Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/3P6PDN9pRsh39rLZNCv2vWPmOdk.roa
File: 3P6PDN9pRsh39rLZNCv2vWPmOdk.roa (raw, json)
Hash identifier: UDZ3tgZUpKPLUraKh/bDdGNl/3acybPxZgXgIysR8c4=
Subject key identifier: DC:FE:8F:0C:DF:69:46:C8:77:F6:B2:D9:34:2B:F6:BD:63:E6:39:D9
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 0195F13705FF5C7B9C119958BF55C7693651
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/3P6PDN9pRsh39rLZNCv2vWPmOdk.roa
Signing time: Tue 01 Apr 2025 11:57:49 +0000
ROA not before: Tue 01 Apr 2025 11:57:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 176.98.176.0/24 maxlen: 24
176.98.177.0/24 maxlen: 24
176.98.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 12:36:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f1:37:05:ff:5c:7b:9c:11:99:58:bf:55:c7:69:36:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Apr 1 11:57:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcfe8f0cdf6946c877f6b2d9342bf6bd63e639d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:11:e2:ab:ba:07:24:29:df:22:bc:a9:b4:10:
30:84:d8:34:d9:84:8f:04:d4:5f:44:41:60:c7:de:
c4:a2:a8:4f:58:75:08:9b:86:ff:4d:02:fc:64:4d:
d8:88:60:c1:a3:6a:83:3f:bc:b9:74:5e:c7:69:3f:
7d:8e:aa:fe:69:1c:8f:3a:e3:28:42:e8:fe:88:b3:
ed:d4:9f:7c:40:11:ec:0d:a0:7d:b9:c3:ac:f7:92:
79:62:f0:4d:af:35:7a:cf:66:5a:c2:1d:be:50:77:
4f:e1:49:68:bf:62:85:bd:a8:db:d5:55:f9:bf:6b:
38:7c:fd:70:13:ab:3e:37:2b:87:f2:f1:e5:dc:e8:
d7:36:8c:59:f7:30:dd:65:7e:e9:9f:5d:79:44:c6:
00:98:a2:d4:9d:89:14:19:0a:ea:af:4a:44:ed:47:
c3:b1:57:4c:48:5c:13:5a:cf:51:c0:27:4d:69:04:
7e:73:e5:e8:e8:f5:bf:63:5c:98:b1:06:59:dd:6e:
e0:23:ae:9f:59:9f:8d:4d:a6:c0:40:ce:23:b9:df:
dd:53:b9:35:da:c9:f6:16:8d:2b:e3:16:44:5e:84:
cf:6c:35:23:5b:a8:6e:3e:9f:f3:4a:e6:cd:a7:73:
13:89:11:1b:82:54:9c:a0:f0:f9:dc:49:e2:b6:17:
99:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FE:8F:0C:DF:69:46:C8:77:F6:B2:D9:34:2B:F6:BD:63:E6:39:D9
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/3P6PDN9pRsh39rLZNCv2vWPmOdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.176.0-176.98.178.255
Signature Algorithm: sha256WithRSAEncryption
5b:0d:ee:65:db:26:3e:98:25:a1:8d:32:ca:36:e9:d0:75:fb:
32:35:73:3c:fb:c2:6b:a4:d5:7e:84:54:b1:88:6d:29:6a:38:
fc:42:93:d5:3c:70:14:c7:2c:73:1b:a1:e2:51:1e:7e:17:ee:
bb:6b:da:8b:37:53:fb:13:22:f1:c5:55:8a:cd:6d:e0:20:25:
9a:b2:6f:e1:a1:16:32:05:58:fa:a8:9a:e8:95:6e:d1:8e:4a:
8a:18:02:97:ff:4a:6b:b9:90:c9:75:a0:89:3c:57:f3:26:c3:
8c:fd:e4:31:37:71:fa:cf:aa:aa:44:a0:67:15:c7:9a:e7:40:
42:62:55:5b:c0:79:01:19:16:fb:78:73:de:17:1a:c0:8a:ea:
09:ae:64:b7:cd:ff:86:34:c3:00:cb:45:53:c9:4c:93:a3:40:
ee:1d:31:1a:d4:c6:46:fb:66:ec:7c:e2:71:37:51:70:a5:a7:
f4:da:b9:86:96:4e:b5:fc:23:34:b2:98:67:23:b5:76:87:e0:
08:1a:21:ee:20:d2:9c:61:6d:a2:a6:a2:d8:7f:da:3b:9e:58:
87:8f:3e:c3:18:69:f1:d8:b8:5f:7c:cb:8c:18:d5:a0:16:f1:
27:20:13:05:5f:c5:c0:dd:ec:43:54:e5:f8:a9:27:a0:2b:e2:
55:e6:e7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:07:46 2025 by rpki-client