Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130352e302f32342d3234203d3e20383334.roa
File: 3138352e3234302e3130352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: WKuhQxb50RuTTEuBWeYGAYYd7NilL0M8kPt3HTt8sV8=
Subject key identifier: E7:0D:32:CD:B2:07:36:8A:DD:54:80:52:B6:C0:71:CA:D9:B5:BD:5D
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 4F0C0E69C316612226D7194D923E12C9137B2DD9
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130352e302f32342d3234203d3e20383334.roa
Signing time: Tue 27 May 2025 00:04:43 +0000
ROA not before: Mon 26 May 2025 23:59:43 +0000
ROA not after: Tue 26 May 2026 00:04:43 +0000
asID: 834
IP address blocks: 185.240.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 13:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:0c:0e:69:c3:16:61:22:26:d7:19:4d:92:3e:12:c9:13:7b:2d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: May 26 23:59:43 2025 GMT
Not After : May 26 00:04:43 2026 GMT
Subject: CN=E70D32CDB207368ADD548052B6C071CAD9B5BD5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e7:6c:d8:0a:fc:bd:b5:cf:c7:64:14:96:ac:
df:db:6c:1d:6c:8d:98:13:53:87:b8:0b:d4:9c:a5:
4f:52:2b:44:62:21:c4:4c:7b:2b:76:0e:d3:15:e1:
07:f4:f7:8e:8c:35:17:cb:85:8c:1f:54:87:fa:56:
63:ac:84:10:b7:b6:cb:f0:d9:ab:7b:da:b8:a6:0f:
00:f1:a9:2a:be:59:e2:61:b2:c8:9a:8b:02:b2:ad:
cc:95:3f:95:05:41:37:26:dd:cc:05:28:89:4d:a7:
55:ff:75:73:7e:35:db:b5:96:b1:50:cd:23:74:bf:
59:67:fe:b8:f5:28:80:09:f6:e1:46:bc:a4:64:e4:
91:57:f8:50:7c:5a:bb:82:b4:f2:f7:01:12:89:78:
bf:6b:8c:83:3d:7c:c6:c7:86:9a:c8:c6:ad:d6:9d:
be:dd:a3:59:6d:4d:b5:73:d0:ed:e4:e5:f4:bf:b2:
18:5e:a4:46:23:64:ec:ca:56:3e:29:0b:bf:d3:ca:
09:74:d0:c7:36:6d:08:56:07:7d:47:fe:f9:1a:7a:
b1:61:e9:f4:f4:be:60:1d:67:63:bc:d9:80:77:d8:
a8:fc:5b:a8:ac:19:ff:e6:f4:99:d2:b5:6c:6c:6b:
62:0c:d3:3c:81:29:25:15:29:ba:93:0b:05:e0:2a:
45:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0D:32:CD:B2:07:36:8A:DD:54:80:52:B6:C0:71:CA:D9:B5:BD:5D
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.105.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:73:23:17:9e:1d:58:97:96:4b:a7:87:4b:06:af:64:ee:37:
20:c9:d3:95:06:14:b5:02:53:2a:bb:63:7b:1a:6b:47:f6:6d:
4d:69:d8:73:4d:29:54:95:37:8b:29:69:11:ad:7e:b0:7c:7e:
52:a5:6f:ff:d0:da:f7:da:1c:ec:2e:74:eb:80:2a:5e:cb:ed:
06:f1:21:ea:4f:84:fa:62:83:e8:82:c9:74:d1:d6:12:36:e4:
c9:46:c4:31:98:2b:43:ee:8d:f5:d4:27:d5:1e:df:70:10:46:
d5:80:7e:87:89:e1:49:96:95:ac:22:9b:1b:5c:47:a0:54:37:
72:de:a8:07:96:78:ac:05:e3:6a:bd:34:23:1e:c4:48:08:d9:
89:92:f2:ea:ca:96:a0:fa:fa:ac:ab:42:48:25:95:6c:5a:ba:
6e:6d:27:27:77:08:6c:8e:ca:59:dd:10:fb:f6:d1:6d:1e:02:
90:e1:12:03:cb:54:48:6b:36:9f:fa:ba:a4:71:b5:ae:da:73:
15:c8:be:2e:8d:41:40:5d:e9:88:d3:a1:4d:21:84:53:72:9c:
ea:30:49:1a:15:be:83:1f:fb:f7:de:50:d8:38:ce:fb:10:7b:
7f:d2:06:28:f6:0c:51:fc:67:f2:5e:01:ff:c1:98:dc:41:62:
27:9c:25:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:28:18 2025 by rpki-client