Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3139342e302f32342d3234203d3e2035303635.roa
File: 3138352e3230352e3139342e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier: buy5QjwTKPSSixjU/xaFePgjVxCxMNn4CrtkXYBYaek=
Subject key identifier: 34:BD:66:81:51:87:94:E8:A1:B1:CF:98:72:81:18:1F:33:DB:6A:BC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 54205C61A01F659D8A17AE4199420723A85A4ECD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3139342e302f32342d3234203d3e2035303635.roa
Signing time: Thu 08 May 2025 07:15:50 +0000
ROA not before: Thu 08 May 2025 07:10:50 +0000
ROA not after: Thu 07 May 2026 07:15:50 +0000
asID: 5065
IP address blocks: 185.205.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 19:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:20:5c:61:a0:1f:65:9d:8a:17:ae:41:99:42:07:23:a8:5a:4e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 8 07:10:50 2025 GMT
Not After : May 7 07:15:50 2026 GMT
Subject: CN=34BD6681518794E8A1B1CF987281181F33DB6ABC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:e6:98:29:62:cb:4e:00:14:9a:c7:1a:fd:
dd:f8:8a:1c:22:43:d5:cc:69:67:51:a4:7f:34:6b:
ab:66:2d:bb:47:56:fb:c3:74:7a:a5:e5:6e:19:ec:
1f:aa:34:7a:c9:76:29:d8:3e:ca:7c:f2:eb:8a:80:
e0:90:6a:bc:d4:b3:dd:df:78:94:b6:ea:f3:46:64:
b1:58:6d:50:19:f3:74:ee:bb:e6:c9:17:11:e4:71:
d6:42:e7:01:0d:54:04:3d:41:de:ee:dd:6f:f4:e1:
4a:62:0b:7f:40:e8:7b:88:66:8b:91:9d:81:21:d0:
dc:8b:7d:f4:ee:1b:a5:8a:19:0a:27:33:84:39:91:
8d:3b:27:dc:65:2c:11:d0:ed:f4:84:c6:49:88:a1:
f3:06:12:ec:a7:46:99:90:e7:6f:48:37:f6:80:03:
8a:db:87:42:f8:48:09:9a:ed:de:33:3f:99:f5:35:
fa:ad:1e:dd:69:91:79:39:bc:7e:57:6b:b2:ef:7e:
9e:a4:0d:e5:04:91:3e:80:a7:de:73:cb:71:a6:a9:
81:b5:03:d3:a4:42:c3:66:4f:5f:54:63:14:84:e5:
2d:8d:33:b5:4b:c0:ec:c0:37:1e:91:7f:ad:08:cb:
6e:d1:bb:8f:95:b6:9d:72:14:1f:6c:a5:80:f1:5a:
45:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BD:66:81:51:87:94:E8:A1:B1:CF:98:72:81:18:1F:33:DB:6A:BC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3139342e302f32342d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.194.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:05:ad:f4:74:4e:3c:ff:9c:7e:3a:a2:fe:ab:2d:1b:69:70:
b8:b2:f5:58:af:20:4b:62:f9:d3:97:6c:1d:13:ef:96:1e:d0:
b5:42:9b:26:de:15:54:55:e6:07:da:e5:c0:c6:32:75:ac:bc:
62:8b:54:72:56:7d:dd:d5:5c:24:81:cb:26:03:ba:5f:9c:e7:
2c:cd:2b:14:d5:3b:61:08:bc:e2:3e:d9:58:42:99:1e:4c:f2:
16:ac:21:13:df:3d:0f:0b:8f:9e:ce:c4:43:30:58:0a:c7:14:
a8:2a:f2:4f:d6:90:03:da:d7:08:90:07:db:f3:ef:d9:34:3b:
0d:f7:85:71:66:27:cd:e7:db:0e:b4:5a:ef:3c:73:27:52:f4:
85:be:fe:25:cd:15:09:36:75:28:46:99:fa:13:6b:47:42:30:
5c:83:0b:de:cc:2b:fb:44:cf:dd:b9:ce:08:6d:24:80:97:db:
d8:29:ef:5d:9a:e6:82:b7:79:e3:bb:d8:fd:d9:27:c1:6d:4a:
b3:b9:1e:31:8d:c8:7a:62:e2:5b:c9:fb:b8:af:8d:f0:57:d5:
5b:a6:4d:d4:85:94:45:81:44:55:d8:a7:8e:6f:4d:71:f8:1c:
e2:b1:97:7b:d4:65:57:cc:cf:9e:b8:7d:b8:53:20:15:22:aa:
dc:fd:ba:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:53:08 2025 by rpki-client