Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3131302e302f32332d3234203d3e203433383437.roa
File: 33312e3138352e3131302e302f32332d3234203d3e203433383437.roa (raw, json)
Hash identifier: T6rtApADDC+Elc7WCYTU1PdK7EWrPbiH7KQ3aSL6yw8=
Subject key identifier: E1:67:3A:CF:29:A2:A5:83:AB:CA:23:73:AA:01:79:9A:6E:C4:66:62
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 54142948D69806141F9B56E537978FD0E7AD2401
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3131302e302f32332d3234203d3e203433383437.roa
Signing time: Tue 08 Apr 2025 14:37:16 +0000
ROA not before: Tue 08 Apr 2025 14:32:16 +0000
ROA not after: Tue 07 Apr 2026 14:37:16 +0000
asID: 43847
IP address blocks: 31.185.110.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Apr 2025 15:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:14:29:48:d6:98:06:14:1f:9b:56:e5:37:97:8f:d0:e7:ad:24:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Apr 8 14:32:16 2025 GMT
Not After : Apr 7 14:37:16 2026 GMT
Subject: CN=E1673ACF29A2A583ABCA2373AA01799A6EC46662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:85:9a:61:db:d5:0a:7c:77:3b:a5:4d:1e:
3e:ea:32:7c:89:05:dc:40:a7:75:8e:29:7f:79:d6:
d5:9c:d7:2c:61:99:67:47:cd:9f:b3:2b:50:a3:df:
a7:27:bc:16:16:08:a4:d4:52:69:a4:a7:ae:39:fb:
59:18:c5:db:96:f1:13:d8:05:c8:4f:71:f1:1c:50:
bb:12:38:fc:f3:65:f0:98:c7:7b:85:aa:ac:2f:0a:
35:d1:2e:be:5b:e2:41:2f:bf:45:37:61:93:8e:a5:
c0:73:d8:b7:41:db:67:24:fa:70:ad:8f:56:bf:c0:
26:92:23:6d:1d:ed:06:7e:48:82:f0:4a:93:3f:d4:
88:05:8f:b1:02:8b:5a:f2:2a:12:8b:fe:8f:a6:7c:
a1:6d:9f:f7:a3:b5:26:ab:97:d3:9a:1e:97:a3:27:
4f:32:d4:77:12:94:21:3f:cc:71:f4:64:9a:2e:10:
b3:2b:be:ad:4f:c2:fc:11:3f:bd:62:c1:3a:38:c9:
f0:f4:32:d0:4b:1a:c9:dc:22:66:22:8b:f4:1a:34:
6f:37:0d:9c:c1:d1:81:bb:3f:b7:11:e5:57:3b:34:
04:73:fe:f6:0a:46:a5:d2:36:b3:ed:80:9d:26:f2:
a3:fe:3b:ea:45:d9:11:06:44:e0:51:24:89:5d:17:
47:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:67:3A:CF:29:A2:A5:83:AB:CA:23:73:AA:01:79:9A:6E:C4:66:62
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3131302e302f32332d3234203d3e203433383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.110.0/23
Signature Algorithm: sha256WithRSAEncryption
71:60:29:c0:0c:3b:5b:dc:c9:cb:f1:10:51:61:e3:8a:c0:d5:
17:d6:fa:ee:2f:7d:67:00:fe:38:0d:86:66:39:e8:29:ed:16:
19:8a:ec:78:ff:5b:c9:be:0f:a6:1c:26:17:04:0d:fa:2a:81:
d6:e9:2c:90:cc:66:ee:43:94:dd:12:6d:a3:7b:9e:29:71:79:
12:16:12:16:6a:c9:22:6e:03:3a:93:1b:54:0c:33:a4:92:58:
97:bb:93:02:9f:50:1a:af:e9:71:5b:a9:fe:71:a3:c4:a0:27:
39:fb:e8:b6:d7:a2:3d:4f:47:61:e2:ac:75:5c:52:05:ac:01:
f1:4b:22:07:c1:ce:37:74:4e:be:48:60:06:0e:58:01:af:95:
40:fc:c0:c2:d5:7d:a0:fd:b8:7f:26:f2:79:7d:d5:76:4a:33:
0f:86:92:bd:c3:fa:01:d4:59:63:39:e1:41:cc:91:e6:99:c0:
68:ed:ad:a0:06:f5:59:d5:be:ef:b7:f6:df:d3:8f:6f:d3:d1:
37:ca:a7:1b:7a:fe:ad:4b:dc:35:37:f4:53:ee:ce:05:1b:d5:
12:79:4e:12:ca:40:1a:38:a2:03:7f:27:62:e1:b0:7b:3d:88:
de:4c:be:96:a1:e4:19:ce:d2:0a:24:d3:d6:7e:ed:90:59:d9:
0e:82:38:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:08:29 2025 by rpki-client