Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/3Jl66uiLXCzDrlILzJWXlUi8aas.roa
File: 3Jl66uiLXCzDrlILzJWXlUi8aas.roa (raw, json)
Hash identifier: +Z7J3m9S4ViaYf7NUO2pfPuski+h09Ac+zHBVyhn2A4=
Subject key identifier: DC:99:7A:EA:E8:8B:5C:2C:C3:AE:52:0B:CC:95:97:95:48:BC:69:AB
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019426D992E215150D2AD1BADDFB24FC6290
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/3Jl66uiLXCzDrlILzJWXlUi8aas.roa
Signing time: Thu 02 Jan 2025 11:49:40 +0000
ROA not before: Thu 02 Jan 2025 11:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216324
IP address blocks: 2a03:5840:ff::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 09 Jan 2025 16:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:92:e2:15:15:0d:2a:d1:ba:dd:fb:24:fc:62:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 11:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc997aeae88b5c2cc3ae520bcc95979548bc69ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ea:4f:b9:ee:db:87:f7:33:83:b2:c6:a3:84:
02:26:a6:45:ff:f3:16:5a:24:0a:8c:08:00:f6:8e:
cb:ff:4f:ca:58:92:6b:28:45:c8:db:17:1c:27:7f:
89:0c:5a:d7:7c:59:1a:01:78:ea:de:b3:04:1b:64:
cf:90:21:0c:3d:03:c5:db:38:ad:11:81:5e:bc:33:
f0:31:e6:44:b5:5e:d1:16:e1:5c:27:5f:d6:c6:f8:
ce:9b:5c:02:3b:69:b3:6c:07:c1:5d:de:0f:b2:20:
63:65:5b:35:02:8b:0a:bd:14:86:75:df:1d:8b:83:
b9:72:67:4d:68:28:11:16:1e:b2:1b:9a:11:6d:1b:
98:33:e9:63:31:87:bc:12:3d:8b:e2:70:34:24:a9:
15:d2:da:12:c3:b5:0f:a4:77:36:35:04:cb:47:da:
5f:ae:c1:6a:76:00:44:4e:f3:3f:c8:67:04:a2:1f:
a9:35:38:19:b9:e9:83:41:f0:ba:2c:92:52:7d:e5:
9f:1b:9f:91:ec:5b:6c:55:f0:f7:2f:e7:f2:16:c9:
69:ad:28:7c:23:65:b8:2a:91:2e:4b:38:1f:e1:2f:
92:c0:44:69:46:2f:af:f3:5c:0c:37:1a:e2:36:cb:
41:8e:6b:ca:bf:82:d8:ce:7e:8a:ca:c4:8b:18:1b:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:99:7A:EA:E8:8B:5C:2C:C3:AE:52:0B:CC:95:97:95:48:BC:69:AB
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/3Jl66uiLXCzDrlILzJWXlUi8aas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:ff::/48
Signature Algorithm: sha256WithRSAEncryption
77:ec:90:01:2b:57:db:83:bb:5b:21:04:55:88:6d:bb:e5:60:
f8:b0:a7:7b:ee:14:e7:a4:96:dd:24:ac:77:b3:60:4b:f5:9b:
ac:c8:89:e1:c1:33:e0:56:c7:4e:85:04:3d:82:9a:db:a3:11:
94:71:2b:6c:3a:b1:59:32:32:c7:2e:90:62:d6:fb:63:65:ea:
f9:63:7e:06:e0:48:fc:7c:80:5b:9d:93:71:62:e0:a2:db:27:
84:26:e2:7c:69:84:fe:c9:8e:49:79:a5:19:e5:b5:91:68:99:
57:ab:06:ac:77:65:f1:7a:2e:44:14:04:44:08:4e:51:eb:48:
3b:d9:00:4c:0f:c3:4d:de:04:1b:dd:dd:0b:b4:2d:90:25:2c:
4b:ff:6d:83:e3:ef:02:a2:2a:2f:e5:60:c0:f4:f6:1e:95:29:
b0:70:a8:cf:15:63:3d:3e:29:75:d5:86:02:cc:72:08:3a:a3:
03:f9:dc:b8:fa:0a:76:12:5b:8b:37:db:9c:cc:ba:3b:42:ab:
31:82:75:f7:94:88:19:d4:76:eb:04:96:78:08:28:cb:d6:ef:
20:b2:ab:7d:0b:2a:41:ef:14:f5:97:fe:21:25:40:ed:44:af:
70:64:76:8f:d3:66:8c:a0:2c:06:c7:48:58:87:6d:60:3f:7b:
96:05:a1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:19:10 2025 by rpki-client