Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137362e302f32342d3234203d3e20383334.roa
File: 3138352e3136322e3137362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: QOyZfv6liGhfUWn/8IglNtxsft81DazdFlaMrcP9B2Y=
Subject key identifier: 81:2F:8C:96:64:69:01:E2:35:C8:E8:82:24:30:2D:0B:8D:ED:CA:76
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 040B4236A8D8424C7B30150754A2482D01CE5E05
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137362e302f32342d3234203d3e20383334.roa
Signing time: Fri 23 May 2025 12:37:23 +0000
ROA not before: Fri 23 May 2025 12:32:23 +0000
ROA not after: Fri 22 May 2026 12:37:23 +0000
asID: 834
IP address blocks: 185.162.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 14:39:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:0b:42:36:a8:d8:42:4c:7b:30:15:07:54:a2:48:2d:01:ce:5e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: May 23 12:32:23 2025 GMT
Not After : May 22 12:37:23 2026 GMT
Subject: CN=812F8C96646901E235C8E88224302D0B8DEDCA76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:c0:13:d4:cc:5f:c4:69:3b:df:2c:2a:50:
2b:86:95:bd:f5:22:20:27:bc:c8:b5:0d:57:b5:81:
50:4f:d0:c1:eb:ed:5e:63:2d:eb:03:be:d2:98:e8:
09:98:ae:cc:86:fb:7a:54:e8:44:8a:66:0c:08:9c:
9e:e5:da:5b:54:ef:f2:e6:c4:d9:18:c8:7b:47:23:
c3:51:1c:3b:e6:d6:fd:ea:68:27:a1:ea:28:98:2d:
70:6d:71:61:b9:21:43:8d:80:45:9a:eb:87:fb:e0:
b1:df:39:02:e6:96:fc:78:4b:7e:81:29:56:c6:f0:
d8:a0:96:82:c8:e0:b2:1e:63:0b:5e:44:da:e1:3a:
69:3c:11:ee:b7:dc:30:a1:4b:09:ae:8f:45:8f:f1:
fd:67:ba:da:37:12:54:5c:61:70:ce:d8:9d:5d:91:
94:f9:14:c7:a0:7c:49:99:ff:5b:c0:77:8f:f1:33:
d5:56:92:53:d7:c0:87:e5:ee:1b:d6:73:a3:5e:a8:
a0:88:93:2c:28:a8:8b:1a:b6:41:23:31:b8:7e:5c:
5d:3d:64:2d:d4:c5:a3:07:0c:b8:e7:22:20:67:74:
ed:45:17:63:47:08:75:17:c7:68:e0:6a:57:93:ef:
09:b4:df:ff:34:fc:5c:62:bd:9a:e7:04:94:bf:6f:
aa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2F:8C:96:64:69:01:E2:35:C8:E8:82:24:30:2D:0B:8D:ED:CA:76
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.176.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:f0:5e:ef:6b:f5:de:b1:93:7c:24:22:61:3e:3a:97:5e:37:
41:eb:7e:4b:a9:9f:29:f9:f6:d8:03:c2:93:80:c4:06:9d:76:
01:96:ca:8b:20:64:14:6d:6f:f4:3e:4a:f3:28:10:49:b7:eb:
01:6e:61:aa:6c:23:41:24:3c:33:ce:f7:26:77:cf:30:4c:a5:
c4:5c:32:d8:00:db:71:a5:bf:f9:c0:7a:6c:86:4f:92:24:61:
e6:c3:4f:90:6b:f5:c5:ab:25:b7:22:1f:bf:18:61:c7:cd:cf:
7f:0b:28:67:c5:dc:0a:40:c6:f7:af:61:bb:cf:b5:11:c9:e3:
1c:7e:bf:12:03:e9:08:a2:ea:a9:42:fe:1b:a2:a0:57:dc:ca:
27:c1:4a:f0:74:06:61:9b:97:cf:4b:68:f0:90:76:eb:fd:fb:
11:2d:e4:fb:79:47:c8:b7:82:b4:a0:e7:cb:5f:91:d2:01:5d:
bb:92:90:cd:1b:7b:d1:5d:b9:d6:e9:08:51:40:c2:c6:c8:62:
cd:e0:92:cd:09:c1:8a:e5:c3:a0:78:bb:3e:39:44:f6:7e:ed:
09:57:59:6f:03:30:69:50:07:c3:cc:67:5c:ea:9d:25:c3:c4:
09:ce:2c:13:de:1f:db:70:8e:5e:18:2b:b5:f4:8e:a8:46:7d:
dc:a5:48:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:38:18 2025 by rpki-client