Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130342e302f32342d3234203d3e203433383437.roa
File: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (raw, json)
Hash identifier: wnX3Redeeu6q6hJV8NRKkPOcwYs4prpVFIuSn97QsME=
Subject key identifier: F0:93:7C:62:CD:E0:B9:83:10:F4:CF:83:8F:89:92:73:31:AE:83:FF
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 06423466C78162AAB64259FE65024740EAF9E192
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130342e302f32342d3234203d3e203433383437.roa
Signing time: Tue 08 Apr 2025 14:36:49 +0000
ROA not before: Tue 08 Apr 2025 14:31:49 +0000
ROA not after: Tue 07 Apr 2026 14:36:49 +0000
asID: 43847
IP address blocks: 31.185.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Apr 2025 15:36:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:42:34:66:c7:81:62:aa:b6:42:59:fe:65:02:47:40:ea:f9:e1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Apr 8 14:31:49 2025 GMT
Not After : Apr 7 14:36:49 2026 GMT
Subject: CN=F0937C62CDE0B98310F4CF838F89927331AE83FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:89:5b:20:b7:64:3b:cc:73:76:1f:5d:64:57:
28:cb:68:1d:d8:45:fd:36:c2:00:10:79:33:2c:ef:
55:f4:16:22:ac:3f:4b:a0:1e:8b:01:11:22:7f:60:
c7:1e:f5:a0:15:24:58:f6:5b:bd:75:c8:7a:e8:17:
a5:e8:2f:b8:3c:a4:02:38:58:e2:45:61:17:d2:72:
d5:49:ef:7b:79:d2:4c:29:f8:97:6c:90:57:e3:80:
a2:1a:58:c6:21:c0:90:61:44:ff:cb:7b:c7:0e:5e:
d0:7d:b1:ae:18:e0:e2:9e:19:06:4d:fa:be:7b:9d:
76:7c:ee:40:bf:1b:78:a5:35:35:77:a4:f1:42:79:
da:db:f9:29:f8:55:dd:9c:f1:dc:e3:89:d1:69:95:
21:16:24:b0:33:69:b0:c8:ff:95:1d:e3:a4:9b:21:
6e:75:35:52:cd:35:c3:38:fc:f3:8e:c1:ca:cf:68:
2a:ee:57:73:bc:25:d4:46:6e:6d:90:63:9a:8b:cb:
c8:77:3f:80:70:f9:b9:e0:22:49:3b:23:34:dd:8f:
6c:24:0a:60:3d:97:90:23:c4:d2:5a:79:34:7d:99:
3f:00:39:46:4f:b5:52:57:23:46:74:45:9c:d4:9c:
6c:29:ca:dd:96:fe:0e:a5:d4:8f:20:09:8c:00:cf:
53:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:93:7C:62:CD:E0:B9:83:10:F4:CF:83:8F:89:92:73:31:AE:83:FF
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130342e302f32342d3234203d3e203433383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.104.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:c6:f6:c6:6c:a3:f6:ce:64:87:f5:ed:f4:1a:c8:cc:74:9f:
5b:f5:dd:db:b5:15:79:69:09:7f:1c:23:7a:68:cc:a7:92:23:
2b:a7:a7:2b:f2:85:6f:f4:84:b8:12:bc:e4:b1:d3:27:94:05:
92:14:41:1f:a1:d0:66:9c:0e:72:22:e0:6e:4f:b1:1f:a2:99:
92:ea:62:f5:17:2f:cf:b8:c2:38:cc:ad:9d:f3:ed:83:60:bf:
07:45:10:8a:8e:40:ca:c4:c3:d8:85:7a:18:45:b6:aa:ea:a8:
75:b1:46:f3:3b:06:9e:5f:c5:aa:7d:0d:72:88:c8:68:f8:f3:
3e:59:94:35:0d:0b:c4:fe:5d:84:dc:b2:fb:e2:76:ec:b9:81:
fc:04:36:c4:18:13:79:4a:8c:07:55:c7:a4:e3:37:e1:aa:d6:
07:35:82:9c:25:8f:7a:7f:ab:58:93:0e:47:54:b7:35:ed:07:
4e:8a:de:35:6b:09:f2:2d:21:61:39:3c:84:16:35:c5:2e:5c:
e0:a0:26:98:39:32:a8:ca:0d:24:2d:fe:34:8a:7d:35:a4:b8:
35:03:05:ed:90:d1:e7:de:06:6a:3d:09:59:0f:2c:fb:7e:78:
28:c1:97:d0:18:de:f0:67:0f:11:d9:f8:a5:63:ea:c0:bd:68:
0a:e1:7f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:21:12 2025 by rpki-client