Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3132332e3135382e302f32342d3234203d3e20383334.roa
File: 3138352e3132332e3135382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 3lwvvvkPyB3lreg7kUA473hHLKHkBKZAdsdJX/RdyJo=
Subject key identifier: A7:5A:A4:EF:EA:4D:3C:0F:F2:D5:DD:90:75:49:13:C6:16:8C:16:8B
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 51EFA0C662E421EEBA2F5A254F9B0D7DBDCED4FA
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3132332e3135382e302f32342d3234203d3e20383334.roa
Signing time: Fri 23 May 2025 12:37:22 +0000
ROA not before: Fri 23 May 2025 12:32:22 +0000
ROA not after: Fri 22 May 2026 12:37:22 +0000
asID: 834
IP address blocks: 185.123.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 12:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ef:a0:c6:62:e4:21:ee:ba:2f:5a:25:4f:9b:0d:7d:bd:ce:d4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: May 23 12:32:22 2025 GMT
Not After : May 22 12:37:22 2026 GMT
Subject: CN=A75AA4EFEA4D3C0FF2D5DD90754913C6168C168B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1b:56:0d:45:c0:b9:29:60:fc:93:d3:9b:16:
32:90:f8:57:fc:d9:fa:a9:f8:68:90:4e:2c:a5:23:
fd:18:c6:91:fe:21:b8:d3:2f:28:7e:ed:8f:9e:9c:
0c:6d:f4:c6:05:65:4b:b9:2d:21:fd:89:b1:43:6e:
db:c5:13:b5:61:b9:2b:88:18:d9:a3:26:3b:d4:89:
71:33:71:42:1d:ca:1b:59:95:d7:62:9f:5e:ee:13:
ed:d3:f6:cf:79:ec:dc:48:13:7f:50:5b:87:e7:eb:
1c:63:0b:ce:44:3b:56:df:58:41:29:ca:44:60:7c:
cc:f8:86:d3:d8:6b:18:53:07:d3:8a:96:25:1d:02:
67:f4:59:59:6f:0d:a5:6c:a5:d6:7b:43:cd:f9:84:
a4:b1:7d:e2:e0:83:23:1c:13:c6:da:a7:6b:cc:ce:
ed:5e:a9:6b:8f:73:96:8c:8b:09:4e:97:f0:56:c3:
26:bd:64:03:9c:81:7b:70:6f:01:2d:d6:2e:2a:38:
e8:08:6d:55:d9:ad:42:08:46:ac:8a:60:7d:89:f6:
2d:3d:f5:5c:1b:14:1f:6f:45:31:d6:1f:3d:a1:f1:
3e:61:e6:76:40:c7:8d:cc:6e:8e:16:71:34:c0:ba:
29:59:97:fc:b4:81:26:a0:61:4c:76:d6:1b:db:a5:
74:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5A:A4:EF:EA:4D:3C:0F:F2:D5:DD:90:75:49:13:C6:16:8C:16:8B
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3132332e3135382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.158.0/24
Signature Algorithm: sha256WithRSAEncryption
57:78:60:eb:e9:d9:52:96:ef:ac:cb:b2:6c:cb:18:a6:bf:47:
fc:16:6f:f2:2d:19:57:25:cd:d6:22:e4:94:c3:8d:32:d9:da:
1c:ae:58:60:3a:db:d5:14:54:10:4b:ec:a4:25:df:42:69:d1:
93:d0:ef:5b:a1:88:30:0e:2d:41:70:81:62:00:12:23:c8:8b:
fd:f7:79:e6:2a:6b:97:b4:d8:89:df:1a:d0:bd:4e:49:1d:17:
40:c5:57:97:68:db:71:28:d5:d0:a8:ae:63:d5:e9:47:b5:db:
b3:a7:4d:b7:e0:2a:1e:b2:d9:ff:de:06:f6:9d:61:0a:24:5e:
ae:66:61:5c:d8:f4:75:32:52:fc:31:c7:f8:4e:74:29:b6:ba:
f9:0f:59:9c:2d:90:31:f2:0f:b8:f0:69:df:e7:79:e5:94:8c:
32:da:f8:39:94:cd:0f:5e:77:1c:63:53:59:c3:ff:1e:5e:23:
ab:ad:ad:55:3a:a4:57:b5:38:1b:40:dc:e7:5b:59:52:f2:34:
3f:87:52:c1:d6:26:ba:40:4b:0e:cf:3f:6c:20:1f:ae:c9:73:
f6:35:32:bd:3f:5a:0f:7b:b9:25:30:14:17:5a:29:09:5d:a2:
f8:17:17:75:97:94:48:19:a1:e3:22:e3:83:05:97:24:d5:41:
74:87:3a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:39:03 2025 by rpki-client