Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/3x891OocAe1-2pyBdPbHM1DAmEk.roa
File: 3x891OocAe1-2pyBdPbHM1DAmEk.roa (raw, json)
Hash identifier: zw7QZQl/MgxOAZsHZ8/HaVw8iC+OtoxDr3XKA4iQCDQ=
Subject key identifier: DF:1F:3D:D4:EA:1C:01:ED:7E:DA:9C:81:74:F6:C7:33:50:C0:98:49
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0194A2AC45F5B5895E8F0CE07CBE0F4E3A04
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/3x891OocAe1-2pyBdPbHM1DAmEk.roa
Signing time: Sun 26 Jan 2025 12:53:06 +0000
ROA not before: Sun 26 Jan 2025 12:53:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 213.18.196.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 11 Mar 2025 13:43:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a2:ac:45:f5:b5:89:5e:8f:0c:e0:7c:be:0f:4e:3a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jan 26 12:53:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df1f3dd4ea1c01ed7eda9c8174f6c73350c09849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:9d:f2:8f:dd:b4:fc:60:ef:3a:75:f6:02:
8e:fd:79:0a:03:b5:5e:82:ed:77:9a:05:ff:53:71:
5c:89:5f:e6:a5:11:87:dc:8a:32:99:2f:30:31:de:
2f:31:66:f7:f5:e7:33:68:3e:41:03:4e:ba:2a:72:
35:99:61:fb:69:33:ea:c5:ff:fb:d5:fa:4c:42:58:
0f:7d:50:37:48:d8:d0:19:df:84:56:b1:01:b8:ff:
0c:9d:ad:02:52:39:13:b1:b3:e3:71:dd:9e:20:d9:
66:2a:6b:e8:12:0c:70:9a:16:53:bd:b6:be:fb:b6:
25:0a:c4:b3:0f:5e:7d:88:15:13:99:07:54:36:d2:
9b:a0:6a:37:a4:f7:41:08:0c:ef:ac:44:c4:a2:e5:
77:c2:ca:5e:84:7a:d0:54:31:7f:aa:a1:9e:c5:65:
cb:89:7b:eb:53:5b:ab:f5:b4:98:25:3a:6e:f3:13:
26:f4:4a:56:ae:f9:8f:9f:23:cd:d4:1b:55:69:a5:
6a:4e:67:7b:79:eb:94:2c:69:5c:4d:fd:87:df:be:
db:af:91:17:d6:3e:03:70:2b:ea:51:a4:d7:da:0a:
48:ee:68:5a:85:0c:0f:71:c1:27:7f:31:37:f6:96:
62:1a:a4:c2:f6:ed:a1:c3:ea:c2:2c:51:c2:77:43:
58:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1F:3D:D4:EA:1C:01:ED:7E:DA:9C:81:74:F6:C7:33:50:C0:98:49
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/3x891OocAe1-2pyBdPbHM1DAmEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.196.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:e5:5b:86:ea:d9:55:fc:8b:5b:b7:09:90:72:dc:35:a0:52:
06:57:6c:8c:5b:5b:f5:75:be:9c:1c:cd:eb:e1:37:9f:72:25:
ef:c8:89:53:9a:3c:2c:86:97:db:6f:17:fd:b1:61:63:a8:55:
29:bf:90:64:a5:3d:21:19:6d:de:2b:5a:01:22:67:45:63:39:
1f:a9:1d:55:e2:d9:ee:38:88:f7:9b:14:72:4a:aa:ef:0b:2f:
d2:7e:30:7a:f7:3b:56:65:01:3c:96:68:31:94:5b:07:d1:a2:
e5:e1:34:df:fb:55:3c:4f:93:3e:c8:7b:57:aa:63:66:7b:b2:
d4:d2:10:20:ed:01:87:f0:f4:96:7f:fd:6e:ee:fe:b2:12:0b:
9e:96:91:27:ac:d6:86:b9:4f:47:72:66:0a:41:83:39:f0:9f:
92:b0:ba:5a:6e:ff:61:a9:9e:b7:9c:e0:30:c2:19:60:b7:96:
92:81:19:4e:29:18:15:8b:e0:0b:69:e7:62:4f:69:8d:04:73:
33:1f:ca:33:25:a3:1f:df:d5:0d:b2:7e:2e:9c:de:e7:20:e9:
f5:04:d3:d6:20:e1:ea:62:24:f9:fb:db:a6:83:2e:0e:84:a7:
95:5a:72:58:f2:bc:8d:08:cf:c0:e5:3b:e1:a5:f7:5a:40:07:
ec:24:d5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:48 2025 by rpki-client