Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3132332e3135372e302f32342d3234203d3e20383334.roa
File: 3138352e3132332e3135372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 8I8wM587DUu+coeALNRmm4FGgeF11L+FQ8d0Ocy2YQ4=
Subject key identifier: 42:84:EC:93:33:89:D5:96:95:B7:DF:68:6E:5A:3E:BB:CA:C3:1E:2F
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 687EC375117E8974312ED2218C440872093DF5CB
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3132332e3135372e302f32342d3234203d3e20383334.roa
Signing time: Fri 23 May 2025 12:37:23 +0000
ROA not before: Fri 23 May 2025 12:32:23 +0000
ROA not after: Fri 22 May 2026 12:37:23 +0000
asID: 834
IP address blocks: 185.123.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 07:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:7e:c3:75:11:7e:89:74:31:2e:d2:21:8c:44:08:72:09:3d:f5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: May 23 12:32:23 2025 GMT
Not After : May 22 12:37:23 2026 GMT
Subject: CN=4284EC933389D59695B7DF686E5A3EBBCAC31E2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ff:6b:84:3a:20:0d:34:d5:f9:ba:ed:49:07:
2b:55:e8:fd:b0:e7:4f:e4:5d:29:ba:2c:5a:51:4c:
fe:82:a3:c9:58:59:b0:e0:1a:51:f8:f3:ce:9d:76:
9b:2a:f2:56:d8:f2:e4:f4:48:f8:43:59:32:ed:b3:
61:33:39:b4:ae:78:89:52:0d:33:fb:56:7a:a8:5d:
e6:c1:b5:cd:c6:67:b5:ab:7b:73:6f:cc:1f:d3:e6:
77:b8:18:41:3e:df:12:79:df:a4:e5:63:c6:d6:b2:
ae:6d:14:be:0c:39:51:d7:17:91:4e:1d:05:eb:8a:
db:c2:d5:5c:3b:74:81:c6:a8:20:c2:1c:be:52:87:
f9:fd:71:08:15:5e:9e:6e:37:07:8e:d9:be:63:f7:
a4:5b:5a:39:bb:8b:d8:eb:8b:d7:f0:ba:da:12:2c:
10:f3:c7:56:0d:9d:36:56:73:a0:3c:f2:32:91:da:
2e:32:d7:23:59:d5:d6:a7:e3:b1:cd:c9:68:a6:30:
8d:05:7d:19:ac:02:2d:08:1a:17:4a:52:4a:a7:2c:
f9:ea:8a:9e:74:eb:da:de:28:98:18:bc:aa:4d:e3:
ec:f2:05:a2:3e:e3:ee:5b:b4:53:38:cf:f9:a0:d4:
f8:ac:0f:64:ff:ae:f8:a8:35:0b:0d:63:3f:d9:4a:
00:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:84:EC:93:33:89:D5:96:95:B7:DF:68:6E:5A:3E:BB:CA:C3:1E:2F
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3132332e3135372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.157.0/24
Signature Algorithm: sha256WithRSAEncryption
67:73:12:58:1d:df:27:73:e6:ba:d2:3a:e0:ff:69:af:30:9f:
ba:41:bf:0d:4a:44:a2:a2:f1:0e:11:2c:80:8d:7d:e4:9b:9b:
b3:37:72:66:58:18:c0:59:73:9f:3e:b9:a2:59:06:a5:49:17:
86:46:fa:53:a7:e3:9b:f9:7e:57:3f:ed:54:cd:d9:ec:f5:ef:
7b:22:c8:27:24:ef:22:7a:c6:69:ae:ff:ca:05:71:a4:8e:b3:
b0:47:17:bf:84:d2:a1:24:52:99:30:2f:9c:c0:2a:e4:07:0c:
ac:99:da:9c:78:28:3a:27:ac:64:f6:dc:42:7d:ac:30:51:ac:
f1:6e:78:e5:6d:17:78:5c:19:4e:ff:8c:ec:a4:51:f7:86:ef:
25:69:88:a5:61:3f:c1:f7:c4:1b:f3:56:a4:ae:c9:c3:b2:a1:
72:85:06:8b:a0:99:7d:c6:03:3a:3a:22:38:18:5f:75:14:15:
af:3f:37:5f:74:40:a7:f3:a6:fc:30:0c:7e:09:bb:5c:a1:19:
5d:40:36:43:76:eb:90:17:27:95:97:0c:d4:04:16:4b:98:e7:
c2:fa:55:70:49:0e:da:56:3c:b2:3f:29:21:ad:d6:8f:3c:61:
90:8a:33:f5:5d:fe:3f:3e:34:e3:41:d6:d1:d6:5e:e5:f1:d2:
59:4e:88:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:45:07 2025 by rpki-client