Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/3B9sKsWHk1OMgIJCUdS9LEahVtg.roa
File: 3B9sKsWHk1OMgIJCUdS9LEahVtg.roa (raw, json)
Hash identifier: /k/J7bgjwruA2QmXWLkW3azzPUWZN3Xsa/oMUH6Vw5k=
Subject key identifier: DC:1F:6C:2A:C5:87:93:53:8C:80:82:42:51:D4:BD:2C:46:A1:56:D8
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0196ACB11CF81150C3F8960BBA6B867049E9
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/3B9sKsWHk1OMgIJCUdS9LEahVtg.roa
Signing time: Wed 07 May 2025 21:40:10 +0000
ROA not before: Wed 07 May 2025 21:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64289
IP address blocks: 185.144.103.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 12 May 2025 17:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:b1:1c:f8:11:50:c3:f8:96:0b:ba:6b:86:70:49:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: May 7 21:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc1f6c2ac58793538c80824251d4bd2c46a156d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:86:20:a2:18:dd:94:c4:da:67:5c:c9:b9:59:
fe:a3:7d:c1:02:53:53:ee:93:64:25:b5:ef:d2:5b:
41:5d:9e:60:7d:b2:97:04:3a:b8:08:6d:6f:86:87:
cd:8b:c7:3e:36:a2:ce:31:4f:45:9f:39:53:62:d0:
b3:88:f8:01:72:97:22:c7:87:b7:9f:2d:a0:fd:28:
dd:47:62:c7:10:81:38:1f:85:28:e2:34:aa:04:a6:
fc:21:08:af:4e:0c:4d:45:8b:fa:a7:e5:2f:df:bc:
09:68:92:da:b2:2e:c2:5d:95:ea:ea:10:4a:84:db:
4e:6c:31:4a:81:33:c7:6d:d2:b5:1b:fc:e1:c8:e3:
99:e2:f0:ed:3f:a4:e9:de:39:be:51:37:25:43:78:
04:73:00:73:1a:b5:1e:25:47:d4:a0:fb:ba:06:bb:
73:6e:d3:d3:83:cb:e7:29:49:37:04:76:ea:14:b8:
8d:68:ac:b9:e6:c0:bb:2d:e6:52:95:f4:1f:69:cd:
93:da:e9:e8:85:31:1b:f8:d6:13:c7:0e:07:d2:5c:
6d:c9:2d:25:44:dd:ad:28:33:2b:8f:4b:41:ca:19:
ab:71:61:2b:69:92:8c:1a:c4:ba:fe:e4:f3:3f:d7:
af:5e:fb:e1:a3:2c:50:33:e5:7b:e3:85:34:84:9b:
e4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1F:6C:2A:C5:87:93:53:8C:80:82:42:51:D4:BD:2C:46:A1:56:D8
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/3B9sKsWHk1OMgIJCUdS9LEahVtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.103.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ab:d6:cc:33:18:fa:ea:8c:d5:68:2f:7e:a9:b9:7b:b5:b9:
26:05:34:84:8c:53:f9:cf:01:eb:02:e8:b1:8f:b4:0b:f1:22:
52:a9:02:a3:06:c1:3f:9f:5d:aa:84:b3:4b:fb:d7:49:e7:1d:
62:ae:02:ae:eb:89:07:47:52:cf:13:bc:54:39:83:df:10:6f:
04:8f:e3:07:ce:9e:41:f5:a2:b5:a2:b1:5c:bb:09:33:d7:6d:
a6:71:d7:10:b8:fc:37:0c:7a:b7:8c:5a:e8:38:96:e0:6a:9f:
c5:f7:cc:4d:ae:be:c6:0a:a6:c4:4f:c9:c0:60:9c:2d:b5:14:
74:92:c6:71:77:9b:aa:b9:53:d0:36:40:5c:ff:36:4d:23:9d:
d5:65:4d:e1:48:29:17:9f:c8:f1:d4:2e:b3:50:f9:7b:f5:c4:
68:77:2a:05:35:4d:85:47:e4:54:bf:5f:e1:25:40:e6:83:de:
68:c5:4a:b6:0a:48:a0:4b:89:38:cb:50:28:9d:a8:61:ad:f0:
67:1b:f9:8d:a5:52:75:39:4f:56:ec:f5:3c:c1:80:13:79:6e:
dd:19:29:46:a9:7f:9f:aa:1f:a0:39:05:a4:0f:b0:68:a2:81:
48:14:bf:57:6f:92:54:97:66:cf:c2:96:a9:0b:d6:5a:2c:5a:
a3:4d:b6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:57:15 2025 by rpki-client