Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e33332e32362e302f32342d3234203d3e20323135323837.roa
File: 3138352e33332e32362e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: tYkYdHL8NlGSh9YWJXhrrILX+lge40HMqIuppLMChfo=
Subject key identifier: 79:91:DA:B9:D1:3F:E9:EF:5E:57:4A:6C:7E:44:DA:29:29:18:C2:1E
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 19F47C764B500B33C5CD60FD2B3BC42B4E039C54
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e33332e32362e302f32342d3234203d3e20323135323837.roa
Signing time: Fri 23 May 2025 12:37:22 +0000
ROA not before: Fri 23 May 2025 12:32:22 +0000
ROA not after: Fri 22 May 2026 12:37:22 +0000
asID: 215287
IP address blocks: 185.33.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:f4:7c:76:4b:50:0b:33:c5:cd:60:fd:2b:3b:c4:2b:4e:03:9c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: May 23 12:32:22 2025 GMT
Not After : May 22 12:37:22 2026 GMT
Subject: CN=7991DAB9D13FE9EF5E574A6C7E44DA292918C21E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d2:4b:19:b8:11:31:fc:5d:1c:15:a2:c6:81:
0a:fd:cc:70:ae:80:07:30:ef:3a:e6:4b:3a:45:e0:
0a:1a:59:74:b4:02:aa:2a:b4:14:93:f7:91:b3:17:
00:67:76:61:57:cd:f5:be:51:e8:e6:82:53:eb:2c:
d3:c3:37:b8:70:1f:81:0a:1e:f4:ae:10:f8:82:84:
ef:99:b6:be:d7:19:6a:37:93:33:7d:11:42:ed:00:
d3:5e:d8:ad:b4:69:f9:7e:61:c2:cf:44:13:f0:21:
13:45:7f:3a:cb:7a:fe:99:12:70:18:7d:c2:af:e4:
8c:18:8c:09:1b:67:2c:0b:01:36:49:e5:a8:80:31:
dc:b1:6c:95:5e:92:ba:65:b7:4a:d4:87:e1:3b:30:
b4:27:03:5c:78:4c:55:9d:b7:61:56:a7:39:ee:d6:
3f:55:e2:1d:0d:43:c1:d0:40:30:94:e9:12:4f:79:
cb:19:10:82:f9:3e:45:65:ae:bc:24:ca:72:73:94:
fa:53:a0:eb:f3:b9:e1:9e:5e:a6:d5:77:0d:67:01:
b8:e5:75:d8:03:b3:4f:2a:6f:8a:d0:0c:da:55:31:
68:d0:7f:6c:09:e2:d8:60:03:7f:0d:4a:d5:63:9c:
d2:1b:fc:a4:5f:97:20:07:ad:61:99:20:f8:41:0a:
fd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:91:DA:B9:D1:3F:E9:EF:5E:57:4A:6C:7E:44:DA:29:29:18:C2:1E
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e33332e32362e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.26.0/24
Signature Algorithm: sha256WithRSAEncryption
77:72:aa:07:1e:1f:59:42:2e:ae:9f:41:84:84:56:04:d2:52:
e8:f5:97:04:8d:90:69:a2:ab:81:f0:38:d6:c9:dd:8e:9e:99:
f1:43:e5:7d:24:a0:e3:97:f8:04:af:f9:8a:c2:3c:50:24:31:
fd:e7:45:df:f8:35:5f:0f:5b:89:df:dd:f2:da:a3:a2:02:99:
7a:35:ee:e8:ec:e1:19:27:4a:40:09:1f:80:59:2f:8e:86:e0:
2c:17:e4:d8:8a:3a:3c:8d:f7:b4:00:5e:aa:c3:cf:16:99:6a:
b7:80:9a:c8:a8:03:46:60:e9:cb:93:6d:97:22:28:6f:ba:66:
6e:16:11:be:7d:63:13:15:e9:f0:db:6d:17:1c:1c:42:38:73:
85:d9:5c:1f:0f:af:56:e6:a0:ae:23:eb:d1:86:fb:00:aa:ce:
c6:b5:dc:f4:45:81:3f:fc:82:d3:7a:67:89:2b:51:2a:02:68:
19:88:e0:75:34:54:b4:bd:f9:30:8a:21:3a:e0:15:58:a2:00:
4e:37:3f:c3:23:63:a8:ea:aa:6a:0d:b0:1e:3e:38:4c:c5:27:
f1:d2:ef:1c:c6:31:73:7e:66:b1:96:e2:2e:c8:1b:62:10:8d:
60:3d:6f:85:6a:35:5f:3a:05:9f:42:f0:4d:22:d1:55:d8:23:
54:ed:a2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:10:37 2025 by rpki-client