Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3138352e3138312e302e302f32342d3234203d3e20383334.roa
File: 3138352e3138312e302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: hMNv0eO3Wi5LJjl98hfcDWz1nspwyMhKXh13PtEc+q4=
Subject key identifier: 48:8C:74:6D:34:86:38:5C:74:B0:12:C1:62:51:62:41:C6:09:00:D4
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 530F1C429D1FF8EA7479FC65BE6BE91BBB21156F
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3138352e3138312e302e302f32342d3234203d3e20383334.roa
Signing time: Thu 06 Mar 2025 00:02:34 +0000
ROA not before: Wed 05 Mar 2025 23:57:34 +0000
ROA not after: Thu 05 Mar 2026 00:02:34 +0000
asID: 834
IP address blocks: 185.181.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 12:53:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:0f:1c:42:9d:1f:f8:ea:74:79:fc:65:be:6b:e9:1b:bb:21:15:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Mar 5 23:57:34 2025 GMT
Not After : Mar 5 00:02:34 2026 GMT
Subject: CN=488C746D3486385C74B012C162516241C60900D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ad:c4:82:cb:46:5d:19:8c:06:a2:af:8b:bf:
09:38:1a:77:61:f6:8a:52:41:36:20:48:c2:98:83:
27:e9:e5:93:c3:14:b2:85:03:ab:ef:ad:92:e8:fb:
ae:d9:00:6d:03:5d:69:43:6b:2e:0b:76:8a:c6:7b:
50:99:e0:17:ed:c8:4c:c7:b3:0c:f1:2e:8e:45:80:
61:80:fe:65:69:85:04:f2:a5:ff:d3:f3:3f:bd:a6:
25:27:f5:30:24:41:f9:7b:33:be:ea:59:84:0b:f2:
12:53:ec:fd:37:62:e4:63:e9:bc:53:72:f3:63:23:
e5:ab:63:95:7b:ab:82:00:4b:e7:67:98:f1:94:06:
22:f4:df:07:a0:f7:db:10:f2:d8:64:0f:e0:02:e6:
fd:ed:fe:c6:cc:ef:00:09:23:8a:42:57:bc:09:35:
1a:03:bf:36:41:16:92:75:26:59:a3:b5:f2:d0:5d:
b1:90:e0:38:0e:17:9b:74:be:51:0c:9b:49:e9:30:
c1:45:eb:db:e7:f3:38:a7:72:86:0f:42:af:66:5e:
29:45:74:46:da:5e:a7:e0:f4:40:73:4d:81:b2:e3:
8a:f8:2a:a1:81:6a:4c:53:47:23:35:df:71:f5:92:
d1:81:e0:f3:52:8e:27:9e:ff:16:03:70:91:f7:a8:
3b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8C:74:6D:34:86:38:5C:74:B0:12:C1:62:51:62:41:C6:09:00:D4
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3138352e3138312e302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.0.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:11:48:6e:77:b3:83:75:1d:13:b7:10:96:f8:4d:1c:c1:3c:
37:7c:8a:2b:bb:73:14:17:c5:f5:e9:b7:46:56:72:0a:e7:07:
06:54:1e:35:5c:c2:f5:1b:9d:ef:ab:ac:50:27:f1:65:38:83:
2d:f2:6e:b2:68:af:e4:e4:7b:05:c2:d1:37:91:86:3c:7a:63:
1c:5f:32:1e:a2:ba:db:5c:29:81:24:82:04:87:30:94:f5:18:
6a:94:b2:41:6d:b9:d5:24:ce:70:d2:81:00:65:89:6b:68:a7:
c6:6c:42:ec:ed:fb:a7:e8:0a:16:f8:67:45:e3:28:da:cd:27:
b1:f5:20:2a:3b:18:b9:3c:af:c1:ac:03:43:d2:9e:63:6a:67:
b1:14:8a:1d:0b:39:40:1c:82:1b:c0:ff:43:a6:8d:26:6b:bb:
0f:37:6d:b7:d1:dc:4d:44:0f:97:e0:da:bf:b2:58:de:26:90:
f0:36:fe:52:51:a0:ad:1c:54:0c:18:a8:da:b1:5d:5b:1b:f1:
94:f5:97:0d:f2:6e:b8:fe:ef:0e:85:5d:f5:7f:95:94:0b:e7:
93:56:cd:73:3f:44:03:d2:cf:6f:ab:c2:9b:bf:61:cd:94:0b:
b6:60:51:21:93:62:ac:b5:3d:4c:13:40:7c:32:b2:bc:7f:08:
48:a0:ac:21
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUUw8cQp0f+Op0efxlvmvpG7shFW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy
NjllYjNkNjAeFw0yNTAzMDUyMzU3MzRaFw0yNjAzMDUwMDAyMzRaMDMxMTAvBgNV
BAMTKDQ4OEM3NDZEMzQ4NjM4NUM3NEIwMTJDMTYyNTE2MjQxQzYwOTAwRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJrcSCy0ZdGYwGoq+Lvwk4Gndh
9opSQTYgSMKYgyfp5ZPDFLKFA6vvrZLo+67ZAG0DXWlDay4LdorGe1CZ4BftyEzH
swzxLo5FgGGA/mVphQTypf/T8z+9piUn9TAkQfl7M77qWYQL8hJT7P03YuRj6bxT
cvNjI+WrY5V7q4IAS+dnmPGUBiL03weg99sQ8thkD+AC5v3t/sbM7wAJI4pCV7wJ
NRoDvzZBFpJ1JlmjtfLQXbGQ4DgOF5t0vlEMm0npMMFF69vn8zincoYPQq9mXilF
dEbaXqfg9EBzTYGy44r4KqGBakxTRyM133H1ktGB4PNSjiee/xYDcJH3qDtxAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUSIx0bTSGOFx0sBLBYlFiQcYJANQwHwYDVR0j
BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0
MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh
ZXM5WS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUt
NTExMC00MjU3LTk0ZWYtNGQyYjQzODg0MDQwLzAvMzEzODM1MmUzMTM4MzEyZTMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubUAMA0G
CSqGSIb3DQEBCwUAA4IBAQDJEUhud7ODdR0TtxCW+E0cwTw3fIoru3MUF8X16bdG
VnIK5wcGVB41XML1G53vq6xQJ/FlOIMt8m6yaK/k5HsFwtE3kYY8emMcXzIeorrb
XCmBJIIEhzCU9RhqlLJBbbnVJM5w0oEAZYlraKfGbELs7fun6AoW+GdF4yjazSex
9SAqOxi5PK/BrAND0p5jamexFIodCzlAHIIbwP9Dpo0ma7sPN2230dxNRA+X4Nq/
sljeJpDwNv5SUaCtHFQMGKjasV1bG/GU9ZcN8m64/u8OhV31f5WUC+eTVs1zP0QD
0s9vq8Kbv2HNlAu2YFEhk2KstT1ME0B8MrK8fwhIoKwh
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:38 2025 by rpki-client