Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3139342e302f32342d3234203d3e203631333137.roa
File: 3138352e3230352e3139342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: cSAS85Fjidu/NZu0c5UgZqSm2zh+ry5spYtX7kyc53k=
Subject key identifier: 2F:99:48:56:B7:94:AF:C4:F6:25:6D:18:4B:5E:60:C8:C1:59:EE:60
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0BB19E8F6287AC4BF1F509F70C188DE281111F26
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3139342e302f32342d3234203d3e203631333137.roa
Signing time: Mon 27 Jan 2025 09:45:00 +0000
ROA not before: Mon 27 Jan 2025 09:40:00 +0000
ROA not after: Mon 26 Jan 2026 09:45:00 +0000
asID: 61317
IP address blocks: 185.205.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 07:47:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:b1:9e:8f:62:87:ac:4b:f1:f5:09:f7:0c:18:8d:e2:81:11:1f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:00 2025 GMT
Not After : Jan 26 09:45:00 2026 GMT
Subject: CN=2F994856B794AFC4F6256D184B5E60C8C159EE60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:85:e8:ae:9d:a4:d3:b7:03:60:6a:b1:1d:4a:
16:75:01:a1:7b:14:59:d7:a6:55:46:71:fc:25:59:
04:40:12:46:1e:53:58:f0:56:be:8b:08:af:26:45:
b0:74:61:16:f2:6e:d6:d0:c7:b8:17:a1:d1:93:ed:
89:a2:fb:37:c6:10:73:e4:11:cc:99:1a:96:b5:6d:
59:06:67:a1:8f:8d:f3:4e:79:f2:5c:bc:78:7b:f7:
6d:22:69:85:9e:2c:5f:e0:d4:77:52:68:b7:aa:72:
8a:22:82:c1:3d:bc:3e:d1:97:da:9b:b2:d9:5b:94:
4c:c6:2b:3c:29:d8:54:34:cf:ee:55:c4:58:74:26:
da:0e:2a:a7:59:e6:3f:51:5c:db:52:6e:a1:02:fc:
ce:03:3e:7e:31:c9:2a:c2:2e:63:1f:82:80:07:83:
72:ea:22:01:ed:da:32:66:d4:fe:6f:21:34:64:c0:
af:3b:2b:c6:0f:fc:f9:22:2a:9d:9b:4c:2e:3b:86:
63:16:4d:07:7f:fb:b3:37:b5:28:7a:8b:03:d3:c0:
0c:dc:b6:fd:0c:03:39:e1:71:00:26:69:94:6c:61:
02:c5:58:8d:f9:44:39:b1:01:59:7c:89:12:0e:44:
36:b1:df:5d:d7:fb:12:05:2b:d1:af:2f:21:f8:96:
95:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:99:48:56:B7:94:AF:C4:F6:25:6D:18:4B:5E:60:C8:C1:59:EE:60
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3139342e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.194.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:9f:aa:fa:5b:75:15:e4:5a:b1:b9:b4:12:7d:e5:88:5c:36:
58:a2:4c:e9:58:67:bd:79:f0:41:59:76:69:ba:0b:39:bc:f8:
f7:6d:11:61:26:e0:c4:62:a7:f2:6f:78:be:77:68:b9:60:2b:
a3:3f:c4:b5:f0:cc:16:35:7e:26:ea:b2:e4:ab:f8:6b:38:23:
15:50:69:ff:02:aa:4f:6a:e5:10:97:7a:31:20:ea:1d:12:98:
d7:2c:db:53:72:d0:e7:38:7c:60:6a:03:b2:30:f6:4e:41:f8:
39:69:40:29:cc:86:af:ec:96:6a:9d:fe:df:2f:f1:61:9f:1b:
2d:bf:d2:4a:9e:2d:25:40:01:49:6f:2c:cc:f4:74:86:fb:5f:
ee:d5:9f:ee:05:73:20:68:90:61:1b:98:96:13:5d:ad:e0:f5:
9d:e8:0d:c9:a4:ea:3b:21:39:4a:66:95:8f:f7:68:a9:39:4c:
80:94:70:50:a8:2f:1d:96:25:4c:d0:81:56:25:39:ed:3b:d1:
94:40:41:a7:0b:df:af:ce:dc:9b:a3:1c:66:e4:40:f3:63:a7:
d1:9e:f7:ae:aa:99:61:1c:83:bd:a2:3d:a9:90:96:a0:ef:b7:
52:a0:06:66:68:b6:0f:1d:04:9b:c2:33:d3:ff:43:9c:e9:a3:
72:81:38:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:25:00 2025 by rpki-client