Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/3GY3y64_QstIRCc1zTMZnUUS_Cc.roa
File: 3GY3y64_QstIRCc1zTMZnUUS_Cc.roa (raw, json)
Hash identifier: coFtsYk9c3l4X2vlI/H0NvKTaGc6JsxOkdyhDBQJcfs=
Subject key identifier: DC:66:37:CB:AE:3F:42:CB:48:44:27:35:CD:33:19:9D:45:12:FC:27
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0197040179AB13B0602AF4F63389A4BD53C8
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/3GY3y64_QstIRCc1zTMZnUUS_Cc.roa
Signing time: Sat 24 May 2025 20:34:54 +0000
ROA not before: Sat 24 May 2025 20:34:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201813
IP address blocks: 2a06:5fc7::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 27 May 2025 09:51:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:04:01:79:ab:13:b0:60:2a:f4:f6:33:89:a4:bd:53:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 24 20:34:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc6637cbae3f42cb48442735cd33199d4512fc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e6:67:a7:3e:60:3e:44:f0:ae:b2:86:87:0b:
1d:ef:31:42:31:af:5c:b3:4f:1f:74:8c:57:8b:d1:
9a:86:11:56:81:b7:50:7f:37:cf:73:28:00:0e:55:
d9:29:d9:f3:ef:25:af:eb:37:65:0c:41:e4:41:d1:
10:05:13:3a:7c:1d:f0:3c:f0:dc:86:16:c7:d3:8d:
41:c7:8e:42:6a:cb:7e:08:25:c8:71:34:a6:7f:d9:
e8:8a:85:80:89:c3:6a:35:06:a3:36:bc:5d:5a:13:
9e:2f:9c:3d:6a:33:40:22:f5:b9:9a:91:b7:bf:65:
b8:ec:dd:8e:2a:68:ae:ca:c9:dd:a7:9e:f4:cb:4f:
c3:92:12:6b:c5:00:c1:9c:9c:1f:6d:d7:06:4a:a2:
48:25:bf:cf:7f:18:e9:47:0c:5b:11:35:39:bd:fb:
a3:7f:f3:ae:49:7a:19:f0:5c:26:13:63:d1:82:a8:
93:5f:3a:43:11:f4:b4:8a:e9:0b:9f:7a:57:96:df:
1a:fd:fe:55:21:e2:86:6a:ea:c8:04:f2:53:51:b1:
f2:75:f5:a4:45:9d:52:73:9c:08:32:73:8a:99:96:
b5:59:e4:db:5f:7b:ee:6d:ae:ae:4b:fa:7a:b7:18:
70:bf:d4:b6:5d:e1:9d:27:e9:27:d2:ca:82:6f:9a:
19:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:66:37:CB:AE:3F:42:CB:48:44:27:35:CD:33:19:9D:45:12:FC:27
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/3GY3y64_QstIRCc1zTMZnUUS_Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5fc7::/32
Signature Algorithm: sha256WithRSAEncryption
05:f1:7e:7b:85:66:05:80:0a:df:c2:e1:37:ac:2b:65:40:cf:
f3:3d:74:8c:6e:9f:fa:89:21:eb:f2:ce:c8:6c:0b:06:53:a4:
12:20:24:15:3e:a3:ba:67:9e:58:9e:b2:0a:7b:c7:bc:b9:8b:
4b:48:17:76:59:13:fa:73:cb:21:5b:05:68:28:85:f2:28:4d:
d9:d5:f2:c6:bb:bd:9b:12:27:9a:b2:02:a2:7e:7d:c5:0a:e9:
ef:32:2e:31:6f:b8:6d:45:0d:d8:79:84:d5:d6:e7:c1:0f:96:
2d:ef:af:bd:3e:82:56:34:56:db:00:69:2c:3b:5a:dc:52:71:
75:cf:28:ab:ce:84:5e:6d:c3:99:b4:cf:d9:06:04:8c:6a:ee:
36:c6:6c:33:3e:04:b6:20:95:ce:fe:bb:a9:51:85:47:bb:a6:
24:72:e7:78:9a:41:13:dc:31:c9:95:e4:87:5e:3c:87:a6:28:
18:3b:07:10:48:05:fc:f1:77:0f:8e:e4:75:7d:b6:33:a2:71:
d5:e5:8b:78:ab:9a:fe:1e:0e:31:5c:cc:65:4a:34:26:d9:a3:
c3:6d:5f:9f:6f:77:e2:22:5d:e6:4e:34:a1:3b:8d:6c:50:a2:
3f:de:ba:2c:5c:36:b0:69:b9:11:9a:eb:f0:88:58:33:12:6f:
05:5a:94:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:24:28 2025 by rpki-client