Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234322e302f32342d3234203d3e20383334.roa
File: 3138352e3231332e3234322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: rEr4ZM/U9jQQTLeZOsiUhR1+b2fC7G8vZrGO/OFsUeM=
Subject key identifier: 4B:44:C2:09:9A:B1:F7:37:71:B3:DC:8E:9D:D4:78:B3:55:B5:D7:11
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 3A34444F4CE953C5479A70AB7C6858061A61B6CC
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234322e302f32342d3234203d3e20383334.roa
Signing time: Mon 10 Feb 2025 00:02:01 +0000
ROA not before: Sun 09 Feb 2025 23:57:01 +0000
ROA not after: Mon 09 Feb 2026 00:02:01 +0000
asID: 834
IP address blocks: 185.213.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 01:53:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:34:44:4f:4c:e9:53:c5:47:9a:70:ab:7c:68:58:06:1a:61:b6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Feb 9 23:57:01 2025 GMT
Not After : Feb 9 00:02:01 2026 GMT
Subject: CN=4B44C2099AB1F73771B3DC8E9DD478B355B5D711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:78:ce:89:09:b8:3d:95:92:d4:56:cc:6c:
37:6c:05:20:69:fc:e8:e9:49:f5:18:1d:7c:d7:f7:
18:3d:bb:73:4c:f2:2b:88:50:13:4d:78:4b:92:05:
c6:30:a1:8f:ec:78:4e:c0:10:33:dd:ac:c3:61:fb:
04:fa:24:2e:9c:65:0c:c9:95:6c:7a:1a:71:61:52:
bb:dc:df:9b:61:ea:c1:43:66:23:9f:13:10:0a:4f:
ff:27:b1:56:15:f9:26:d5:a6:f4:93:4e:fa:1c:a0:
21:7f:91:42:0f:a9:5a:85:56:2c:69:c4:4f:33:cc:
31:16:a2:d5:a8:60:f0:5f:00:59:85:2d:4c:c5:71:
ea:34:6b:47:55:6b:92:a6:ff:ec:1a:2f:7c:5f:c6:
26:15:ad:cf:98:1f:d7:b6:07:50:26:bc:9e:7d:c3:
61:f0:b4:7b:15:1a:2e:5e:96:e2:d1:eb:ee:3c:cb:
db:a2:2f:2a:62:0a:ef:0b:d2:0e:32:2c:b2:a3:f8:
56:f6:58:f8:7e:1c:75:8d:85:04:4b:88:d9:18:63:
41:40:38:4e:16:89:a9:30:9a:68:94:da:39:f4:0c:
78:30:82:bf:dd:10:71:c9:5b:d1:49:a1:81:79:55:
fc:32:ae:d0:2f:44:4f:6e:9d:ea:4c:91:bc:fd:23:
b3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:44:C2:09:9A:B1:F7:37:71:B3:DC:8E:9D:D4:78:B3:55:B5:D7:11
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.242.0/24
Signature Algorithm: sha256WithRSAEncryption
25:18:22:c2:3a:d2:e8:2e:99:bc:3d:3a:68:d9:6b:4a:22:79:
2e:4c:bb:7a:d0:ac:20:f5:53:ed:fd:9b:b1:50:0b:eb:c7:37:
30:83:30:b6:4e:b2:42:df:c1:ab:11:96:39:5b:80:1b:2e:0f:
e1:e9:af:60:97:b9:86:84:79:98:6d:27:74:c4:92:4c:fa:37:
47:ba:09:ca:f6:bb:a2:5f:90:9b:13:c4:cc:81:0d:c0:2c:97:
63:23:d4:02:a4:96:63:11:7c:42:31:61:cc:ad:4f:85:63:ef:
7e:b2:9e:91:5a:ab:ea:09:77:5b:19:a6:d7:32:7e:e9:7d:56:
35:4d:9c:c9:3c:61:b0:4b:5e:38:71:73:4c:52:5e:a5:4f:07:
d7:e6:87:a3:53:0b:78:29:be:41:f3:f2:b3:ef:84:45:0e:6b:
23:0b:07:d7:a9:a6:10:99:df:49:64:58:dc:38:e3:48:6e:2e:
70:b1:1f:7a:ea:8b:fa:67:79:2e:f7:42:8a:f1:63:d2:3e:94:
98:82:dd:ed:12:21:4e:48:ad:d2:56:12:86:9c:a7:db:c4:c0:
08:8c:fc:1b:23:06:03:a2:87:5d:0c:85:05:77:75:16:c8:fe:
4c:31:6b:c8:d9:9a:84:45:f0:8f:d7:1c:c2:68:44:1e:7d:e2:
d2:a3:ab:76
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUOjRET0zpU8VHmnCrfGhYBhphtswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm
Yjc3YjRhOTAeFw0yNTAyMDkyMzU3MDFaFw0yNjAyMDkwMDAyMDFaMDMxMTAvBgNV
BAMTKDRCNDRDMjA5OUFCMUY3Mzc3MUIzREM4RTlERDQ3OEIzNTVCNUQ3MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3FnjOiQm4PZWS1FbMbDdsBSBp
/OjpSfUYHXzX9xg9u3NM8iuIUBNNeEuSBcYwoY/seE7AEDPdrMNh+wT6JC6cZQzJ
lWx6GnFhUrvc35th6sFDZiOfExAKT/8nsVYV+SbVpvSTTvocoCF/kUIPqVqFVixp
xE8zzDEWotWoYPBfAFmFLUzFceo0a0dVa5Km/+waL3xfxiYVrc+YH9e2B1AmvJ59
w2HwtHsVGi5eluLR6+48y9uiLypiCu8L0g4yLLKj+Fb2WPh+HHWNhQRLiNkYY0FA
OE4WiakwmmiU2jn0DHgwgr/dEHHJW9FJoYF5VfwyrtAvRE9unepMkbz9I7O/AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUS0TCCZqx9zdxs9yOndR4s1W11xEwHwYDVR0j
BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy
Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190
M3RLay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzVkMThlODIt
NGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQyMjc5LzAvMzEzODM1MmUzMjMxMzMyZTMy
MzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnV
8jANBgkqhkiG9w0BAQsFAAOCAQEAJRgiwjrS6C6ZvD06aNlrSiJ5Lky7etCsIPVT
7f2bsVAL68c3MIMwtk6yQt/BqxGWOVuAGy4P4emvYJe5hoR5mG0ndMSSTPo3R7oJ
yva7ol+QmxPEzIENwCyXYyPUAqSWYxF8QjFhzK1PhWPvfrKekVqr6gl3Wxmm1zJ+
6X1WNU2cyTxhsEteOHFzTFJepU8H1+aHo1MLeCm+QfPys++ERQ5rIwsH16mmEJnf
SWRY3DjjSG4ucLEfeuqL+md5LvdCivFj0j6UmILd7RIhTkit0lYShpyn28TACIz8
GyMGA6KHXQyFBXd1Fsj+TDFryNmahEXwj9ccwmhEHn3i0qOrdg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:19 2025 by rpki-client