Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3MHBSDPqmMYGPowsr4nRc21kx2Y.roa
File: 3MHBSDPqmMYGPowsr4nRc21kx2Y.roa (raw, json)
Hash identifier: 4vAymSfG1zrq6f6VNgLIlgD99KN1b6g5vo3DO7EqhL8=
Subject key identifier: DC:C1:C1:48:33:EA:98:C6:06:3E:8C:2C:AF:89:D1:73:6D:64:C7:66
Certificate issuer: /CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Certificate serial: 018CCA29C5527858E265B92DCA101916B7BA
Authority key identifier: DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3MHBSDPqmMYGPowsr4nRc21kx2Y.roa
Signing time: Tue 02 Jan 2024 12:33:04 +0000
ROA not before: Tue 02 Jan 2024 12:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196816
IP address blocks: 94.143.24.0/21 maxlen: 24
185.21.32.0/22 maxlen: 24
2a01:4480::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c5:52:78:58:e2:65:b9:2d:ca:10:19:16:b7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Validity
Not Before: Jan 2 12:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcc1c14833ea98c6063e8c2caf89d1736d64c766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d8:7f:36:cf:36:d0:6b:1c:bc:e3:46:35:4a:
ba:18:2f:6e:27:1f:84:66:50:cc:70:fa:ec:40:78:
5c:cc:c2:76:fd:30:e9:f5:56:cd:bc:64:b5:40:c2:
47:7a:0e:bb:ce:6f:48:a0:9f:25:32:29:08:22:6a:
43:8d:63:26:3b:fc:0a:40:ab:48:8d:e9:cc:f6:2c:
9c:a3:89:1e:79:d3:8e:14:bc:85:9d:8d:cb:62:42:
7e:16:5c:7b:1f:64:b9:0d:59:56:95:14:4e:7c:8f:
10:5a:eb:eb:18:e4:7c:49:19:88:b4:4a:a3:7c:3f:
21:68:a3:2b:d2:6e:e9:58:b1:71:e5:33:f8:87:7f:
69:1a:c0:ae:fe:68:a3:a6:1f:ee:6d:39:96:99:6e:
03:31:4d:cd:e5:14:14:7e:8b:48:50:99:f6:3b:86:
17:41:ac:ad:bf:43:5e:7b:d2:4f:16:a7:c3:8f:56:
d1:04:be:fb:10:de:46:10:42:0f:55:69:e3:af:29:
48:3e:d4:7b:56:cb:f4:8f:77:30:c7:de:bf:9a:c7:
0f:2d:0b:d6:5a:3d:a4:53:01:62:c8:29:a8:62:c8:
4c:23:c2:f5:7f:1a:0c:64:b9:2f:d2:bf:4a:a0:d3:
8b:d9:94:4f:b2:d2:dc:0e:ce:4b:5b:62:53:ea:8a:
e0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C1:C1:48:33:EA:98:C6:06:3E:8C:2C:AF:89:D1:73:6D:64:C7:66
X509v3 Authority Key Identifier:
keyid:DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3MHBSDPqmMYGPowsr4nRc21kx2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.24.0/21
185.21.32.0/22
IPv6:
2a01:4480::/32
Signature Algorithm: sha256WithRSAEncryption
2f:96:be:95:d3:e8:6e:c1:5f:7f:20:6f:c2:51:dd:78:a9:6f:
39:91:22:f8:93:e2:64:bf:be:51:86:f0:9f:97:06:ee:f1:00:
25:55:f8:31:ed:7f:8a:bf:88:20:bd:c6:43:a1:d2:bd:9a:b0:
4b:bb:8b:ca:a0:51:e4:a5:73:dd:20:d1:7a:51:26:c2:29:40:
b6:ec:60:92:1b:a8:99:14:fc:7a:07:1f:19:be:de:bc:bd:72:
4e:b5:88:26:20:85:96:4e:a0:5b:8d:7a:f0:6c:a7:d1:d4:38:
dd:57:29:67:28:71:1a:c5:6b:f4:66:ff:4d:52:b9:7f:7b:19:
9c:bf:e1:6d:c2:fe:cb:15:ae:8c:5b:73:e7:96:82:08:c6:d2:
66:87:cf:8a:73:b4:5d:81:c0:0a:97:34:fb:0c:e6:5a:e3:dc:
ac:4e:b1:68:b4:1c:81:e4:ee:bd:29:81:57:62:87:58:74:05:
20:68:cc:c2:c6:52:40:94:fb:8c:ab:ea:07:73:31:73:7d:d6:
6d:d0:d5:eb:10:9a:cd:d4:59:19:11:9a:5f:cb:43:9d:4d:09:
72:1e:c5:8a:3d:53:30:54:3b:9a:d0:b5:48:c5:f1:08:9c:8a:
6b:3d:74:03:ce:5c:bc:65:d1:63:ae:ac:e0:7e:b3:8b:65:4e:
de:14:19:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:49 2025 by rpki-client