Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138362e302f32342d3234203d3e20383334.roa
File: 3137382e3230382e3138362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: XANB0QgtxD/iirwNYknV39rUjfJH19X0UECEis+j5qE=
Subject key identifier: 07:B8:49:4B:7E:92:83:49:92:9E:BF:5B:10:B2:DF:6C:22:49:27:BE
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 59058234E1E9FCFCB0971AAD5CCA0DB173CD35FA
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138362e302f32342d3234203d3e20383334.roa
Signing time: Sun 26 Jan 2025 00:01:55 +0000
ROA not before: Sat 25 Jan 2025 23:56:55 +0000
ROA not after: Sun 25 Jan 2026 00:01:55 +0000
asID: 834
IP address blocks: 178.208.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Jan 2025 11:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:05:82:34:e1:e9:fc:fc:b0:97:1a:ad:5c:ca:0d:b1:73:cd:35:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jan 25 23:56:55 2025 GMT
Not After : Jan 25 00:01:55 2026 GMT
Subject: CN=07B8494B7E928349929EBF5B10B2DF6C224927BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:83:79:87:9d:02:75:13:47:42:b8:2a:c4:
02:dc:8b:fd:83:28:a1:b7:09:a2:73:94:22:35:30:
09:5a:13:0f:bc:e6:37:23:17:eb:19:74:d7:d5:e0:
ed:b6:08:e1:6a:80:6b:16:50:f1:0d:ea:03:15:22:
3d:23:44:26:9e:e9:59:34:65:64:42:0a:c5:23:23:
cd:9c:ad:b9:40:eb:09:99:5a:d0:58:fe:07:d8:d1:
18:38:7f:88:78:ca:e8:26:18:cc:0f:28:aa:f0:f3:
27:8e:a4:4d:ae:f3:83:6f:a5:b0:a5:3d:58:8c:13:
06:c7:9f:87:1a:11:a9:97:fb:61:40:c8:63:b9:69:
53:5e:d0:df:be:e1:a5:67:92:d9:b0:41:5a:bf:ac:
c4:93:d9:5d:42:4c:7b:01:76:35:6c:d8:61:a5:72:
8a:d0:1d:ae:b5:92:5e:67:d5:97:bd:d1:1c:72:48:
6e:95:9f:45:f6:20:cd:08:2a:cc:4f:a4:b0:1b:68:
c3:fa:83:ee:4e:24:a7:29:cd:ce:d4:20:0e:18:fb:
70:e0:71:31:35:f8:1e:37:74:8a:db:56:50:60:16:
b5:16:87:ac:18:56:f6:2b:cc:10:9e:cf:60:3d:aa:
fe:49:24:2f:dd:d0:28:23:7c:e0:4c:3d:50:81:e9:
9f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B8:49:4B:7E:92:83:49:92:9E:BF:5B:10:B2:DF:6C:22:49:27:BE
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.186.0/24
Signature Algorithm: sha256WithRSAEncryption
79:d4:ae:ee:3b:60:b3:28:dc:00:30:67:8d:73:38:d7:58:b1:
39:53:0c:87:3f:32:84:ac:ec:51:f3:3e:c9:61:61:59:12:60:
0c:22:2a:4f:fc:dd:9a:d9:bb:77:14:67:1c:88:74:a6:41:c1:
3a:f4:c6:90:14:78:18:95:e8:02:0a:a5:4d:c2:df:67:6d:af:
a8:69:bd:e3:7c:58:3a:b6:ca:ff:a7:4a:fc:92:55:40:32:75:
d1:3c:13:5f:22:ab:e7:66:36:a6:2f:93:e5:80:d1:c4:d5:32:
c3:49:d8:c9:9c:c4:c0:07:92:d3:09:f6:71:a6:ea:6c:6c:27:
ff:c3:90:a3:3e:1a:63:c4:6f:31:01:5e:1d:32:f3:72:ea:21:
a4:95:99:2d:46:31:75:48:45:5f:ed:64:01:22:80:f8:96:aa:
5e:a3:7e:fd:ce:fe:6b:cc:3a:e0:ee:14:06:0c:b6:9d:03:6d:
b0:bd:a6:02:c7:8c:5d:5d:7c:6e:76:25:34:4c:43:30:dd:00:
b5:45:3f:2b:5f:70:13:f3:cd:3b:13:21:8c:5a:ab:6d:f6:73:
b2:ee:d6:9b:61:99:6e:5d:12:6a:11:b2:a5:e5:28:d5:5d:58:
bb:2a:f1:2b:99:6d:7d:94:c7:89:44:a6:8c:f3:94:d8:be:b9:
58:1a:e3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:06:57 2025 by rpki-client