Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139392e302f32342d3234203d3e20383334.roa
File: 3137382e3133322e3139392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: qp+ScEUOOdp7X9WVr+LW7ArvieQLzJ7obrCZZqwyZmg=
Subject key identifier: D9:90:5A:72:C4:11:93:00:DA:30:17:DC:66:A0:36:D1:8C:C6:F7:FE
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 287AF195112BA9BB1AC5C6ABDEEDDC1C8FED5A22
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139392e302f32342d3234203d3e20383334.roa
Signing time: Sat 25 Jan 2025 13:44:05 +0000
ROA not before: Sat 25 Jan 2025 13:39:05 +0000
ROA not after: Sat 24 Jan 2026 13:44:05 +0000
asID: 834
IP address blocks: 178.132.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Jan 2025 21:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:7a:f1:95:11:2b:a9:bb:1a:c5:c6:ab:de:ed:dc:1c:8f:ed:5a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Jan 25 13:39:05 2025 GMT
Not After : Jan 24 13:44:05 2026 GMT
Subject: CN=D9905A72C4119300DA3017DC66A036D18CC6F7FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:be:b1:f4:7b:94:ba:4b:c6:bb:27:98:5e:03:
1d:67:e9:b4:e6:02:b4:32:34:14:65:b0:f6:2f:e0:
4c:f9:1b:ab:5e:6a:ec:9b:36:ec:99:41:91:71:74:
3d:f9:87:d9:32:35:b1:18:e9:36:1b:22:02:cf:96:
ca:73:58:12:64:5b:35:26:4e:17:1b:08:b9:d8:7d:
a0:23:df:4a:73:97:e9:d3:80:1f:fb:f4:db:82:93:
38:10:3d:96:06:da:da:5d:7f:f4:e7:db:f4:3d:5f:
3f:7c:8a:cb:ea:7a:a7:c3:04:75:dc:ee:8f:34:89:
1d:eb:0f:f6:8d:1e:f6:09:77:4f:33:80:c7:49:48:
24:d9:43:25:76:98:68:27:91:34:08:83:41:98:0c:
57:77:05:f0:75:be:5f:83:5b:2f:9e:0f:fb:a1:2c:
8c:36:a8:e6:53:81:56:92:49:b6:9c:54:59:18:9b:
8e:54:30:8f:34:bd:f2:63:06:54:81:4f:92:17:e9:
8a:17:09:a5:2e:c4:9f:4d:28:3b:82:b2:db:0f:ba:
f0:cf:77:59:c8:8f:9c:37:ed:aa:94:b8:8d:c4:a5:
90:1e:99:b3:04:4d:62:fe:a8:72:52:db:c8:1e:25:
0f:bc:79:b7:5a:05:d9:e0:85:a5:7f:8c:77:8a:aa:
ed:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:90:5A:72:C4:11:93:00:DA:30:17:DC:66:A0:36:D1:8C:C6:F7:FE
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.199.0/24
Signature Algorithm: sha256WithRSAEncryption
52:0d:f6:1c:d1:f6:eb:ca:70:e7:ee:76:28:39:d7:79:4a:8f:
13:b4:fc:a1:e6:24:9b:74:36:ba:59:d7:94:5a:ea:8f:f5:c9:
d2:e3:f3:68:f6:d6:99:6e:a6:96:a1:21:ad:3c:c4:96:9c:76:
54:ab:61:42:d4:7a:44:97:d8:be:0f:03:09:cc:eb:7b:f3:2e:
a0:63:4e:7f:9a:bc:46:d2:b7:e9:19:ab:04:0d:1d:3a:0f:46:
c7:e3:8b:69:7e:65:f6:e9:d2:7d:13:6c:ec:2a:f1:16:48:97:
21:a0:e0:2a:8c:be:44:82:94:fe:f6:78:71:0e:8e:14:c8:b3:
e8:69:09:9f:ee:33:a1:98:76:43:83:fa:59:fe:b0:92:31:3a:
25:ff:ea:a3:06:89:9e:0a:18:52:92:56:65:d7:d5:fb:1a:66:
6c:3a:45:4c:19:2d:93:89:fa:67:3b:9d:76:c9:be:7d:7a:ba:
df:4e:1d:7a:67:cb:5e:e3:bf:dc:12:c6:77:71:c1:f8:d6:7c:
00:d1:6c:d3:e5:eb:91:65:48:97:1c:97:b0:9c:e1:3c:15:61:
ad:f0:1a:48:05:21:9c:bf:3b:00:78:d7:63:25:25:24:5b:e9:
1e:33:46:32:9d:2b:99:3a:8c:09:19:b4:42:fd:c6:59:9e:76:
17:7b:04:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:18:53 2025 by rpki-client