Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138382e302f32332d3234203d3e20383334.roa
File: 3137382e3230382e3138382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 5nCdsMznA9U2UrgrY+wbcIP4mnubUswUkBvM97g4wDE=
Subject key identifier: 53:DD:0D:2E:07:28:50:04:43:F8:2D:F4:F1:33:66:30:6F:02:81:18
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 0D945E90CA00B66F6072D317A2FA73D448F8021A
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138382e302f32332d3234203d3e20383334.roa
Signing time: Fri 28 Feb 2025 00:02:31 +0000
ROA not before: Thu 27 Feb 2025 23:57:31 +0000
ROA not after: Fri 27 Feb 2026 00:02:31 +0000
asID: 834
IP address blocks: 178.208.188.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 03:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:94:5e:90:ca:00:b6:6f:60:72:d3:17:a2:fa:73:d4:48:f8:02:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Feb 27 23:57:31 2025 GMT
Not After : Feb 27 00:02:31 2026 GMT
Subject: CN=53DD0D2E0728500443F82DF4F13366306F028118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:32:30:ed:de:e6:5b:54:c7:08:66:b7:32:
36:d4:75:4f:26:5b:c1:22:d4:a7:19:b3:63:b6:4e:
1b:54:26:de:1a:be:b7:eb:91:c2:05:66:d9:f7:47:
26:78:f1:05:bd:77:19:38:e1:bc:68:84:e4:76:34:
b5:f8:47:34:af:a2:39:e6:6f:79:cd:3c:9f:df:8e:
06:b0:1e:f7:68:03:31:c5:a7:c6:76:ef:4b:95:93:
8f:04:2a:5f:34:cd:05:29:b3:ec:66:ad:ae:46:62:
ad:d7:39:d5:56:42:ad:c9:66:2f:70:90:0a:b4:3f:
b7:04:4c:f9:c6:77:d7:a2:33:3e:30:43:c6:e2:e5:
9a:4f:00:84:d0:5d:6c:6f:84:a5:1f:a3:d9:21:83:
72:cf:7d:5b:ea:d3:2e:ce:24:49:97:3b:6b:84:57:
60:b8:72:b2:f0:7d:f4:56:ec:62:15:c7:4b:e4:e8:
9a:7c:e6:d1:20:6a:2c:83:5e:36:69:d7:ad:a4:b7:
2d:fd:cf:80:cb:1a:e6:fd:d5:7b:7b:cd:79:aa:e9:
7e:dc:54:af:eb:69:0a:7b:dd:69:4a:07:d6:c0:71:
73:1a:86:df:85:f7:8c:7b:a5:7a:f3:10:63:be:bb:
f1:7a:eb:24:4a:45:4f:ac:ed:57:46:e3:fd:40:ec:
4f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DD:0D:2E:07:28:50:04:43:F8:2D:F4:F1:33:66:30:6F:02:81:18
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138382e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.188.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:18:7f:d2:36:9c:cd:22:67:0c:6e:c8:b2:e8:68:46:92:53:
59:5b:1a:b4:c6:30:d3:fb:22:a2:49:42:28:68:99:41:3d:81:
a5:1e:75:c0:cd:cc:e6:d9:d1:66:b1:ea:1f:70:2a:1e:bb:45:
9a:1b:7d:1b:4f:45:18:95:90:b8:98:e3:18:81:a9:03:77:a6:
8a:0f:04:ec:c1:03:7f:42:ca:f5:63:fd:84:3a:e1:38:28:cb:
a2:42:44:35:6e:e4:ca:a8:20:56:76:c6:8f:e8:0f:64:da:79:
de:6b:2a:0f:f9:29:fe:7d:b1:ca:ab:b3:03:0e:22:01:f0:e1:
3f:31:9a:94:57:86:df:13:c5:3e:58:48:a2:c5:53:c3:69:0b:
05:d9:fe:12:f4:90:be:65:ba:83:93:4a:d0:93:77:5f:38:22:
b7:30:8a:47:17:ab:ef:bb:41:a8:a7:c4:7a:9b:02:ee:2f:fb:
b9:11:71:5d:d1:e0:81:ee:e0:f9:7c:fe:06:d8:e4:e9:70:dc:
d2:7f:ad:4b:e4:53:23:9f:fa:6b:f4:e1:e2:d4:92:58:9f:44:
01:ca:c0:0a:16:70:69:e5:47:35:3b:7a:3f:7b:d8:68:f6:cf:
e1:1c:70:5d:e4:79:a9:f4:e1:40:16:a4:e4:af:4b:b2:e9:86:
87:01:ff:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:22 2025 by rpki-client