Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138362e302f32342d3234203d3e20323134333635.roa
File: 3137382e3230382e3138362e302f32342d3234203d3e20323134333635.roa (raw, json)
Hash identifier: SLO95qDQ/QxBvOs9lnIA4ZAQVgcXEGIdClBuuEWJK9s=
Subject key identifier: 9A:40:68:BA:48:C8:D8:EE:EB:78:C0:62:BB:CE:EC:63:D0:D1:3B:E5
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 5651722E2D7FCD70446287BCB3717F004A1DB2D5
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138362e302f32342d3234203d3e20323134333635.roa
Signing time: Thu 26 Dec 2024 16:57:15 +0000
ROA not before: Thu 26 Dec 2024 16:52:15 +0000
ROA not after: Thu 25 Dec 2025 16:57:15 +0000
asID: 214365
IP address blocks: 178.208.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Jan 2025 00:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:51:72:2e:2d:7f:cd:70:44:62:87:bc:b3:71:7f:00:4a:1d:b2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Dec 26 16:52:15 2024 GMT
Not After : Dec 25 16:57:15 2025 GMT
Subject: CN=9A4068BA48C8D8EEEB78C062BBCEEC63D0D13BE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:fa:cd:99:be:69:18:4b:97:dd:49:e2:2f:
b8:d0:75:1a:48:f6:3e:59:88:57:53:8b:05:e9:e3:
55:ea:d4:00:3a:4b:52:4c:25:ae:7f:ad:09:08:d9:
00:11:ff:c0:cf:26:eb:bb:0f:e4:8b:bc:62:b9:c3:
5c:0b:8e:ee:23:65:8a:c6:ba:74:10:8c:e9:64:67:
8b:6d:ab:74:b7:03:4e:e3:c1:5b:50:1b:ea:ea:a7:
7c:a2:32:2a:c5:62:57:c5:96:b4:22:d0:61:3b:a3:
a9:79:5f:65:4c:0e:1e:12:bd:51:b4:88:88:02:b0:
87:57:3f:d8:0c:ff:ef:b4:39:f3:a9:fa:06:79:d0:
92:b0:1f:d9:72:a4:8a:9b:b1:05:84:49:3a:43:e0:
90:fc:f2:a6:55:87:72:2f:93:ef:86:19:b7:90:17:
ee:df:61:bf:14:64:e6:68:98:da:8c:9c:15:a7:8a:
64:63:fc:72:f6:e7:80:ff:af:3f:9f:d1:b7:79:6d:
32:80:48:02:43:13:21:df:a2:8b:6a:2d:39:56:95:
57:e0:94:75:8b:d8:5d:eb:f0:bb:61:02:8f:9d:e3:
ae:68:a2:13:6a:7c:49:cf:3b:7f:a8:2d:98:83:29:
d3:88:c8:c1:28:6d:bb:24:d1:c8:ff:6f:9d:86:94:
9f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:40:68:BA:48:C8:D8:EE:EB:78:C0:62:BB:CE:EC:63:D0:D1:3B:E5
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138362e302f32342d3234203d3e20323134333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.186.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:dc:9f:2e:af:de:71:44:6a:f3:b9:43:ea:29:da:38:22:9a:
96:3c:bf:6e:a8:2f:07:c3:8b:23:14:00:19:d2:3e:4f:cf:e1:
16:25:34:e9:a9:ac:48:af:60:d7:83:11:32:74:31:cc:82:05:
c3:6b:c7:20:29:28:2e:0b:4d:63:69:c3:31:84:67:32:8a:ac:
3b:b4:bf:e0:5d:e9:37:41:51:30:74:f3:71:eb:bb:23:8d:12:
d7:d2:50:d8:1c:a9:0c:7e:6c:fb:8f:4a:59:6d:af:c5:2e:80:
d3:35:4a:a6:17:9a:6f:76:03:3b:fa:a9:59:b8:b2:b9:7a:1b:
2a:ee:ed:35:64:b8:32:58:d1:9a:2b:a1:78:e2:2e:07:c7:97:
f9:0d:93:87:6a:92:37:77:f0:cd:4f:a9:a6:ef:7c:a9:20:71:
63:69:0e:e1:6e:f4:cb:7b:04:70:66:73:71:39:09:a1:75:3a:
14:8f:72:c3:ad:ca:c8:2f:ae:2c:f4:2a:95:52:9f:ab:6b:0a:
b9:be:ec:03:e6:e9:b8:df:60:09:e6:5a:d1:ac:e9:27:b8:95:
b1:07:08:a0:2b:92:30:1d:b9:b7:b1:5e:f6:23:17:a5:b8:74:
be:80:b4:14:2a:90:83:1a:28:ba:fb:97:de:10:d7:1f:64:ed:
24:89:c9:4e
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUVlFyLi1/zXBEYoe8s3F/AEodstUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDEyMjYxNjUyMTVaFw0yNTEyMjUxNjU3MTVaMDMxMTAvBgNV
BAMTKDlBNDA2OEJBNDhDOEQ4RUVFQjc4QzA2MkJCQ0VFQzYzRDBEMTNCRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC86/rNmb5pGEuX3UniL7jQdRpI
9j5ZiFdTiwXp41Xq1AA6S1JMJa5/rQkI2QAR/8DPJuu7D+SLvGK5w1wLju4jZYrG
unQQjOlkZ4ttq3S3A07jwVtQG+rqp3yiMirFYlfFlrQi0GE7o6l5X2VMDh4SvVG0
iIgCsIdXP9gM/++0OfOp+gZ50JKwH9lypIqbsQWESTpD4JD88qZVh3Ivk++GGbeQ
F+7fYb8UZOZomNqMnBWnimRj/HL254D/rz+f0bd5bTKASAJDEyHfootqLTlWlVfg
lHWL2F3r8LthAo+d465oohNqfEnPO3+oLZiDKdOIyMEobbsk0cj/b52GlJ/tAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUmkBoukjI2O7reMBiu87sY9DRO+UwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzNzM4MmUzMjMwMzgyZTMx
MzgzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNDMzMzYzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALLQujANBgkqhkiG9w0BAQsFAAOCAQEAC9yfLq/ecURq87lD6inaOCKaljy/
bqgvB8OLIxQAGdI+T8/hFiU06amsSK9g14MRMnQxzIIFw2vHICkoLgtNY2nDMYRn
MoqsO7S/4F3pN0FRMHTzceu7I40S19JQ2BypDH5s+49KWW2vxS6A0zVKpheab3YD
O/qpWbiyuXobKu7tNWS4MljRmiuheOIuB8eX+Q2Th2qSN3fwzU+ppu98qSBxY2kO
4W70y3sEcGZzcTkJoXU6FI9yw63KyC+uLPQqlVKfq2sKub7sA+bpuN9gCeZa0azp
J7iVsQcIoCuSMB25t7Fe9iMXpbh0voC0FCqQgxoouvuX3hDXH2TtJInJTg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:15:36 2025 by rpki-client