Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3138352e3138312e302e302f32342d3234203d3e203231383539.roa
File: 3138352e3138312e302e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: 18Ped9TioGk7RakeCy/XOR3GCYKanOQad8/b1EJudk8=
Subject key identifier: BF:B1:62:C0:C0:11:10:AB:D2:8F:C4:6B:25:62:13:B5:2C:85:60:51
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 707FAC01C28C18D22A875F798BBED913B968EEF6
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3138352e3138312e302e302f32342d3234203d3e203231383539.roa
Signing time: Mon 06 Jan 2025 09:20:51 +0000
ROA not before: Mon 06 Jan 2025 09:15:51 +0000
ROA not after: Mon 05 Jan 2026 09:20:51 +0000
asID: 21859
IP address blocks: 185.181.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Mar 2025 00:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:7f:ac:01:c2:8c:18:d2:2a:87:5f:79:8b:be:d9:13:b9:68:ee:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Jan 6 09:15:51 2025 GMT
Not After : Jan 5 09:20:51 2026 GMT
Subject: CN=BFB162C0C01110ABD28FC46B256213B52C856051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:5a:bf:ae:66:aa:37:93:a2:5a:83:31:76:
53:64:bb:c5:ad:59:78:5b:ae:09:89:09:00:95:7d:
10:02:8a:b4:ad:c0:e1:ca:d0:b2:fb:af:f1:c6:e0:
54:6c:7f:04:14:0f:b3:53:9a:3c:d9:ae:61:b4:1e:
10:18:f7:04:88:4f:90:d4:6f:55:b1:3f:f4:c0:9e:
50:a9:ab:be:1c:15:ee:bd:f6:5a:31:3b:a5:60:cd:
02:f5:f5:a9:88:9d:24:29:19:dd:c8:30:68:ee:49:
d9:a7:54:ff:4b:4f:25:b8:1e:88:07:b9:cd:cf:a5:
f1:fa:0e:4c:7f:2f:66:2e:89:57:fe:e0:62:0a:f5:
5b:1d:8b:a8:a1:74:58:b7:d4:39:0b:a5:45:a5:3f:
5b:47:55:7a:58:62:b8:c4:68:da:dc:ec:f2:78:4d:
ec:d5:e3:6c:d5:3f:b8:f1:ea:da:d1:9d:94:a1:5f:
55:76:c8:c5:e6:4c:c2:4b:49:e8:ef:30:ac:3c:f8:
bf:44:48:f8:34:f9:f6:7d:40:98:c2:ef:f5:ec:31:
5e:c9:78:e5:5d:6e:f2:b5:82:f1:d0:97:aa:b8:d5:
1f:61:5e:c0:4f:83:4a:36:49:76:40:6c:a5:eb:92:
95:f0:0f:c2:0b:b4:c1:f7:55:5a:c1:11:7e:b3:8b:
b1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B1:62:C0:C0:11:10:AB:D2:8F:C4:6B:25:62:13:B5:2C:85:60:51
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3138352e3138312e302e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.0.0/24
Signature Algorithm: sha256WithRSAEncryption
68:3e:a0:1e:17:60:71:00:79:6c:10:6c:e6:d6:43:e3:1d:22:
32:11:50:aa:54:a6:ce:ee:64:f8:9e:0a:71:80:b8:0e:ff:14:
df:ae:b9:f2:9d:80:21:e9:72:9c:ff:22:31:54:6f:c9:9b:dd:
a8:d8:0d:ec:63:29:72:8b:b7:b2:70:0c:24:62:69:4b:0b:23:
e3:05:af:92:07:9f:68:cd:06:17:f4:3b:37:fd:82:8e:92:a1:
c6:de:19:3f:53:0e:23:d8:e3:65:90:9a:09:ee:2d:61:ba:9f:
d3:ff:cb:d0:34:1f:e5:a5:63:4e:c8:27:7d:50:49:32:c6:9b:
25:76:72:f8:a4:1c:e0:85:ce:d1:2e:ca:6e:b5:35:1d:5f:ef:
fd:81:26:32:c6:fe:86:41:26:4d:d8:4c:4d:64:bf:2e:bc:3e:
3b:5b:f8:6a:ce:ba:f7:37:11:14:9b:4b:f4:0f:c8:d4:2a:4b:
b1:76:f7:e5:d7:9c:c9:97:60:7b:31:4c:60:2e:03:43:a3:26:
29:46:23:ca:a1:ab:e1:ff:bd:02:32:2f:59:a3:df:a4:fb:6e:
f1:bc:79:8e:57:09:46:52:68:ea:0d:5d:81:cf:5a:7a:a6:ab:
7e:79:64:5f:97:18:a7:fd:0d:19:01:05:65:69:d1:e1:04:38:
91:9f:45:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:24:56 2025 by rpki-client