Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/3d7vGhcfsQ8oUnguhFQUjmPcHBY.roa
File: 3d7vGhcfsQ8oUnguhFQUjmPcHBY.roa (raw, json)
Hash identifier: /FMz4zUQWSHpEWID9JQ6Ut/AQBUocfyPlETaAiqoYkg=
Subject key identifier: DD:DE:EF:1A:17:1F:B1:0F:28:52:78:2E:84:54:14:8E:63:DC:1C:16
Certificate issuer: /CN=dfb8d9140502c9e035305189bf658234db14f54c
Certificate serial: 01975B0844341A785AD6AD858D7B52EAAC10
Authority key identifier: DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/3d7vGhcfsQ8oUnguhFQUjmPcHBY.roa
Signing time: Tue 10 Jun 2025 18:09:17 +0000
ROA not before: Tue 10 Jun 2025 18:09:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50489
IP address blocks: 212.104.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Jun 2025 11:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:08:44:34:1a:78:5a:d6:ad:85:8d:7b:52:ea:ac:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb8d9140502c9e035305189bf658234db14f54c
Validity
Not Before: Jun 10 18:09:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dddeef1a171fb10f2852782e8454148e63dc1c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3c:98:38:fc:5f:cf:15:d1:a0:e5:ad:78:76:
08:53:80:c2:f0:e8:23:48:9b:33:45:62:58:81:86:
c4:e9:92:ae:7f:da:2e:b1:9b:e6:d8:3a:fc:d6:31:
30:45:e3:18:8e:43:6f:64:4b:d0:3d:87:6f:6b:e9:
f8:1c:5e:4c:89:80:5d:43:75:7b:23:86:d3:db:b3:
66:08:04:9d:e8:9a:2c:d7:64:f6:59:2b:98:47:c1:
ee:32:ec:80:e6:d2:34:08:2d:9f:6a:75:55:ef:67:
ed:ba:c7:4d:db:d5:1e:6b:30:a8:7f:96:4b:83:d1:
a4:96:d2:81:3a:f9:12:5c:48:be:51:1d:41:54:d9:
ef:ab:eb:d6:20:15:82:5c:ce:3a:ef:92:e2:fa:81:
0e:e7:4e:10:6a:ea:7c:69:56:64:e6:1c:86:77:a1:
1c:f7:da:da:ac:f5:52:c2:51:8d:00:53:ad:e4:6d:
85:35:6b:fe:40:7a:0c:6d:5e:a7:57:22:e0:94:1e:
30:e8:30:e9:e2:49:75:84:f3:51:ba:c8:42:0c:e7:
0a:5d:96:c1:59:1a:b5:cc:21:66:94:e8:a4:8e:28:
70:f8:eb:2c:89:dc:f6:38:3b:d8:79:7c:9e:98:ff:
2d:02:0d:e5:28:42:78:e6:47:ae:37:b2:ad:42:0a:
89:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DE:EF:1A:17:1F:B1:0F:28:52:78:2E:84:54:14:8E:63:DC:1C:16
X509v3 Authority Key Identifier:
keyid:DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/3d7vGhcfsQ8oUnguhFQUjmPcHBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.104.134.0/24
Signature Algorithm: sha256WithRSAEncryption
17:aa:02:d7:a5:5a:83:50:af:8f:4c:ea:ba:dc:df:e5:41:3b:
0c:6a:79:46:7a:90:00:a0:54:3f:4d:43:09:30:f3:2c:5b:ed:
e4:d2:8f:fb:b3:1c:23:98:32:db:8d:c0:4f:80:c8:e2:76:05:
e9:67:76:2e:11:7d:0d:f1:eb:c6:5e:da:e8:cb:0b:3d:ab:8d:
4a:5a:ea:24:a2:24:da:34:71:65:80:1e:d9:15:a0:ba:67:54:
bc:8d:65:6a:74:6a:81:f9:39:e1:e9:e7:45:7b:67:81:14:17:
cb:2e:54:23:f4:ff:03:73:98:01:95:3a:b0:35:c1:fa:42:74:
57:38:fd:d8:ae:72:02:ba:be:59:15:ca:4a:24:55:ad:6c:9c:
89:57:e6:55:93:27:ea:31:8e:d1:fd:0c:9f:57:20:83:d6:d6:
a0:e4:f1:56:c3:86:de:57:6b:24:06:92:de:0b:3d:7e:f9:6e:
96:ae:b2:2e:42:2b:66:57:c6:c4:01:f9:70:70:0f:9f:d6:c8:
b7:76:42:a1:17:3e:c8:d6:68:b3:d0:71:e5:bf:8d:18:86:93:
ef:a1:16:e3:fd:2c:d4:a8:ba:26:a6:01:d5:28:85:5e:b8:8e:
39:48:d4:b6:03:f0:63:73:3f:f1:d2:f2:6d:aa:fe:43:7e:d2:
ae:82:fb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:26:55 2025 by rpki-client