Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/3bwk3SUmjsyf0gBxDc3cbdrj9nI.roa
File: 3bwk3SUmjsyf0gBxDc3cbdrj9nI.roa (raw, json)
Hash identifier: HHQcRSiSYylmxxnqYzHlOp8uRMwnwNs19hZnAAvOr6w=
Subject key identifier: DD:BC:24:DD:25:26:8E:CC:9F:D2:00:71:0D:CD:DC:6D:DA:E3:F6:72
Certificate issuer: /CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Certificate serial: 0195DB9C5227C4CA2B5C05F125127D46E6F4
Authority key identifier: 7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/3bwk3SUmjsyf0gBxDc3cbdrj9nI.roa
Signing time: Fri 28 Mar 2025 07:16:49 +0000
ROA not before: Fri 28 Mar 2025 07:16:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6461
IP address blocks: 185.181.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 06:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:db:9c:52:27:c4:ca:2b:5c:05:f1:25:12:7d:46:e6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Validity
Not Before: Mar 28 07:16:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddbc24dd25268ecc9fd200710dcddc6ddae3f672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:84:62:6a:28:01:c9:2d:5e:22:84:25:83:
eb:b6:25:3d:24:57:c3:8f:c1:bb:12:8f:c8:66:c7:
04:95:38:18:a0:07:a4:df:44:5a:f7:b5:13:09:db:
4f:a9:e9:ea:48:65:c5:09:b7:70:99:7a:c0:f8:75:
15:69:d4:28:05:04:72:7f:d9:a3:b6:ca:a7:02:eb:
e0:65:d4:66:14:ba:8f:9e:17:d6:5a:f8:91:82:4d:
3d:49:be:ab:66:22:6d:ce:8a:bd:2b:9a:54:c4:e3:
c2:92:0f:3c:b6:60:0e:e4:3f:1a:a4:0e:bc:c4:d7:
5d:a2:46:87:68:94:b4:ec:c1:c5:25:08:a8:35:5f:
eb:eb:0e:1c:64:64:09:e4:df:31:3d:f7:d0:3b:82:
65:d1:42:a0:10:dc:36:26:19:6d:06:9d:51:0f:5a:
3b:da:57:f8:c8:ad:8f:e2:60:69:ca:51:0c:58:74:
72:26:8f:7c:61:dd:d6:bd:fa:6e:db:e8:eb:69:d8:
6e:51:9a:1e:e5:c6:73:0d:24:ed:d1:d7:fe:9e:35:
30:88:f2:f7:0d:9e:42:91:ab:b9:ce:f3:22:27:b0:
76:f6:43:14:4d:ed:3f:b1:b1:7a:bb:61:ba:fd:0c:
4a:a2:c2:84:da:36:66:0d:e0:96:27:69:8b:ef:70:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BC:24:DD:25:26:8E:CC:9F:D2:00:71:0D:CD:DC:6D:DA:E3:F6:72
X509v3 Authority Key Identifier:
keyid:7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/3bwk3SUmjsyf0gBxDc3cbdrj9nI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.147.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:00:a1:43:c5:16:9a:d3:93:d8:50:45:40:6c:5b:f6:d7:d2:
f9:29:b5:f9:d9:75:96:ce:65:9e:fb:97:60:21:28:3d:17:3b:
45:4f:98:78:f9:9e:ff:b8:6a:24:39:f6:3f:d8:e1:b4:47:6e:
f2:66:4d:00:a6:a2:98:0c:55:4f:10:13:a5:de:2f:2e:37:7f:
95:77:b0:3e:ae:65:3c:61:bd:e3:8c:41:61:a1:f9:b7:72:05:
96:5e:10:44:df:fa:16:a8:81:0f:3a:58:e2:d3:43:b0:4a:5c:
0b:69:f9:e4:55:e0:52:61:a8:d4:22:41:35:11:f9:b4:a9:86:
08:ed:95:fc:4f:67:67:36:e1:d4:67:b3:3b:90:c4:2d:2a:37:
80:0c:f4:68:2e:9d:3b:bd:47:81:fd:f5:1e:3a:db:ae:52:ed:
9a:84:b1:f3:b8:77:c9:f9:f9:7d:b5:8d:40:f4:73:0f:81:2d:
d1:23:29:11:42:5b:cd:ca:5f:25:e7:c3:48:d7:1e:c9:c6:a2:
4d:aa:d4:0c:f3:1b:0c:57:a6:98:7b:93:5f:c7:08:6a:40:13:
3d:3b:40:13:16:a0:61:da:e4:dd:5f:c1:d5:36:2d:8c:07:48:
a7:17:01:9f:ee:34:b3:bc:dc:68:71:b7:87:5b:40:ea:c9:16:
48:6b:05:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXbnFInxMorXAXxJRJ9Rub0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMWJiMDM2ZGI0MGQ3OTlkODYxMTk4YTUyNDNiM2MwM2Q1
NmMyMGEwHhcNMjUwMzI4MDcxNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGJjMjRkZDI1MjY4ZWNjOWZkMjAwNzEwZGNkZGM2ZGRhZTNmNjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSGEYmooAcktXiKEJYPrtiU9JFfD
j8G7Eo/IZscElTgYoAek30Ra97UTCdtPqenqSGXFCbdwmXrA+HUVadQoBQRyf9mj
tsqnAuvgZdRmFLqPnhfWWviRgk09Sb6rZiJtzoq9K5pUxOPCkg88tmAO5D8apA68
xNddokaHaJS07MHFJQioNV/r6w4cZGQJ5N8xPffQO4Jl0UKgENw2JhltBp1RD1o7
2lf4yK2P4mBpylEMWHRyJo98Yd3Wvfpu2+jradhuUZoe5cZzDSTt0df+njUwiPL3
DZ5Ckau5zvMiJ7B29kMUTe0/sbF6u2G6/QxKosKE2jZmDeCWJ2mL73APlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN28JN0lJo7Mn9IAcQ3N3G3a4/ZyMB8GA1UdIwQY
MBaAFHobsDbbQNeZ2GEZilJDs8A9VsIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWh1d050dEExNW5ZWVJtS1VrT3p3RDFXd2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ZGE1YjMtMjRjNy00ZWU1LTk1ZGMt
YjA4ZGIzYzM2ZmJiLzEvM2J3azNTVW1qc3lmMGdCeERjM2NiZHJqOW5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ZGE1YjMtMjRjNy00ZWU1LTk1ZGMtYjA4ZGIzYzM2ZmJi
LzEvZWh1d050dEExNW5ZWVJtS1VrT3p3RDFXd2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubWTMA0G
CSqGSIb3DQEBCwUAA4IBAQAdAKFDxRaa05PYUEVAbFv219L5KbX52XWWzmWe+5dg
ISg9FztFT5h4+Z7/uGokOfY/2OG0R27yZk0ApqKYDFVPEBOl3i8uN3+Vd7A+rmU8
Yb3jjEFhofm3cgWWXhBE3/oWqIEPOlji00OwSlwLafnkVeBSYajUIkE1Efm0qYYI
7ZX8T2dnNuHUZ7M7kMQtKjeADPRoLp07vUeB/fUeOtuuUu2ahLHzuHfJ+fl9tY1A
9HMPgS3RIykRQlvNyl8l58NI1x7JxqJNqtQM8xsMV6aYe5NfxwhqQBM9O0ATFqBh
2uTdX8HVNi2MB0inFwGf7jSzvNxocbeHW0DqyRZIawVG
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:54:54 2025 by rpki-client