Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32352e302f32342d3234203d3e20383334.roa
File: 38322e3131382e32352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: NtusDYYcAmaSx/EdPfx2GjJ9JTux8aHgoIWTERLwaRI=
Subject key identifier: DC:29:C2:5D:22:13:F9:24:90:DF:0B:83:E6:F7:FE:AE:84:ED:18:34
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 7CC24BEA0FA856C0BE6308E9E40901FC05B3B90E
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32352e302f32342d3234203d3e20383334.roa
Signing time: Mon 25 Mar 2024 00:03:37 +0000
ROA not before: Sun 24 Mar 2024 23:58:37 +0000
ROA not after: Mon 24 Mar 2025 00:03:37 +0000
asID: 834
IP address blocks: 82.118.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 11:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:c2:4b:ea:0f:a8:56:c0:be:63:08:e9:e4:09:01:fc:05:b3:b9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Mar 24 23:58:37 2024 GMT
Not After : Mar 24 00:03:37 2025 GMT
Subject: CN=DC29C25D2213F92490DF0B83E6F7FEAE84ED1834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1d:e6:fe:13:df:db:0e:65:55:2a:fb:8e:c2:
5c:de:74:c8:d3:dd:51:31:c5:2d:bd:bb:ce:50:7b:
e4:c8:a6:e8:28:0c:80:2f:d9:e9:c8:a1:d8:15:4f:
7d:83:8c:b8:e9:1c:1a:b7:0a:0e:9c:0c:d0:08:54:
c4:36:e1:c8:43:b6:c0:63:6f:31:6e:70:0f:ef:1b:
1d:d8:52:f1:d9:8e:6c:2c:62:31:c5:7f:4d:58:ce:
3a:85:c9:ad:20:58:a6:68:ba:fc:55:3b:b7:c0:d9:
5b:8c:76:e8:b0:a5:b4:b0:70:8a:f5:f0:3c:4b:6d:
83:f2:47:48:ac:f9:6b:74:9d:68:77:61:69:91:f0:
2f:7b:45:80:72:3d:68:54:ff:2c:2b:bc:f1:0a:81:
e6:b2:d3:d4:75:90:e1:2f:76:16:99:10:e6:1a:22:
26:44:05:ed:2c:aa:20:74:9f:ed:a2:a2:4b:c7:27:
a4:73:62:3e:fa:4a:80:d4:b9:6e:bd:ee:f5:c0:dc:
e6:a4:ad:da:7b:39:55:5f:7d:55:bf:de:d8:ff:df:
23:98:55:95:29:7d:41:f1:e6:6b:92:a1:04:f6:fb:
f7:0d:7b:3f:ee:16:be:5c:24:8e:40:1a:f2:ab:06:
c7:9c:4e:38:02:8e:f8:e0:4a:9b:31:85:0c:a7:f2:
14:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:29:C2:5D:22:13:F9:24:90:DF:0B:83:E6:F7:FE:AE:84:ED:18:34
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.25.0/24
Signature Algorithm: sha256WithRSAEncryption
75:29:b7:c8:63:85:0c:d3:44:d7:42:11:a1:52:ce:92:69:7c:
69:77:e8:75:12:b8:cc:e3:14:8e:d1:30:b3:28:77:fc:13:ff:
3d:bf:0d:44:d2:db:89:06:0c:14:33:e3:a0:48:18:76:f6:61:
1d:22:b1:5f:cb:ed:51:ab:e7:71:5d:82:98:ff:52:a7:10:92:
65:e8:b8:9b:8f:5a:a8:34:c4:a5:0c:7a:fa:05:43:1c:61:60:
12:be:4d:c7:a5:99:33:8a:f4:46:71:ff:02:ff:db:e9:39:32:
b8:fa:a8:6e:d0:17:f5:60:16:f2:5a:7e:b5:ed:d1:2c:2a:fe:
36:f1:de:e6:87:94:68:e0:f4:4c:f2:85:62:92:b0:f6:c5:77:
29:2b:9c:08:04:89:48:ef:24:04:95:6c:6e:7a:2c:d3:c0:2f:
91:59:ff:08:06:c5:7d:bf:d0:56:d8:72:b0:32:f1:8d:4f:8b:
ad:96:38:7e:57:68:40:c1:16:73:fc:c7:ab:b7:ca:e1:bb:35:
08:72:94:8e:51:44:87:ad:69:91:88:74:33:c9:93:cd:6f:ca:
b6:0f:90:ac:6e:04:d6:57:86:8b:3c:42:d1:48:0e:ce:45:d8:
7f:ed:7f:28:9b:93:1e:ec:e4:b4:2a:c2:93:78:97:7b:17:ab:
f6:00:aa:41
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUfMJL6g+oVsC+Ywjp5AkB/AWzuQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3
ZTMwNTY0YTAeFw0yNDAzMjQyMzU4MzdaFw0yNTAzMjQwMDAzMzdaMDMxMTAvBgNV
BAMTKERDMjlDMjVEMjIxM0Y5MjQ5MERGMEI4M0U2RjdGRUFFODRFRDE4MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwHeb+E9/bDmVVKvuOwlzedMjT
3VExxS29u85Qe+TIpugoDIAv2enIodgVT32DjLjpHBq3Cg6cDNAIVMQ24chDtsBj
bzFucA/vGx3YUvHZjmwsYjHFf01YzjqFya0gWKZouvxVO7fA2VuMduiwpbSwcIr1
8DxLbYPyR0is+Wt0nWh3YWmR8C97RYByPWhU/ywrvPEKgeay09R1kOEvdhaZEOYa
IiZEBe0sqiB0n+2iokvHJ6RzYj76SoDUuW697vXA3Oakrdp7OVVffVW/3tj/3yOY
VZUpfUHx5muSoQT2+/cNez/uFr5cJI5AGvKrBsecTjgCjvjgSpsxhQyn8hRrAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQU3CnCXSIT+SSQ3wuD5vf+roTtGDQwHwYDVR0j
BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0
d1Zrby5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzgzMjJlMzEzMTM4MmUzMjM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUnYZMA0G
CSqGSIb3DQEBCwUAA4IBAQB1KbfIY4UM00TXQhGhUs6SaXxpd+h1ErjM4xSO0TCz
KHf8E/89vw1E0tuJBgwUM+OgSBh29mEdIrFfy+1Rq+dxXYKY/1KnEJJl6Libj1qo
NMSlDHr6BUMcYWASvk3HpZkzivRGcf8C/9vpOTK4+qhu0Bf1YBbyWn617dEsKv42
8d7mh5Ro4PRM8oVikrD2xXcpK5wIBIlI7yQElWxueizTwC+RWf8IBsV9v9BW2HKw
MvGNT4utljh+V2hAwRZz/Mert8rhuzUIcpSOUUSHrWmRiHQzyZPNb8q2D5CsbgTW
V4aLPELRSA7ORdh/7X8om5Me7OS0KsKTeJd7F6v2AKpB
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:05 2025 by rpki-client