Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/3v9E75C7W2SJupgqm0xPJjODBWc.roa
File: 3v9E75C7W2SJupgqm0xPJjODBWc.roa (raw, json)
Hash identifier: 4akVrGt+9Ixe2feSeF6fG4i/HK7KQ9kRF0uv3dJEaA8=
Subject key identifier: DE:FF:44:EF:90:BB:5B:64:89:BA:98:2A:9B:4C:4F:26:33:83:05:67
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 0197659512C157CF3831964E0E8D5DD766D6
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/3v9E75C7W2SJupgqm0xPJjODBWc.roa
Signing time: Thu 12 Jun 2025 19:19:17 +0000
ROA not before: Thu 12 Jun 2025 19:19:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213945
IP address blocks: 185.7.242.0/24 maxlen: 24
185.7.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Jun 2025 21:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:95:12:c1:57:cf:38:31:96:4e:0e:8d:5d:d7:66:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Jun 12 19:19:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=deff44ef90bb5b6489ba982a9b4c4f2633830567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:c5:b1:46:67:64:03:f3:8c:13:e3:8a:02:
ff:a2:48:83:60:5f:5a:3e:5e:ff:de:17:fc:41:ac:
b9:cf:86:f6:38:0f:a5:a6:cd:64:eb:ad:4c:59:8f:
46:45:39:71:1d:24:fb:ca:b0:92:ce:fb:33:c8:39:
8d:aa:90:e7:be:ee:3d:b5:57:aa:f2:f0:0e:b0:c1:
2c:8b:32:8b:23:2e:43:10:83:0f:c3:17:40:21:b0:
e3:b9:fb:90:79:1f:d0:2f:c5:fc:8c:b3:ea:14:e3:
59:f0:44:ed:40:14:2c:2c:05:85:bc:d7:2f:39:8d:
07:a2:92:1c:75:38:57:c5:8f:e8:18:13:7d:f7:b8:
51:38:aa:e4:b6:e5:d5:f4:4f:b6:f6:78:ce:59:8c:
83:7b:33:76:07:bb:d9:ed:26:4f:92:36:1a:fd:af:
df:c2:32:40:5d:10:48:72:6f:8e:4c:5b:45:1e:dc:
b6:33:cd:ff:f6:35:eb:74:9d:1e:d4:38:79:6d:69:
e5:d8:88:3a:fa:84:f8:71:5b:c0:7a:ce:da:1a:93:
61:d8:97:75:5c:32:c2:13:e1:e9:a0:46:90:67:b9:
e9:fa:27:69:ac:df:13:d1:6d:18:12:e8:0a:a9:fb:
fe:c9:32:48:3d:5c:b3:1b:27:87:f9:fb:40:7c:f0:
77:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FF:44:EF:90:BB:5B:64:89:BA:98:2A:9B:4C:4F:26:33:83:05:67
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/3v9E75C7W2SJupgqm0xPJjODBWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.242.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:df:8d:67:d4:51:3f:75:49:6b:5f:37:a4:cf:48:5b:4b:b4:
e0:3e:08:5a:72:fa:9c:f8:f4:89:a9:a2:e8:c0:a1:9c:f5:61:
06:30:62:da:c5:6a:37:29:a8:2f:3c:e1:10:7a:8a:2e:74:a3:
89:7d:09:94:eb:e1:41:74:09:42:be:38:d0:c2:ef:e6:ae:61:
43:c3:e6:aa:24:ad:aa:0b:b3:b9:36:eb:9b:49:56:e2:30:4b:
0d:94:ff:93:70:2f:c8:bf:90:a8:33:88:4e:1d:50:31:49:5d:
6e:cc:6c:9d:7a:fa:27:15:11:45:ef:52:de:44:d0:95:8a:a5:
92:43:c4:11:87:3d:18:f0:98:02:15:55:30:03:b3:bc:a6:0f:
5b:cd:25:aa:31:5c:45:47:b7:ab:95:14:47:07:ad:38:bf:2b:
ee:42:a2:0b:49:b9:c9:e2:ac:ad:3c:ad:bd:fb:05:2e:ea:9d:
29:ea:23:6d:42:23:a3:a6:d4:7d:bd:96:1f:a9:ce:2b:8b:5a:
5d:5c:90:b7:4f:6b:8b:ef:bd:83:01:8c:d4:18:3e:fc:51:52:
00:62:57:a5:43:9b:43:19:85:e7:40:ae:cc:a5:f0:af:78:d9:
39:e3:22:29:b8:b4:55:98:86:94:97:1c:26:0c:dc:dc:73:2b:
41:76:af:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:35:49 2025 by rpki-client