Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137382e302f32342d3234203d3e20313437323239.roa
File: 3138362e3234312e3137382e302f32342d3234203d3e20313437323239.roa (raw, json)
Hash identifier: SwvFiqFX69ItSIeWBnUDOAHWNZN7mjXYmwwBQK5tA3I=
Subject key identifier: 01:A7:FE:03:FE:B3:9C:E0:B7:A4:EB:F0:E6:67:AD:50:CC:2B:3E:24
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: CCBBF67C3CBBF5AAFD1C6B6C2F538CBD87F426
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137382e302f32342d3234203d3e20313437323239.roa
Signing time: Thu 23 Jul 2026 09:08:45 +0000
ROA not before: Thu 23 Jul 2026 09:03:45 +0000
ROA not after: Thu 22 Jul 2027 09:08:45 +0000
asID: 147229
IP address blocks: 186.241.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jul 2026 11:16:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
cc:bb:f6:7c:3c:bb:f5:aa:fd:1c:6b:6c:2f:53:8c:bd:87:f4:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 23 09:03:45 2026 GMT
Not After : Jul 22 09:08:45 2027 GMT
Subject: CN=01A7FE03FEB39CE0B7A4EBF0E667AD50CC2B3E24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:97:77:cb:ce:5f:30:54:36:42:e5:7b:c2:b1:
43:a8:55:15:9f:e9:c2:92:c3:fb:a4:60:5b:6b:f0:
c7:02:8e:6b:e6:83:41:4d:95:da:c2:fc:54:ff:61:
49:fb:c5:a0:2f:85:d4:36:3b:86:85:29:92:24:c2:
01:9a:1a:eb:03:c0:98:7a:ca:6c:1b:0d:b9:a6:8e:
db:12:5f:09:e3:5e:9a:d9:18:d9:29:87:be:01:bc:
a0:15:7a:20:f8:3d:da:11:6d:50:69:27:9e:b6:9c:
b2:8e:47:10:a6:6a:24:e8:75:c4:ca:c6:12:d8:41:
ed:64:52:09:44:65:5c:91:1c:95:fb:7c:b8:85:ed:
f4:41:39:f4:84:a2:b7:68:28:1e:96:71:99:2f:98:
e2:8a:2d:83:2e:e7:c8:6a:6f:d5:9d:ce:50:1f:91:
36:2a:c0:48:16:b3:09:9d:5a:63:9d:ba:fb:a6:e1:
9c:fd:da:0d:a8:f3:d5:63:fe:4d:89:f9:a7:c5:97:
63:9e:82:d4:89:f7:0e:c4:4a:31:e7:96:e4:23:8d:
c3:02:b8:ea:30:26:07:c4:cb:33:65:5c:6d:6e:2f:
d1:48:b7:37:17:af:34:1d:a8:43:5d:23:2a:24:c0:
27:6b:04:3f:17:00:3b:64:a7:bd:7c:79:77:6a:06:
c0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A7:FE:03:FE:B3:9C:E0:B7:A4:EB:F0:E6:67:AD:50:CC:2B:3E:24
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137382e302f32342d3234203d3e20313437323239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.178.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:32:27:92:2d:01:73:06:80:db:73:80:ec:2b:76:7b:7a:f7:
7f:5e:f6:e1:17:02:a0:4a:50:ce:e9:40:7f:11:b9:cc:e4:d7:
b2:31:f2:48:01:fe:1d:e9:26:ee:0e:65:53:40:5e:e9:4d:20:
d5:cd:a8:0c:e8:15:f6:44:e1:14:3b:02:0c:4c:54:4a:1b:5b:
05:44:04:6e:ba:4a:72:8b:3f:c2:db:4a:0e:f3:89:c8:16:bd:
15:18:82:ac:ce:84:d3:e0:f8:f6:66:13:33:34:84:42:f3:30:
49:ef:e5:02:1f:7b:cd:3d:23:60:76:72:e9:99:d8:c3:63:dc:
06:1f:21:0c:60:93:ec:d6:43:27:bf:2f:85:85:fa:e4:5f:fd:
9b:d6:72:47:cb:59:ae:a3:c7:88:98:ae:e3:00:ab:a3:a1:e7:
70:0d:d5:24:8a:83:85:6b:1b:96:75:2c:25:5e:d3:82:b9:b2:
21:98:9a:78:e0:76:63:3f:d1:a3:8d:85:75:9b:bc:df:95:03:
3d:4b:6d:81:b9:5c:b1:2f:42:22:5b:82:cd:23:03:2f:3b:56:
11:19:d3:00:96:bb:1c:8a:cf:5e:37:7c:8e:1c:bb:84:23:3b:
b8:03:a9:c5:a6:f8:b4:1b:fc:8e:72:dd:ff:7e:1a:be:48:43:
73:b7:fe:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:24:56 2026 by rpki-client