Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3231352e302f32342d3234203d3e20383334.roa
File: 38322e3133392e3231352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: VDpTI4gtLtZUcaVP/Fv2q+Bkq8q2x2qW5cTCZmlALW4=
Subject key identifier: 01:C4:74:B7:0C:9D:08:B9:5B:0E:08:48:19:D7:DD:04:C0:6D:0C:05
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 47699730220BB26ECAC7EFB7C45270458668D471
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3231352e302f32342d3234203d3e20383334.roa
Signing time: Wed 17 Sep 2025 11:51:32 +0000
ROA not before: Wed 17 Sep 2025 11:46:32 +0000
ROA not after: Wed 16 Sep 2026 11:51:32 +0000
asID: 834
IP address blocks: 82.139.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Sep 2025 08:36:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:69:97:30:22:0b:b2:6e:ca:c7:ef:b7:c4:52:70:45:86:68:d4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 17 11:46:32 2025 GMT
Not After : Sep 16 11:51:32 2026 GMT
Subject: CN=01C474B70C9D08B95B0E084819D7DD04C06D0C05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:43:27:e4:93:e4:7b:33:83:d6:6c:f3:cd:
cf:f3:38:2b:05:bb:bc:9d:90:23:64:5f:e4:65:0e:
0e:37:b5:6e:ce:ab:b7:9a:3f:03:13:37:ec:ea:3e:
d3:cc:50:bb:aa:af:3d:a4:c5:ca:1f:27:6e:28:1f:
fb:f6:3a:b4:f9:4b:b2:ab:70:49:9c:37:8e:a3:1a:
d4:82:b5:63:ed:43:b4:f1:f6:48:4c:dd:34:8f:c1:
39:99:a5:c5:2d:86:1b:3a:58:66:42:a7:8d:a2:4c:
e7:45:82:a8:4e:fa:80:11:c6:48:26:f9:31:7a:28:
e1:0f:91:d2:90:28:b6:0e:e3:86:e5:e1:ea:2c:a5:
de:48:ea:23:f9:e9:1a:37:4a:da:1b:0d:30:13:be:
bc:51:b7:4f:a4:54:60:24:45:0c:19:e6:89:30:c8:
6e:33:08:a1:52:3b:d7:b2:c3:8f:01:2c:c1:be:8e:
e8:42:7c:28:28:09:b1:80:58:9d:4d:19:8c:c9:f9:
2e:07:ac:e3:52:ba:17:f5:63:ac:f9:5f:61:d5:8a:
b5:ca:12:11:1f:d3:2b:ff:f5:41:3e:29:31:81:cc:
cf:3e:ec:6e:22:38:13:0d:82:74:8b:39:1f:0d:b3:
ac:74:08:36:07:9b:5b:d8:39:25:da:55:4a:77:67:
93:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C4:74:B7:0C:9D:08:B9:5B:0E:08:48:19:D7:DD:04:C0:6D:0C:05
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3231352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.215.0/24
Signature Algorithm: sha256WithRSAEncryption
93:d3:1a:1b:b7:f1:e0:f0:51:6d:93:7e:43:1c:13:84:a2:89:
1e:f2:df:6b:43:0d:c8:96:b7:cb:36:e5:34:06:de:7c:ec:80:
b1:75:7d:5c:46:3c:87:c3:e8:6b:e1:63:c4:6f:a9:a2:f1:71:
67:69:c9:75:e2:61:f0:b0:e5:ea:09:18:47:e9:33:ae:ae:ed:
7b:ee:b7:78:47:e3:61:03:b8:c2:24:cf:ed:3c:66:6e:2a:4a:
b9:64:5a:41:ff:ee:37:c1:fd:2e:78:2e:06:e7:6a:f6:45:eb:
c4:4c:2c:8d:89:59:30:e1:d9:aa:28:5b:64:ee:09:b1:d6:9c:
97:d1:cf:79:bb:9d:90:cc:cb:59:21:1b:e2:95:0c:6b:24:58:
e7:6a:b8:c4:b2:b6:71:ab:e9:5f:c5:d6:0b:b1:69:fc:61:3e:
24:82:3d:a9:39:e3:f2:ee:2e:a1:68:c9:d9:03:f3:89:49:e9:
57:c1:7a:a2:3d:84:6d:83:5b:2d:b1:eb:4d:de:c0:f1:2f:44:
a7:85:fc:9e:6c:c5:d1:f1:5a:59:1d:42:73:9c:ce:f1:ee:bb:
d8:9e:57:2a:a4:75:b1:22:e0:28:e9:bd:d0:53:59:f2:65:38:
b2:3a:dd:57:89:e5:3d:b4:20:34:4e:1e:1c:db:a0:c8:a7:18:
1f:1e:76:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:55:48 2025 by rpki-client