Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135362e302f32342d3234203d3e203231383539.roa
File: 3138352e35382e3135362e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: guXQOeKIiVXukub4NyzZGFnHKI6TZQVrOQRwwiYQxck=
Subject key identifier: F4:9B:7F:BE:CF:55:B2:66:14:8E:DD:D2:B7:E7:77:68:95:E0:B5:75
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 1561B85BCD1A88FF78CEC6E5674DFFC6C3D7C7AD
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135362e302f32342d3234203d3e203231383539.roa
Signing time: Wed 05 Mar 2025 09:43:26 +0000
ROA not before: Wed 05 Mar 2025 09:38:26 +0000
ROA not after: Wed 04 Mar 2026 09:43:26 +0000
asID: 21859
IP address blocks: 185.58.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Apr 2025 00:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:61:b8:5b:cd:1a:88:ff:78:ce:c6:e5:67:4d:ff:c6:c3:d7:c7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Mar 5 09:38:26 2025 GMT
Not After : Mar 4 09:43:26 2026 GMT
Subject: CN=F49B7FBECF55B266148EDDD2B7E7776895E0B575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:74:41:cb:a9:2a:ea:df:d1:12:a9:0c:e1:
20:2b:bf:94:a5:e3:b2:bc:bf:53:9e:02:3d:b4:7a:
9c:4e:63:55:c3:6e:90:c3:8e:54:e5:0e:5e:46:48:
df:92:91:14:cb:c0:b4:54:08:34:f2:be:6a:c2:96:
a8:07:8c:d9:ce:0a:63:be:f9:47:64:5c:e3:28:e1:
e1:60:ed:e9:5f:89:c3:e6:4c:fa:b6:18:56:a9:15:
b3:92:4e:74:17:b2:4c:bc:c5:5c:63:9f:a0:c3:5f:
10:dc:c5:ee:d1:b0:8d:8e:dc:fb:0f:87:18:55:53:
c1:95:ca:87:f6:a3:51:c8:3b:2c:4c:53:82:d7:9e:
6a:08:33:67:da:a6:8b:f7:a2:dc:88:88:7f:8b:76:
cf:7e:98:e7:5b:48:db:a0:cc:46:df:27:a4:cd:8d:
e9:a9:fd:8d:20:cf:b5:38:02:46:83:e5:ef:9e:45:
da:83:40:4d:d0:45:7d:7b:6c:83:34:3a:88:6b:4d:
e1:68:2a:e6:27:0c:84:f6:39:ff:e2:47:df:de:0c:
50:84:ee:27:ec:af:c1:76:f4:08:64:bc:e5:ba:9e:
d6:9b:ca:62:eb:9b:93:28:e1:53:fe:e7:59:5a:a3:
8e:64:8f:2f:1d:4d:21:26:c0:10:02:20:61:b7:9a:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9B:7F:BE:CF:55:B2:66:14:8E:DD:D2:B7:E7:77:68:95:E0:B5:75
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135362e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.156.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:87:69:2f:48:c2:c5:cf:63:d1:7f:9e:7f:e1:56:4c:10:54:
b0:3b:72:3e:9c:f1:4c:7e:a4:e1:7b:09:a0:44:fe:3a:82:ad:
ae:92:76:20:5f:d0:bd:80:03:1b:f0:ea:37:64:af:05:f3:71:
25:69:ae:95:7e:08:3b:47:56:06:d1:fe:23:87:0d:83:18:11:
fb:ce:fe:ad:94:e9:33:78:9b:53:83:93:a8:c0:97:a6:3c:bb:
cb:b2:5e:7f:ce:9a:6d:97:ac:27:16:5a:fb:88:f3:0d:ad:b0:
c8:94:38:eb:64:8b:95:e9:28:3b:c7:5c:b6:05:1b:10:24:9c:
c7:68:e5:31:3b:a5:2c:49:7e:7c:c2:c4:34:9f:b6:d1:af:27:
79:66:5f:ea:6e:72:f7:03:fc:cf:67:9e:8f:8d:ac:c5:15:61:
19:f1:5f:49:fb:e7:7b:e7:1a:50:b0:76:80:ef:63:36:07:0f:
e8:68:2d:7e:44:b6:22:fc:6a:4b:6e:0c:57:d0:d5:8d:aa:d8:
ba:28:ac:e9:c5:29:cd:38:b6:53:1c:f0:07:7b:08:89:0d:37:
09:79:39:b5:bc:3e:50:3e:07:21:6b:3f:8a:67:2d:f2:04:d3:
6e:56:f1:aa:a7:4b:4b:5d:62:08:76:a5:42:5c:c6:70:e3:6d:
50:1b:62:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:44:03 2025 by rpki-client