0:f4:d8:
ab:fc:97:a2:29:ab:2a:61:d2:81:f8:f4:bf:39:5d:
a0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:11:23:3B:5C:9E:D8:0E:D7:C6:88:F3:0A:36:06:15:F5:99:D6:A9
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139362e302f32342d3234203d3e20323132313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.196.0/24
Signature Algorithm: sha256WithRSAEncryption
94:b5:f9:0b:70:2f:c1:37:a7:8f:a8:9f:e9:80:41:70:49:ab:
48:b5:19:43:58:c2:85:71:ec:30:8f:56:80:b6:2f:b3:c7:42:
33:5d:6c:ca:74:03:d7:0d:e0:ed:5b:de:88:23:23:97:bc:3e:
7a:a7:b8:0b:22:d3:b7:17:58:52:e9:7f:e3:54:1d:27:fb:08:
80:ec:a2:77:e4:cf:e0:fe:cd:01:41:9f:2e:78:10:77:63:56:
21:da:3a:23:53:e7:0e:4b:3a:8e:37:2b:29:8d:47:c8:88:a5:
83:ad:58:ef:d8:5f:c8:f4:58:41:32:5d:39:d6:2e:dd:58:d6:
8f:6c:1d:a1:c5:d1:91:ec:36:1d:1a:3a:a2:23:a8:cb:73:08:
e0:ab:0a:f2:0c:e1:ed:df:8f:d7:b3:fc:ef:29:6c:8c:9d:87:
ac:7c:7f:4f:73:62:9b:5d:13:55:2a:cc:66:cc:8a:2f:64:1f:
2d:3b:f2:24:5d:dd:ec:0d:4f:9c:ba:97:4a:0a:e7:e6:62:8c:
47:fd:6a:bb:63:0e:c7:1f:1c:14:12:4b:b5:4b:80:a3:58:2d:
bd:10:30:e4:e6:63:ca:4e:d4:23:c2:a2:a1:ef:73:51:ac:53:
2d:7b:b0:81:d1:1c:45:22:bc:26:c1:ba:e4:c2:9b:ef:c7:84:
a6:d9:c5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:19:42 2025 by rpki-client