Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3233312e302f32342d3234203d3e20383334.roa
File: 38352e3131372e3233312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: t3Gh+39aKeLw0rWpuSnY3dShn/aG9PKoHuX7A/w5YQM=
Subject key identifier: B3:03:99:90:F9:9D:C4:60:3D:ED:83:AB:9E:1D:7E:2F:85:AE:A4:8A
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 4181B3A14ADC96A343C2454694DF4D3C0816A577
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3233312e302f32342d3234203d3e20383334.roa
Signing time: Mon 12 May 2025 00:03:23 +0000
ROA not before: Sun 11 May 2025 23:58:23 +0000
ROA not after: Mon 11 May 2026 00:03:23 +0000
asID: 834
IP address blocks: 85.117.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 May 2025 15:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:81:b3:a1:4a:dc:96:a3:43:c2:45:46:94:df:4d:3c:08:16:a5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: May 11 23:58:23 2025 GMT
Not After : May 11 00:03:23 2026 GMT
Subject: CN=B3039990F99DC4603DED83AB9E1D7E2F85AEA48A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b7:c2:86:63:1e:a9:53:1b:ff:b2:d6:c5:60:
12:c5:7c:5a:3f:36:58:48:a2:a1:7f:8b:e6:80:e5:
48:8c:23:c0:7f:d0:41:30:89:d4:de:76:02:38:20:
c4:96:b1:77:d5:c6:80:0e:53:28:70:f6:7c:e3:b9:
00:1c:8c:cc:d5:97:60:d7:a2:c9:00:f3:3e:ab:48:
86:6d:1e:3c:a8:e6:66:7b:f8:7e:c6:f8:a1:a3:77:
38:95:45:f7:d6:63:75:80:0b:69:12:7c:6d:e8:ea:
50:53:7a:52:27:59:44:77:e1:46:a4:db:b8:83:f8:
02:27:87:11:29:67:bd:a3:37:c9:e9:a4:53:24:c0:
9f:93:db:73:e3:1e:ac:2f:bc:8a:e4:5d:7b:be:8e:
68:be:f1:a2:ba:42:2c:c9:61:f3:32:46:58:ad:fa:
91:c0:36:83:68:8f:d2:ed:71:e2:37:b8:e1:9d:4f:
89:cd:b5:eb:ee:bb:f2:72:77:d2:42:6e:59:07:45:
dd:cb:27:a2:85:20:7d:c7:c4:0d:bf:e3:41:01:c8:
a8:37:d9:4e:94:ab:3e:d5:68:3a:50:71:ca:a0:87:
77:fb:04:71:3a:fc:01:99:e5:05:96:24:ba:21:ba:
26:fa:82:de:14:66:8d:35:fd:78:37:c2:05:4e:31:
1d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:03:99:90:F9:9D:C4:60:3D:ED:83:AB:9E:1D:7E:2F:85:AE:A4:8A
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3233312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.231.0/24
Signature Algorithm: sha256WithRSAEncryption
41:4d:1e:f1:cc:69:6d:e0:e3:0c:45:39:3d:1a:f8:8a:55:1c:
95:fa:c5:12:83:7b:4f:5a:25:bd:c7:1c:d7:e2:ea:95:f4:65:
61:fa:ad:7d:d7:12:81:c3:2e:d6:f0:1a:6c:6a:d9:96:af:37:
d1:96:ce:9b:98:9e:ec:c2:2e:b9:78:f9:02:2e:38:7e:19:e2:
a7:78:3e:61:d6:e2:f2:01:f1:15:f6:07:62:db:ea:24:4d:bc:
b0:3e:36:ed:46:33:ec:72:f5:fe:81:6b:22:fc:40:17:fc:f0:
01:e1:b9:24:39:ec:39:8a:58:e3:e7:a0:97:1e:74:1a:c6:c3:
3c:96:77:05:8f:3b:07:a3:96:5a:00:c0:c0:8b:f8:10:8f:22:
15:d9:07:23:d0:f3:05:ff:8e:18:29:4f:90:07:52:d1:23:9b:
5c:98:73:88:12:de:c7:ba:8d:87:18:78:e1:e0:46:58:9e:fe:
d5:db:2d:11:d3:bd:19:98:f3:cc:15:b2:cb:02:5b:66:dd:f5:
30:c7:21:41:4b:5f:f4:d8:8d:6b:40:44:09:00:3a:7b:1f:0e:
29:20:61:71:67:95:08:23:a0:e0:7d:f6:ab:34:50:7d:e9:da:
9e:83:eb:78:fd:13:71:55:14:19:56:12:2d:e4:a6:2e:c2:02:
78:75:25:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:31:15 2025 by rpki-client