Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139392e302f32342d3234203d3e203231383539.roa
File: 3137382e3133322e3139392e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: t3uhK2sXzTB0FJzOOClRBNzLD+yYjpOgdWPz2vFHkfk=
Subject key identifier: CC:D9:00:47:5E:DC:B2:7A:C0:66:6A:A0:C3:4B:2E:36:28:E0:99:D3
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 0CB36410FB4EC0491E1AAC6E4162EE757A97B0E5
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139392e302f32342d3234203d3e203231383539.roa
Signing time: Sun 02 Mar 2025 16:43:16 +0000
ROA not before: Sun 02 Mar 2025 16:38:16 +0000
ROA not after: Sun 01 Mar 2026 16:43:16 +0000
asID: 21859
IP address blocks: 178.132.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:b3:64:10:fb:4e:c0:49:1e:1a:ac:6e:41:62:ee:75:7a:97:b0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Mar 2 16:38:16 2025 GMT
Not After : Mar 1 16:43:16 2026 GMT
Subject: CN=CCD900475EDCB27AC0666AA0C34B2E3628E099D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:45:12:01:17:71:30:85:24:e1:a5:76:f8:8a:
27:5a:8f:cb:d3:04:30:0f:32:57:f9:5d:8f:96:a5:
22:b5:a5:c8:31:17:10:97:ab:ab:a4:81:aa:c2:55:
b7:f6:3e:7f:1c:0a:26:df:0d:30:32:4a:0f:d8:19:
e9:86:00:e7:3f:86:dd:11:f0:95:d7:2c:de:c0:cd:
62:c7:b2:eb:05:23:0c:ec:d8:5f:d4:46:75:72:41:
c6:c1:d0:c2:dc:e2:12:58:43:b0:ec:fa:2d:26:13:
f8:5e:2b:26:90:0c:e2:16:c4:25:98:2f:dd:c5:cf:
4a:cb:41:43:be:1f:00:3d:c8:88:74:5a:70:49:f3:
12:84:3f:7e:6f:a0:aa:ac:fc:cc:43:a3:4c:92:1b:
84:71:df:69:cb:da:c2:9c:e9:e6:7c:dd:50:2f:e8:
7f:e6:7a:78:34:d4:c0:c7:18:74:65:fe:64:53:53:
8c:e5:58:b8:1b:a2:dc:fd:90:57:0e:7f:75:74:71:
4a:37:be:07:bb:f1:e7:90:df:ed:c7:16:da:37:5a:
06:f8:20:72:ea:db:19:c2:8d:3b:48:13:a3:5f:67:
57:c2:73:89:7c:26:b1:a5:d3:38:15:ef:8c:28:bc:
0f:89:cc:2a:38:23:4a:31:49:82:63:b1:45:2d:58:
a3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D9:00:47:5E:DC:B2:7A:C0:66:6A:A0:C3:4B:2E:36:28:E0:99:D3
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139392e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.199.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:06:53:e8:c7:37:80:0a:69:15:cf:76:58:b8:4d:d8:ca:a2:
ba:96:24:6b:a4:ad:0b:7f:e4:e2:a5:36:65:e3:c2:64:e3:5c:
8c:d9:4c:ea:f0:cf:68:30:52:d8:61:8e:4c:4f:ed:81:89:32:
00:df:d6:22:02:31:1f:69:9b:ed:a1:5e:26:06:7f:76:5e:8f:
ae:3e:d1:47:29:9e:1e:db:0f:6b:f0:5e:51:5f:9d:e8:65:19:
1e:6f:03:30:a3:aa:80:1e:71:86:1e:ad:c6:9f:44:a1:e8:ff:
38:de:4b:38:a2:7a:de:41:c4:eb:85:47:bc:65:e8:4b:20:bd:
31:10:c8:6c:44:16:33:5f:3e:ee:87:1d:46:51:54:65:90:72:
06:1c:79:cc:22:82:a1:39:2d:b1:f6:10:e7:f8:63:40:4a:dc:
e4:7a:91:d1:85:c7:66:68:ac:91:2b:7f:41:b7:33:d4:e5:e3:
35:0b:9f:51:6e:ba:8e:0f:3c:fd:9d:26:21:f0:a3:e0:d0:da:
af:8d:fa:17:54:ec:69:ba:29:e8:48:6c:3f:e7:05:ca:70:ba:
0c:7b:fc:7b:5c:18:e7:3f:e3:9e:71:4b:3e:5b:20:67:a8:ab:
32:2c:12:9d:3a:f4:fc:e6:3e:aa:a8:26:5e:32:52:7a:ca:2f:
d2:38:91:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:22:37 2025 by rpki-client