Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3232322e302f32342d3234203d3e20313336373837.roa
File: 3138352e3230322e3232322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: OXvr15jKDF1MwsCaoBnTddYXn2tmHDBPR//HIbY9rtI=
Subject key identifier: F2:79:B3:0E:4E:CC:D1:7F:6E:E4:42:27:29:72:DA:1C:DF:A5:B9:EA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1163ED7CEC24E084F6234E476F90C1ABFB6D578C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3232322e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 04 Jun 2025 20:01:39 +0000
ROA not before: Wed 04 Jun 2025 19:56:39 +0000
ROA not after: Wed 03 Jun 2026 20:01:39 +0000
asID: 136787
IP address blocks: 185.202.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jun 2025 11:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:63:ed:7c:ec:24:e0:84:f6:23:4e:47:6f:90:c1:ab:fb:6d:57:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 4 19:56:39 2025 GMT
Not After : Jun 3 20:01:39 2026 GMT
Subject: CN=F279B30E4ECCD17F6EE442272972DA1CDFA5B9EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:91:f5:16:e2:f4:84:38:98:7e:dc:5d:f8:0d:
be:c3:95:c8:27:61:75:16:61:46:c3:43:dd:10:18:
a9:4c:78:c6:b5:32:52:a8:5b:de:10:1c:de:75:a7:
40:78:28:ef:8e:5a:ea:40:f2:35:99:40:08:66:d9:
84:c1:23:87:89:8a:77:53:83:f7:10:2f:61:3d:30:
f1:e9:44:ac:dd:e1:af:54:65:90:cc:ba:7e:e7:95:
34:3a:97:17:7b:6b:72:a6:2d:7a:ea:ad:1c:07:03:
00:15:32:df:c7:cc:ac:7e:bf:87:84:cb:21:c6:b7:
5a:9e:c7:da:c5:3a:51:8b:c9:69:0a:f6:0d:3c:ec:
09:99:bd:76:1d:c5:63:8b:13:bf:23:6b:d4:ff:8b:
b8:4a:33:50:41:bf:d9:0f:f4:41:5c:c8:8c:70:b0:
f0:37:48:5c:87:33:f8:0b:cc:ae:c1:9e:40:12:cb:
81:b6:7a:e5:72:08:ca:45:3e:01:56:8a:c3:6c:34:
6c:58:a4:43:57:82:c3:bf:af:6d:a4:49:e9:51:3b:
63:96:73:f2:7d:fc:79:0d:86:dc:f3:74:cf:f5:bc:
79:bc:30:e3:b1:76:e2:af:65:c2:b7:1d:a7:3a:8f:
b1:87:40:32:9f:77:78:e0:59:35:68:ba:9f:cd:c6:
0d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:79:B3:0E:4E:CC:D1:7F:6E:E4:42:27:29:72:DA:1C:DF:A5:B9:EA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3232322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.222.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:22:60:e4:1a:1a:7a:9b:87:d0:e1:d7:20:9a:ac:86:71:00:
61:27:dd:ba:e1:94:29:f5:c7:a0:6a:34:33:87:73:3a:f3:95:
1c:fb:97:45:d7:31:00:af:50:31:25:82:93:9e:4e:cd:76:14:
7f:b3:2a:76:53:4c:72:b9:85:d3:32:f1:3a:47:d1:86:06:99:
99:a9:9c:77:33:6f:29:b1:51:4f:15:f9:83:8f:9c:e3:a7:2e:
95:52:c4:b3:19:8d:76:30:e4:89:7e:96:59:7c:2a:55:d3:35:
fd:cd:d0:32:51:7d:15:61:e9:81:15:4b:74:a6:d1:82:7d:10:
40:9f:d3:5d:50:4d:6d:51:29:97:61:1b:51:3e:9f:9b:75:ff:
51:bf:bd:ad:d7:e0:18:7a:54:01:11:ba:67:a0:24:1b:30:25:
a6:65:ea:37:5c:2d:e4:d8:af:0c:48:3a:04:12:0c:db:5f:d9:
e1:35:4f:0a:95:18:b2:2f:ff:f8:7f:65:7a:a7:7f:1e:ce:86:
31:1e:ac:58:e7:4e:5d:95:8d:72:d6:12:a6:0a:db:3c:1d:15:
6d:ca:e1:66:cc:f5:cc:4d:a6:80:20:28:08:36:ba:58:92:7a:
4f:b6:8c:c8:0d:88:79:26:18:72:b6:8e:24:d6:19:7e:d3:8c:
90:cb:ef:b6
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUEWPtfOwk4IT2I05Hb5DBq/ttV4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA2MDQxOTU2MzlaFw0yNjA2MDMyMDAxMzlaMDMxMTAvBgNV
BAMTKEYyNzlCMzBFNEVDQ0QxN0Y2RUU0NDIyNzI5NzJEQTFDREZBNUI5RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSkfUW4vSEOJh+3F34Db7Dlcgn
YXUWYUbDQ90QGKlMeMa1MlKoW94QHN51p0B4KO+OWupA8jWZQAhm2YTBI4eJindT
g/cQL2E9MPHpRKzd4a9UZZDMun7nlTQ6lxd7a3KmLXrqrRwHAwAVMt/HzKx+v4eE
yyHGt1qex9rFOlGLyWkK9g087AmZvXYdxWOLE78ja9T/i7hKM1BBv9kP9EFcyIxw
sPA3SFyHM/gLzK7BnkASy4G2euVyCMpFPgFWisNsNGxYpENXgsO/r22kSelRO2OW
c/J9/HkNhtzzdM/1vHm8MOOxduKvZcK3Hac6j7GHQDKfd3jgWTVoup/Nxg1/AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU8nmzDk7M0X9u5EInKXLaHN+lueowHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMwMzIyZTMy
MzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnK3jANBgkqhkiG9w0BAQsFAAOCAQEAPiJg5BoaepuH0OHXIJqshnEAYSfd
uuGUKfXHoGo0M4dzOvOVHPuXRdcxAK9QMSWCk55OzXYUf7MqdlNMcrmF0zLxOkfR
hgaZmamcdzNvKbFRTxX5g4+c46culVLEsxmNdjDkiX6WWXwqVdM1/c3QMlF9FWHp
gRVLdKbRgn0QQJ/TXVBNbVEpl2EbUT6fm3X/Ub+9rdfgGHpUARG6Z6AkGzAlpmXq
N1wt5NivDEg6BBIM21/Z4TVPCpUYsi//+H9leqd/Hs6GMR6sWOdOXZWNctYSpgrb
PB0VbcrhZsz1zE2mgCAoCDa6WJJ6T7aMyA2IeSYYcraOJNYZftOMkMvvtg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:40:39 2025 by rpki-client