Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/38392e3135302e34392e302f32342d3234203d3e20383334.roa
File: 38392e3135302e34392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 6wJ2W1xfDjZN4SM6Zy8j9hEKDn5q/8FsiZfbfqDkGt4=
Subject key identifier: 58:0F:AC:49:D1:FC:50:D2:DB:99:4E:FD:50:5E:13:E0:78:C6:C8:BD
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 5414E16CEB237F5A3D989CAB3CC00BED4BD6EE78
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/38392e3135302e34392e302f32342d3234203d3e20383334.roa
Signing time: Fri 23 May 2025 12:37:22 +0000
ROA not before: Fri 23 May 2025 12:32:22 +0000
ROA not after: Fri 22 May 2026 12:37:22 +0000
asID: 834
IP address blocks: 89.150.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 16:10:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:14:e1:6c:eb:23:7f:5a:3d:98:9c:ab:3c:c0:0b:ed:4b:d6:ee:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: May 23 12:32:22 2025 GMT
Not After : May 22 12:37:22 2026 GMT
Subject: CN=580FAC49D1FC50D2DB994EFD505E13E078C6C8BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:aa:a5:8f:f4:4d:d8:d3:de:cc:a8:f9:bf:90:
9d:09:27:d7:a6:de:30:35:60:18:fa:4c:50:9d:89:
7a:41:c1:8d:72:2d:52:7c:ae:fd:a8:f7:7b:db:64:
75:9d:f4:15:bb:16:d9:5a:65:78:dc:c8:f0:17:77:
03:42:85:16:bd:dd:84:e9:f5:97:6e:d4:28:27:c9:
4f:6e:04:e0:23:97:10:d9:f5:8d:70:11:95:66:32:
42:84:3e:4e:cb:01:b5:d3:84:92:3e:9f:8a:a7:9e:
c3:18:2a:51:c9:34:66:43:21:b3:35:8a:eb:4b:c8:
e8:5f:33:02:2b:d2:c4:48:09:0a:3d:55:4a:f2:6f:
69:28:bd:3e:a3:91:bc:bd:82:a5:ed:68:9d:09:74:
fc:42:7e:60:26:94:f7:4d:de:fa:37:5a:5b:26:51:
87:39:b6:da:a4:9a:3a:71:87:14:a5:14:7f:f1:b6:
a9:01:48:f5:ab:61:83:70:ed:5f:39:aa:20:f1:4a:
22:40:41:3e:df:66:30:de:16:0f:c1:05:72:2c:e1:
1a:b5:e4:19:40:8d:68:11:32:f2:c7:65:7b:b6:5b:
41:32:de:d9:27:68:ca:39:4d:66:db:c5:ac:1d:d1:
f0:bd:c5:a7:a7:2f:f2:4b:78:73:91:04:2a:fe:9d:
2d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0F:AC:49:D1:FC:50:D2:DB:99:4E:FD:50:5E:13:E0:78:C6:C8:BD
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/38392e3135302e34392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.49.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b7:2a:71:55:b0:13:93:0f:28:4d:7b:cc:27:e9:bd:ec:3e:
26:88:64:92:0f:01:45:f2:a5:5f:fc:f4:62:4d:4a:78:4b:5d:
f2:e9:39:6d:8c:9e:56:99:1f:60:45:6c:cd:0e:55:8a:8a:77:
f0:f6:cb:c7:69:90:49:f7:ca:d3:bd:8b:c5:17:d0:c6:34:fd:
02:59:4a:47:3e:86:83:d7:c2:70:86:83:f3:54:7c:86:6f:36:
f7:46:42:0f:2f:12:90:cf:49:e3:0a:3b:e8:38:21:73:81:3f:
a4:0a:dd:96:84:10:30:57:13:bf:e8:6e:d1:bb:92:ce:6a:96:
fc:d6:62:21:91:1b:0a:4b:ff:53:75:e0:a2:39:3a:d5:c7:8c:
01:f2:38:30:39:35:16:90:57:1d:93:82:f4:25:2f:80:09:6b:
26:15:0d:39:39:a4:2a:cc:da:d7:24:ab:f3:6a:a5:2c:74:1c:
72:34:fc:8d:2c:21:4c:d2:50:37:b7:63:97:8c:2a:96:94:bd:
dc:a8:17:eb:7d:1a:9b:8b:70:fa:6c:27:96:21:1c:dc:2d:ea:
b9:f7:dd:a4:90:29:29:1f:92:1a:cc:3b:b0:a9:45:e8:45:5b:
e1:be:06:9d:36:b0:10:11:3c:12:b2:7e:2c:3a:a8:4e:43:e7:
df:54:d9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:07:32 2025 by rpki-client