Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/3WURBIbv2pyfll5m35B8LV3bVIU.roa
File: 3WURBIbv2pyfll5m35B8LV3bVIU.roa (raw, json)
Hash identifier: malLaAdE1Zkogy/K+bqwmjgZgK+d2SYtiy0R/Gq64QA=
Subject key identifier: DD:65:11:04:86:EF:DA:9C:9F:96:5E:66:DF:90:7C:2D:5D:DB:54:85
Certificate issuer: /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial: 0196EDC14C60AB90AFF348692556C3F26FF8
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/3WURBIbv2pyfll5m35B8LV3bVIU.roa
Signing time: Tue 20 May 2025 12:53:10 +0000
ROA not before: Tue 20 May 2025 12:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51720
IP address blocks: 31.3.144.0/22 maxlen: 22
37.228.120.0/24 maxlen: 24
37.228.122.0/23 maxlen: 23
37.228.124.0/24 maxlen: 24
80.70.166.0/23 maxlen: 23
80.70.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 May 2025 09:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:c1:4c:60:ab:90:af:f3:48:69:25:56:c3:f2:6f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
Validity
Not Before: May 20 12:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd65110486efda9c9f965e66df907c2d5ddb5485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:93:b7:e3:73:ab:3a:01:2d:e4:b1:74:31:36:
99:0a:86:7d:2f:28:53:0f:2d:13:52:d0:64:00:83:
1a:09:ef:82:1e:73:5e:9d:99:7c:fe:f7:58:68:ed:
49:6a:81:cc:02:9c:fd:93:10:f6:ce:13:1a:e7:bc:
b4:ff:44:d9:77:d0:b7:04:24:de:b5:dc:ee:7b:c8:
ca:70:0c:7f:97:cd:ac:8e:2e:4d:54:36:b4:83:b6:
36:cc:5c:73:e5:8f:c3:60:23:70:38:5a:40:06:87:
40:66:20:de:33:6d:b8:67:82:1d:51:66:3f:89:e6:
61:2e:dc:52:0e:0e:7c:fa:c8:a5:85:40:46:27:a3:
ab:73:83:fc:08:25:b7:f4:0f:68:dc:d0:5f:40:47:
81:ce:75:1b:6e:62:55:f4:0b:a9:bd:5c:12:0f:79:
2e:3b:16:0f:91:55:f4:f2:24:d3:52:84:02:06:76:
6d:90:1d:47:3a:26:d0:90:4e:5c:26:f1:b0:5c:88:
9f:29:9e:65:5a:2e:3d:80:31:18:d1:2b:93:78:32:
1d:89:6c:14:87:38:85:c2:b2:da:63:a3:86:74:c5:
6f:dd:4e:82:df:3a:e4:39:56:65:e3:d5:c2:3f:34:
52:e4:2c:28:af:0c:37:f9:74:ee:78:4a:ff:27:96:
39:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:65:11:04:86:EF:DA:9C:9F:96:5E:66:DF:90:7C:2D:5D:DB:54:85
X509v3 Authority Key Identifier:
keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/3WURBIbv2pyfll5m35B8LV3bVIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.144.0/22
37.228.120.0/24
37.228.122.0-37.228.124.255
80.70.166.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:52:96:7a:2e:30:73:b5:53:77:5f:12:32:42:85:20:1d:81:
67:e0:13:fc:08:23:03:cf:c2:50:7d:dd:64:2d:19:87:d1:b3:
7d:20:6e:04:aa:d1:7a:6d:32:bc:d8:4d:21:6b:f0:65:cb:e4:
63:2c:82:42:f1:08:2c:84:3a:21:66:2d:b4:9d:a5:d9:95:7a:
83:60:01:e4:31:bb:35:68:a1:3e:b4:03:3e:98:f7:ff:30:58:
8a:1f:41:42:c6:8e:83:9d:d3:60:0f:7e:95:c6:10:64:16:74:
01:ed:98:74:e8:3b:8f:f8:b6:90:3b:c9:60:cb:99:39:b8:3f:
67:53:ba:6e:ec:f2:22:84:b6:a7:67:7d:b5:89:96:1c:87:43:
3e:55:bc:3e:86:49:d9:72:6b:a9:4c:43:97:20:b0:72:34:6a:
cc:d9:21:8f:88:0c:78:03:2f:ca:79:c3:82:bf:06:b1:43:47:
88:23:f6:b7:83:e4:e7:b5:40:87:b8:b8:a3:8a:c4:0b:95:c6:
eb:52:45:62:98:64:ab:58:f0:02:82:83:ae:c9:60:2d:ec:f8:
d6:32:8d:57:51:bc:9e:d3:b4:8a:b4:21:77:b2:7d:cd:6f:20:
df:82:a2:61:88:d2:02:59:bb:4c:18:f9:7a:dd:21:e3:04:76:
8d:81:af:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:13:32 2025 by rpki-client