Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/3139322e3130392e31312e302f32342d3234203d3e20323135323837.roa
File: 3139322e3130392e31312e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: /17sOhcQUfatIAmKLJ57V9eFHDkoyHAV9+7fJJKV9w0=
Subject key identifier: 58:58:C0:E4:DF:37:0C:51:F9:95:88:21:BF:44:7C:CA:1F:3A:0D:6B
Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Certificate serial: 126ECBF592B4EB073809B0CCCFD187C94360C623
Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/3139322e3130392e31312e302f32342d3234203d3e20323135323837.roa
Signing time: Sat 01 Feb 2025 14:54:52 +0000
ROA not before: Sat 01 Feb 2025 14:49:52 +0000
ROA not after: Sat 31 Jan 2026 14:54:52 +0000
asID: 215287
IP address blocks: 192.109.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Mar 2025 00:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:6e:cb:f5:92:b4:eb:07:38:09:b0:cc:cf:d1:87:c9:43:60:c6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Validity
Not Before: Feb 1 14:49:52 2025 GMT
Not After : Jan 31 14:54:52 2026 GMT
Subject: CN=5858C0E4DF370C51F9958821BF447CCA1F3A0D6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:77:c3:6b:c9:6c:1a:09:0e:a3:94:78:7a:
6c:6d:78:3a:cf:69:21:a8:f7:94:98:28:d6:80:04:
7b:c9:7b:18:3b:b2:41:5a:4b:66:01:f4:19:9e:51:
b4:2c:3b:83:5f:c5:8e:86:67:ca:05:fe:3f:b0:c3:
96:08:0c:b0:c2:68:80:e0:e1:f9:c0:1c:9e:27:93:
2e:0d:9e:50:c3:c3:87:a9:04:2b:f1:ba:7a:70:5c:
a3:07:bb:fe:5d:71:a9:2b:e6:19:47:38:6c:1f:81:
4e:e6:78:bf:31:c7:b8:7d:d4:35:f4:d6:25:70:ea:
7c:3c:5e:62:b6:74:e2:63:e7:61:57:4c:ab:51:87:
09:77:0c:6d:27:05:41:b6:bd:9f:f7:38:d4:67:af:
6c:15:93:d8:6e:15:c1:09:0e:51:aa:39:c3:23:0a:
08:4e:45:22:d4:3a:7c:48:47:d9:2c:c8:da:49:d0:
98:8c:e3:f6:9c:ea:a7:2d:51:ab:76:ea:0b:41:ec:
10:d5:54:cd:23:1e:16:ed:68:96:5f:d7:cf:f1:a2:
2d:29:d0:24:f1:c1:95:b1:0d:1e:2c:34:77:f0:12:
ea:71:fe:5c:85:bd:ca:a7:46:e6:25:2b:0c:58:a5:
64:d3:98:cb:66:9b:58:d0:bb:aa:c0:50:8b:12:31:
a9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:58:C0:E4:DF:37:0C:51:F9:95:88:21:BF:44:7C:CA:1F:3A:0D:6B
X509v3 Authority Key Identifier:
keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/3139322e3130392e31312e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.11.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:17:ec:b4:c1:d8:2a:d9:2f:98:53:c6:cf:f2:d1:b8:51:b2:
27:f1:e3:18:99:9e:58:3d:c2:62:e1:93:84:74:32:3d:b9:4f:
17:74:f4:d5:3d:c9:ab:57:87:80:c8:a4:fd:31:5d:8f:61:6a:
17:96:53:5c:cb:65:88:09:dc:1e:ac:66:75:b8:4a:bd:f9:42:
de:ea:22:d0:14:50:da:7e:be:fa:9c:99:2f:3e:d3:3a:b3:e4:
e4:33:46:a8:65:5d:6f:21:e0:79:a3:f4:5d:5e:47:f3:b6:e8:
aa:2c:fa:f3:67:aa:01:b0:28:ee:fd:55:21:16:3a:f6:1e:6a:
1e:6f:78:f3:21:be:3c:70:c9:49:bc:ff:d7:55:89:5b:11:c8:
06:1c:21:2e:0a:4b:2c:43:7d:d0:21:ac:a2:35:75:6b:32:d4:
f8:3d:1d:16:3e:30:6b:75:82:e0:98:62:49:b6:2f:de:81:dc:
9a:90:ac:80:2f:bf:f3:c3:19:e7:cf:2d:2b:3b:39:ac:0e:61:
1a:03:9d:69:7f:6d:92:17:9b:7d:fc:80:f7:a3:ce:6f:60:f2:
29:a9:d1:7e:be:87:ab:f1:9e:40:bb:fa:15:24:24:3e:39:e3:
ff:df:0c:fc:de:73:ab:d1:2d:3d:14:20:2d:2f:8c:b7:2e:ec:
40:34:04:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:20:33 2025 by rpki-client