Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3233302e302f32332d3234203d3e20383334.roa
File: 38352e3131372e3233302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 7S9UZD1QOwCDsAxAQu8NYjb9QoH3ppH433M5kAku70c=
Subject key identifier: F6:C2:43:E8:51:1B:2B:FA:E9:27:CF:96:48:36:28:42:CE:A3:B0:65
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 35DCF8065414382D7538D50ADFD20863A8B40F71
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3233302e302f32332d3234203d3e20383334.roa
Signing time: Sat 08 Mar 2025 00:02:31 +0000
ROA not before: Fri 07 Mar 2025 23:57:31 +0000
ROA not after: Sat 07 Mar 2026 00:02:31 +0000
asID: 834
IP address blocks: 85.117.230.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 09:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:dc:f8:06:54:14:38:2d:75:38:d5:0a:df:d2:08:63:a8:b4:0f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Mar 7 23:57:31 2025 GMT
Not After : Mar 7 00:02:31 2026 GMT
Subject: CN=F6C243E8511B2BFAE927CF9648362842CEA3B065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:13:38:bc:06:bf:ea:10:b7:b1:54:6b:11:
50:74:1c:7c:dd:1f:b7:e2:78:53:2e:93:79:ec:e7:
ee:41:12:fc:1a:f0:55:c0:31:a4:c5:8f:aa:bf:94:
b6:f0:45:c6:e1:63:5e:63:21:5c:a4:7f:6a:ed:f6:
76:de:a2:96:3b:a2:fd:a7:ba:12:fc:e0:e9:a9:89:
3d:48:3a:07:0a:19:59:de:bf:5d:24:67:82:27:c5:
90:10:11:d0:02:2e:ec:7b:2e:69:b9:44:32:17:65:
7c:74:4f:0c:69:29:f9:a1:cd:fc:3c:cd:e0:9a:ed:
75:19:96:75:87:40:1c:f4:18:5f:d6:ac:45:f5:98:
3e:82:ab:0f:e6:cf:fd:f8:4a:81:f1:53:4e:b7:6f:
38:62:03:0d:18:c1:a2:38:17:07:77:84:be:1a:ff:
c4:0e:cc:da:4f:f8:90:63:23:5e:d0:63:d7:6f:29:
44:96:fe:4f:b0:d6:c5:d4:3b:cd:69:80:cb:af:45:
f1:10:1f:be:d6:03:c2:e7:0b:4b:25:17:67:ef:08:
16:33:e2:e1:3f:d8:ea:49:97:d5:e8:52:ec:6e:b6:
2e:59:ae:3d:fc:8e:cc:bc:62:5d:f6:41:36:0d:7a:
00:91:2b:57:83:4c:8d:28:ca:e1:a9:7e:50:d8:24:
f9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C2:43:E8:51:1B:2B:FA:E9:27:CF:96:48:36:28:42:CE:A3:B0:65
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3233302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.230.0/23
Signature Algorithm: sha256WithRSAEncryption
84:69:3f:cd:36:bf:b3:84:fb:fe:55:a4:87:5f:d8:ef:60:e9:
42:21:be:5c:8c:b1:f5:93:15:38:28:13:da:b1:33:d2:6f:83:
52:dc:61:cd:c2:85:69:48:c9:51:9f:c6:e3:a6:94:a7:48:88:
c8:bd:f3:5d:1b:6f:f1:ef:dd:b3:34:20:7f:e8:52:4b:a6:68:
a7:de:a0:b5:a6:c8:2a:b8:ca:86:87:42:43:a6:5d:6b:1b:34:
2a:e0:1d:c1:2f:6c:8e:f9:78:f4:83:11:9a:55:c0:fe:b6:f8:
b4:ee:0f:16:25:a0:1b:bc:91:da:77:2c:ce:75:1d:df:25:2a:
39:90:1c:e9:0f:e1:40:4f:fd:1f:00:43:e0:94:61:7b:44:f8:
7c:4b:bf:6d:1e:67:28:e9:57:65:66:fe:7f:4e:0f:01:72:4c:
6f:12:82:1c:05:65:07:3b:13:e1:bb:90:94:00:eb:70:af:e9:
53:9c:48:0e:20:6e:6a:99:38:65:1b:bd:98:b0:05:6c:e1:1c:
9f:23:af:f0:f1:21:26:5f:37:6a:84:df:ec:83:2c:ae:85:c1:
33:5c:af:c9:3e:59:ff:37:9c:d1:16:09:ef:65:4f:d6:13:3d:
a1:53:92:bd:6b:8e:a0:30:18:07:71:23:9c:0f:11:bb:d2:ba:
2e:1a:b1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:43:15 2025 by rpki-client