Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3aQrb-60NNZtOO6eerwZf5nL6dE.roa
File: 3aQrb-60NNZtOO6eerwZf5nL6dE.roa (raw, json)
Hash identifier: gh1Rp8Gp4cR+pLAzMzTMa4uakOHbaYLPSdwpVwztUwU=
Subject key identifier: DD:A4:2B:6F:EE:B4:34:D6:6D:38:EE:9E:7A:BC:19:7F:99:CB:E9:D1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195482503918E345C110430A336B02FAD15
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3aQrb-60NNZtOO6eerwZf5nL6dE.roa
Signing time: Thu 27 Feb 2025 16:02:20 +0000
ROA not before: Thu 27 Feb 2025 16:02:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
77.90.3.0/24 maxlen: 24
77.90.28.0/24 maxlen: 24
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.30.0/24 maxlen: 24
89.144.31.0/24 maxlen: 24
89.144.33.0/24 maxlen: 24
89.144.46.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.50.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.53.0/24 maxlen: 24
89.144.54.0/24 maxlen: 24
89.144.55.0/24 maxlen: 24
89.144.58.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Feb 2025 18:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:48:25:03:91:8e:34:5c:11:04:30:a3:36:b0:2f:ad:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 27 16:02:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dda42b6feeb434d66d38ee9e7abc197f99cbe9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d9:15:18:a6:cb:fd:f1:95:5f:b3:c8:bc:63:
eb:db:08:02:26:bc:21:b7:fd:c2:87:5f:8b:b6:8d:
9f:4d:e4:99:9e:2f:de:db:81:b0:02:2d:1f:55:ae:
c5:8f:b8:5c:aa:d1:b3:b9:64:21:82:82:23:5a:41:
28:d4:80:53:fe:2c:96:f5:18:ea:37:ec:41:ef:b8:
07:38:8f:7d:3b:10:06:32:ed:fb:aa:96:45:fd:c4:
ef:70:c4:85:02:81:8b:1c:4e:d2:5e:b4:d6:f6:12:
f0:ca:a0:6d:bc:1d:42:57:6a:8c:e1:7a:1f:95:63:
24:2d:d0:1a:ed:e4:cf:41:8b:43:8b:96:de:78:dc:
ad:53:73:97:ee:97:a4:1a:9a:2b:45:aa:fc:dd:95:
99:4d:ea:a2:95:73:7a:09:2a:a3:fd:82:e6:3a:bb:
ee:4e:be:b3:e6:33:86:c2:37:88:c8:39:d8:e2:93:
83:d5:79:7c:20:84:f7:1b:1a:67:ee:e7:47:1d:a1:
c4:12:c2:4d:51:f6:d3:99:63:8f:77:7e:19:fd:27:
8e:b1:54:82:bf:24:c7:33:24:bf:99:60:8b:e4:bc:
14:bd:72:0d:5b:0a:fe:af:5d:b1:ca:a4:bc:30:21:
6f:19:71:04:7a:70:30:e0:f4:68:e3:db:36:ea:e6:
5d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A4:2B:6F:EE:B4:34:D6:6D:38:EE:9E:7A:BC:19:7F:99:CB:E9:D1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3aQrb-60NNZtOO6eerwZf5nL6dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.232.0/23
77.90.3.0/24
77.90.28.0/24
89.106.92.0/22
89.144.30.0/23
89.144.33.0/24
89.144.46.0-89.144.55.255
89.144.58.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:1b:b5:79:e0:17:b3:12:da:f6:a4:33:73:fb:26:f7:47:cd:
77:5a:16:62:6d:d4:dd:1d:4b:3e:9c:21:f9:48:24:37:44:cd:
e4:ce:9e:19:5c:64:61:6d:7b:56:8b:2a:97:2a:cf:50:74:ea:
ad:72:1c:3e:97:c8:b1:8d:ec:69:6a:95:39:53:8f:7f:64:99:
18:6c:76:64:18:5c:fb:5a:87:f6:f4:59:6b:b1:84:46:4e:93:
a1:b6:60:09:28:12:38:ff:72:e9:db:48:68:0b:28:0b:1c:fd:
bd:a1:c4:89:7b:93:16:69:1a:66:51:1b:eb:99:24:0d:06:4c:
89:b2:fb:38:87:00:66:fe:25:a1:cf:38:60:29:bf:7b:bc:24:
ed:07:c4:e7:2a:97:c1:b6:12:65:60:4e:98:0e:d6:9a:57:94:
6c:58:46:0f:66:1d:03:19:2e:57:a5:60:58:dd:02:9e:40:48:
8b:c8:39:17:50:ee:4d:ac:7f:7b:95:a5:83:6e:b8:97:3d:9f:
9f:02:c0:0d:a0:e9:d2:12:36:d3:fb:05:1b:61:e7:e9:5c:89:
a6:99:a7:8f:3a:f8:70:4d:61:8f:29:41:ad:25:f2:4c:32:34:
6a:91:87:a4:e5:59:08:a1:54:eb:16:c8:c8:4b:88:5e:07:45:
17:01:78:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:20:24 2025 by rpki-client