Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3drr08t1PQqG426b4VUaG6eKTIE.roa
File: 3drr08t1PQqG426b4VUaG6eKTIE.roa (raw, json)
Hash identifier: O9yf7zClDKoIS+Um+6P/Eyn+0u6dP8+NgnJgFEkW4eI=
Subject key identifier: DD:DA:EB:D3:CB:75:3D:0A:86:E3:6E:9B:E1:55:1A:1B:A7:8A:4C:81
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019609479BC43D2EE003DF763AB4AD6F4F9D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3drr08t1PQqG426b4VUaG6eKTIE.roa
Signing time: Sun 06 Apr 2025 04:06:49 +0000
ROA not before: Sun 06 Apr 2025 04:06:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47263
IP address blocks: 5.231.47.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 13:27:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:47:9b:c4:3d:2e:e0:03:df:76:3a:b4:ad:6f:4f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 6 04:06:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dddaebd3cb753d0a86e36e9be1551a1ba78a4c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:07:0b:12:5d:4c:e6:f3:40:55:a4:fb:08:74:
c7:5d:cc:29:cb:37:48:79:5a:12:e3:53:d4:ad:21:
12:a0:25:05:32:e0:5f:0d:52:4d:bd:b5:5e:81:68:
4b:b4:e0:99:40:8c:3f:08:24:6d:02:17:fe:25:b0:
4e:c2:e6:5b:a0:d3:38:b1:47:22:92:88:cf:0c:5f:
4b:95:e7:e1:d5:0b:41:59:cf:39:c3:60:72:1f:36:
82:53:6f:12:10:24:14:36:6d:9b:83:02:b3:e5:75:
cf:a2:ad:cd:72:9b:cb:10:48:db:9a:04:44:b3:a4:
58:0a:7f:a7:c7:cd:b7:ed:2b:f8:28:69:b1:33:38:
60:b4:86:36:c5:a1:9c:33:00:3b:0c:1f:62:eb:1c:
90:16:88:b3:aa:98:c8:fa:b6:17:e0:d3:37:5f:d2:
04:9a:3f:71:56:17:a0:d9:66:36:47:32:52:40:cc:
bb:78:b8:67:d3:13:b6:0c:13:1d:19:48:d8:24:07:
ec:81:9f:09:ae:de:3d:27:03:66:5d:08:6f:0d:ab:
f1:0d:1a:df:c5:5e:cb:f0:15:ac:86:66:6e:e7:06:
7d:b3:62:c8:8a:b4:a6:d4:ab:f4:6f:a9:56:33:a9:
22:69:eb:b3:71:05:b3:49:38:f0:98:92:47:49:39:
19:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DA:EB:D3:CB:75:3D:0A:86:E3:6E:9B:E1:55:1A:1B:A7:8A:4C:81
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3drr08t1PQqG426b4VUaG6eKTIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.47.0/24
77.90.37.0/24
Signature Algorithm: sha256WithRSAEncryption
18:31:39:44:a2:fd:ed:b7:ee:20:d7:09:d9:8d:23:c6:17:e4:
89:c2:c9:4a:a4:a2:80:ab:e0:76:ec:11:c2:44:bc:4e:14:f0:
01:77:be:23:5e:be:9e:f8:4f:cd:67:23:71:6a:0d:e6:61:6f:
fc:0f:64:41:d2:dd:47:59:2c:d3:b5:dd:c2:34:1c:19:45:02:
85:da:a4:7a:5b:c5:c1:81:c3:19:b9:19:0c:8f:d3:37:48:fe:
72:a7:3b:eb:93:f1:25:e6:33:40:50:d5:f7:1c:b6:b4:8b:2e:
0d:e9:4f:66:ce:5b:5a:40:ff:ce:f8:b0:d5:38:fe:5b:5b:eb:
9c:b2:52:5e:30:90:b3:c7:07:48:7b:e5:d4:be:3a:e7:1f:93:
81:9e:ec:0a:06:51:0c:c1:51:0b:a3:86:95:0e:ff:60:86:25:
a2:5e:ef:85:6b:fc:b4:15:2e:91:71:74:b4:9c:85:0f:03:6c:
9e:72:21:36:9e:30:49:27:70:08:a9:a5:06:48:09:b4:e6:9d:
b6:bf:b5:9a:72:ca:69:97:30:ba:35:60:31:76:c6:6a:62:79:
1a:5b:e5:87:cf:52:bf:50:2b:dd:6a:73:60:8e:bd:d1:7d:c3:
6c:49:9d:42:19:08:08:ef:f9:ec:78:83:e0:c1:d8:93:28:41:
b6:4d:ab:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:56:27 2025 by rpki-client