Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130352e302f32342d3234203d3e20383334.roa
File: 3138352e3234302e3130352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: itae/sF7DxlDGT9FEMRRcq0GCCU4LuJ7zIEdj9jY9Tk=
Subject key identifier: 6D:A4:13:6B:1E:85:29:A3:28:78:F8:82:C4:D0:94:83:DE:9F:D1:E0
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 09BE34269B544763FA3989B965174C9D5048F95C
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130352e302f32342d3234203d3e20383334.roa
Signing time: Mon 27 Jan 2025 10:58:37 +0000
ROA not before: Mon 27 Jan 2025 10:53:37 +0000
ROA not after: Mon 26 Jan 2026 10:58:37 +0000
asID: 834
IP address blocks: 185.240.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 14:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:be:34:26:9b:54:47:63:fa:39:89:b9:65:17:4c:9d:50:48:f9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Jan 27 10:53:37 2025 GMT
Not After : Jan 26 10:58:37 2026 GMT
Subject: CN=6DA4136B1E8529A32878F882C4D09483DE9FD1E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:00:de:66:81:b1:72:83:6e:95:5f:4b:1a:72:
42:f8:03:6c:25:63:e3:f6:6e:1d:68:03:6f:e1:b7:
71:de:6e:e1:17:8d:16:25:db:73:93:2e:08:cb:df:
dc:a5:77:86:3c:5c:ab:88:1a:69:fe:df:7d:69:1c:
a9:43:17:6c:b8:6e:4b:0b:c5:0f:f0:fd:13:35:a6:
e2:f4:3c:1d:11:93:24:91:bc:11:21:95:ab:49:c0:
5f:96:3f:33:49:29:96:ed:36:a6:7b:2d:19:c1:6f:
b4:33:00:47:dd:f5:1c:c1:16:4d:e2:2a:44:73:f5:
9e:99:4e:04:65:6a:7c:5c:de:cd:6b:99:0a:bc:2b:
55:8c:0e:1c:8a:c1:a6:3b:92:25:bc:66:fd:33:81:
c6:68:52:5f:17:9d:28:60:0f:c8:58:e9:2c:a8:1f:
87:dd:6a:16:37:65:1e:18:97:5d:d3:e1:5d:91:0b:
4a:8f:09:15:2c:4e:6a:12:13:ec:6a:4f:73:26:7e:
bc:6e:47:b4:5d:43:19:b6:5a:4e:41:e6:a6:35:8b:
0b:bc:70:5a:fd:79:24:77:5f:02:53:a1:fe:4b:27:
22:54:67:27:7e:c1:f0:28:54:5c:e8:8b:b3:46:35:
02:3a:e3:7d:b0:6c:f9:36:85:fd:fc:fa:ef:67:4b:
02:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A4:13:6B:1E:85:29:A3:28:78:F8:82:C4:D0:94:83:DE:9F:D1:E0
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.105.0/24
Signature Algorithm: sha256WithRSAEncryption
15:df:07:10:68:e7:25:64:1e:98:70:8e:4b:54:54:41:7a:01:
7e:e0:83:22:1e:38:76:c6:cf:a8:e9:c7:51:c5:d6:0c:45:02:
87:f7:51:20:5c:00:3f:66:c1:5d:c0:78:76:cb:04:a0:6f:70:
95:b4:cb:71:74:6e:40:84:60:30:8f:d6:86:69:21:b2:f2:94:
6c:05:48:a8:84:79:bb:67:59:17:94:88:98:e0:49:8d:6e:d9:
b5:24:1b:3a:a5:8b:a7:25:02:8d:f3:6d:f0:3c:53:c7:06:21:
0c:be:bb:d3:49:38:2a:d4:ce:74:a6:c3:28:35:8c:90:b3:3c:
78:7a:a7:3f:02:08:9a:ec:02:0c:c9:6b:a9:26:80:90:f3:aa:
d4:30:fb:3d:b9:6c:9f:73:54:18:68:a9:b4:e0:26:f1:3a:1a:
8d:a1:d0:be:f3:9f:1b:6d:42:ae:e7:db:91:dd:af:80:34:83:
92:f5:47:d3:48:8b:f7:9b:7d:86:eb:3b:b3:7b:48:c9:73:af:
c1:51:9e:38:c6:0b:43:ec:b3:10:31:53:0c:4f:46:9b:67:5d:
9d:56:a7:61:15:61:0c:5e:fa:e1:6e:20:c0:dc:12:2d:f0:ee:
23:fb:e7:26:ef:ad:93:23:77:f5:7d:92:d3:6a:05:1e:e2:39:
42:80:08:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:03:02 2025 by rpki-client