Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130352e302f32342d3234203d3e203433383437.roa
File: 33312e3138352e3130352e302f32342d3234203d3e203433383437.roa (raw, json)
Hash identifier: 0ANSym/ep4gPI/jv7RkIcxComfuNXkQyYEuTfihR4SM=
Subject key identifier: 7C:2A:D8:58:8B:94:A2:59:A9:39:2D:F7:EE:10:7D:0C:EB:D3:08:18
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 24468D2B7EB0714D133DCD701E7B93178B50B1E8
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130352e302f32342d3234203d3e203433383437.roa
Signing time: Tue 08 Apr 2025 14:39:47 +0000
ROA not before: Tue 08 Apr 2025 14:34:47 +0000
ROA not after: Tue 07 Apr 2026 14:39:47 +0000
asID: 43847
IP address blocks: 31.185.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Apr 2025 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:46:8d:2b:7e:b0:71:4d:13:3d:cd:70:1e:7b:93:17:8b:50:b1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Apr 8 14:34:47 2025 GMT
Not After : Apr 7 14:39:47 2026 GMT
Subject: CN=7C2AD8588B94A259A9392DF7EE107D0CEBD30818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e2:c0:ad:17:93:4d:f4:f4:5e:d8:68:a2:c7:
d4:a2:a6:1d:63:d9:a9:8b:ad:8a:34:d9:d9:ae:4f:
48:2d:b2:35:93:fe:bd:b5:b3:34:e7:0f:4b:19:51:
d3:e9:56:3d:f3:d8:9b:2f:45:7b:4c:3e:90:93:b4:
f2:f8:0a:b4:c4:31:ff:bd:1e:55:d1:e7:b9:63:a9:
55:0e:60:86:d7:47:17:16:d8:d8:3b:7a:ce:0a:25:
78:09:a0:12:8c:8a:a6:24:f2:24:8e:fe:da:73:0a:
07:73:cd:95:bd:f3:e0:52:1d:c4:4f:e3:43:e2:87:
af:f3:1f:a9:de:d7:16:56:07:ac:ea:08:aa:21:5d:
30:8b:18:f0:a3:1d:9b:ae:fc:89:02:c5:3f:a0:fc:
f7:e8:08:21:1e:eb:99:89:11:51:2f:60:f5:b4:19:
0d:9d:af:19:60:eb:22:55:5c:a7:30:4d:31:6c:e8:
de:eb:3c:05:58:8a:da:a6:7c:41:6a:72:2a:0c:67:
55:91:4f:28:50:81:82:30:ba:73:5e:bd:d2:15:cd:
85:e2:b6:30:c2:ad:36:22:b8:08:46:19:e0:7a:3a:
45:e2:3d:fe:a1:34:ef:00:88:c1:e2:37:30:21:23:
9b:28:49:71:bd:90:84:76:39:e9:eb:c8:d0:e8:87:
42:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2A:D8:58:8B:94:A2:59:A9:39:2D:F7:EE:10:7D:0C:EB:D3:08:18
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130352e302f32342d3234203d3e203433383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.105.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d8:5c:3e:e5:73:f0:99:8e:5f:4c:d4:81:8c:0d:7b:61:1a:
f7:ca:1f:c7:7d:24:d7:7a:5d:89:ae:28:a5:d6:17:db:51:6f:
a8:3a:94:c0:01:83:ac:a6:82:7a:8e:73:8a:c6:26:ee:3f:a8:
58:f8:19:f9:98:d3:1d:86:0c:15:9c:f8:e1:6d:6b:bc:45:57:
e8:eb:2e:76:29:c7:c5:22:06:8e:0e:e4:fe:02:2d:19:6e:3d:
6d:ba:77:e1:a6:c2:22:ff:c9:27:2b:d6:23:9f:a8:9b:1c:df:
19:3d:9d:6a:23:52:5e:e0:c5:ea:39:c8:e5:ff:64:54:02:52:
3e:b9:39:8a:7b:e2:17:5d:ac:95:d4:20:e2:a1:90:3b:e5:8c:
d4:e3:8f:dc:59:78:21:5e:1c:0c:f7:ee:9c:0c:fb:03:b3:f0:
b6:e8:5a:8e:2c:97:7b:68:61:72:df:f7:27:f7:d4:79:eb:15:
ae:e8:99:cb:19:d3:6f:e4:09:dd:50:d8:2e:55:d7:62:d6:0f:
f4:a4:e1:3b:84:da:74:32:28:4e:ab:16:e8:92:ec:be:e0:55:
48:9c:34:6d:5a:90:a8:5b:ac:e5:cd:14:fa:4a:49:f2:a1:6c:
ef:aa:4a:49:bd:87:05:74:75:85:9a:d4:ca:e6:9e:ce:b5:88:
d5:41:a4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:13:12 2025 by rpki-client