Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138322e302f32342d3234203d3e20323135323837.roa
File: 3137382e3230382e3138322e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: H/nhcTm8afumbqflVIs6ahloyjkLG1gPnvbgiHfIcwc=
Subject key identifier: E8:AE:7C:8F:F0:9F:64:B1:95:4A:93:17:86:B7:AA:7F:3E:7B:81:6C
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 57BD8EAD509BDAFD18C95D09A802BE7FD00713E0
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138322e302f32342d3234203d3e20323135323837.roa
Signing time: Sat 15 Feb 2025 14:40:59 +0000
ROA not before: Sat 15 Feb 2025 14:35:59 +0000
ROA not after: Sat 14 Feb 2026 14:40:59 +0000
asID: 215287
IP address blocks: 178.208.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Mar 2025 00:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:bd:8e:ad:50:9b:da:fd:18:c9:5d:09:a8:02:be:7f:d0:07:13:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Feb 15 14:35:59 2025 GMT
Not After : Feb 14 14:40:59 2026 GMT
Subject: CN=E8AE7C8FF09F64B1954A931786B7AA7F3E7B816C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:bb:aa:86:33:d9:d5:89:9e:37:3a:cf:8d:
30:50:8f:5d:ae:62:9b:6e:a2:16:a9:13:7b:92:f0:
95:44:f1:d3:29:4a:20:45:01:37:1d:87:b8:ab:ec:
a5:fc:bb:82:c7:67:73:40:67:2f:03:17:25:57:c9:
1a:4d:80:b3:61:a4:52:a1:68:11:35:41:2f:a4:2d:
f0:b5:d2:1f:2e:19:7b:24:35:6a:1f:f9:f7:3d:af:
a4:02:1d:fc:95:44:4f:c6:8a:f2:bc:6c:9b:14:14:
03:10:a8:44:76:e4:a8:b7:cf:54:74:04:7a:86:81:
6d:de:48:ec:33:25:13:2f:ad:70:18:df:5c:ed:02:
24:82:c1:23:90:0d:bb:bd:6c:e7:ef:a4:e7:23:5b:
67:08:8e:10:6a:2a:25:d9:b1:c0:36:49:ed:52:04:
04:f9:1e:ef:5d:6b:fb:02:15:36:3d:5b:9b:be:8d:
8a:e4:40:cd:2d:df:bb:a0:d2:41:5d:36:bd:6b:73:
c2:50:75:09:36:30:4f:70:53:04:e3:d0:51:82:ef:
e0:54:48:3f:2f:c4:aa:a5:7b:e6:25:e4:46:bf:6d:
24:19:a0:de:c7:d1:62:f3:cc:37:b4:43:06:d3:c0:
a7:49:2a:18:ab:6a:9b:00:bf:3e:2a:6b:ad:39:93:
77:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AE:7C:8F:F0:9F:64:B1:95:4A:93:17:86:B7:AA:7F:3E:7B:81:6C
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138322e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.182.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:0d:36:d6:60:0c:6e:72:a2:49:09:57:45:88:d5:1d:4a:3a:
5f:bf:38:4d:ce:02:32:56:27:09:dd:a8:5c:d0:7c:31:58:e9:
c5:2c:29:b5:58:4d:ea:0e:3d:5a:aa:d7:10:c7:ee:ed:42:6a:
03:5a:8a:ad:53:10:c8:b5:b7:3d:a6:02:ca:e5:63:7f:e8:bd:
b1:17:da:ac:bf:d5:8f:82:28:c8:2e:a1:1a:2a:59:b7:9c:3c:
45:98:00:65:b2:5b:5c:ca:66:f6:f5:42:12:0e:b2:9b:8b:fb:
90:7b:63:b3:99:5b:aa:30:38:69:89:6f:59:06:a2:75:86:54:
d7:1f:9a:19:7c:96:0d:b5:53:be:8f:ec:6a:dc:07:30:10:fa:
9d:79:d2:2f:08:96:d1:fd:8f:32:e1:e3:a7:de:fd:18:69:7b:
31:df:08:e0:35:15:c9:f6:29:18:6b:cb:bc:16:fc:38:ef:43:
da:ce:87:36:b2:01:92:4d:83:f7:b2:0b:10:85:d4:5c:1e:f0:
7b:c3:c3:51:31:54:1e:d4:46:c0:3f:60:ee:76:00:67:c0:c4:
18:6e:02:d8:d5:f3:ce:37:6c:e3:24:cc:81:15:54:52:7d:70:
08:a9:8a:94:4f:0a:15:7a:df:00:77:c7:5d:ab:20:72:65:d1:
d4:45:7e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:03:59 2025 by rpki-client