Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/3FScJ5Hs-CghzbJ4hdYHJp1rUJs.roa
File: 3FScJ5Hs-CghzbJ4hdYHJp1rUJs.roa (raw, json)
Hash identifier: FAOa0p+81OuLabaJW6ivYs9rKUiNh/i/V1oOaJy1Pwo=
Subject key identifier: DC:54:9C:27:91:EC:F8:28:21:CD:B2:78:85:D6:07:26:9D:6B:50:9B
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 0196E9F5EC85D4DC2C96541A7C0ADB975075
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/3FScJ5Hs-CghzbJ4hdYHJp1rUJs.roa
Signing time: Mon 19 May 2025 19:12:10 +0000
ROA not before: Mon 19 May 2025 19:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 2a0e:f03::/32 maxlen: 32
2a0e:8545::/32 maxlen: 32
2a11:3186::/32 maxlen: 32
2a11:4a03::/32 maxlen: 32
2a11:8505::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 29 May 2025 16:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e9:f5:ec:85:d4:dc:2c:96:54:1a:7c:0a:db:97:50:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: May 19 19:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc549c2791ecf82821cdb27885d607269d6b509b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:79:8f:fe:8d:b9:16:c5:f9:53:2d:b4:42:
51:d1:e5:39:2c:ef:2c:b0:37:26:64:92:5e:37:68:
ee:8f:a7:5f:8e:eb:7b:02:ef:87:f3:dc:57:fc:e2:
4b:76:43:80:41:6e:65:8e:0d:a4:54:ab:67:2d:c6:
e7:22:99:b6:d4:4b:56:38:63:20:84:71:a7:fa:45:
ac:2c:8a:2a:99:94:a5:43:04:48:e8:c4:3d:fd:71:
7c:f0:59:a2:c7:2e:ff:98:0d:d0:22:6c:e4:cc:c9:
3b:43:31:de:a4:0c:50:d0:82:b0:61:3c:9d:8f:82:
08:67:4a:cc:6f:5a:9d:c5:5a:45:4c:bf:64:c1:53:
2b:12:4d:59:3a:a4:f3:8b:12:38:ec:4e:2b:22:1e:
c9:ce:46:28:3a:e6:9d:1c:4d:44:7f:44:e9:20:6f:
41:88:7e:6a:86:ec:76:5b:f2:b1:a5:f8:06:2d:10:
f5:21:d4:81:b3:d9:e0:34:8d:26:c5:6c:7b:3e:09:
f3:29:f6:0b:07:bb:89:35:30:63:64:5d:7e:68:5f:
60:4a:f5:c4:61:dd:be:e3:ec:b3:cf:07:96:4c:66:
55:d0:06:a5:76:be:82:4a:8d:9f:f1:26:87:aa:dc:
67:f6:3e:4b:cf:71:80:21:3d:37:59:5a:5b:39:8a:
2d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:54:9C:27:91:EC:F8:28:21:CD:B2:78:85:D6:07:26:9D:6B:50:9B
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/3FScJ5Hs-CghzbJ4hdYHJp1rUJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:f03::/32
2a0e:8545::/32
2a11:3186::/32
2a11:4a03::/32
2a11:8505::/32
Signature Algorithm: sha256WithRSAEncryption
16:41:57:ae:2b:b5:fa:99:a6:2c:b8:e1:3c:50:a9:7d:93:7a:
16:8f:74:1e:39:3e:7a:c2:58:0e:fa:ee:67:1f:06:3e:1f:e5:
5f:0e:7e:a9:d4:53:e3:c9:6e:e5:27:de:19:c8:43:b5:22:a2:
db:e4:b4:72:97:8d:49:ae:65:66:e7:d1:cb:57:d2:db:c1:af:
3a:57:40:2d:27:cf:07:a3:f8:cf:bc:ef:02:9f:17:d2:83:95:
2b:23:65:4a:44:ca:80:18:11:b2:c0:a3:fe:c1:04:c0:4b:0b:
0c:96:c7:44:d0:11:88:02:71:74:3e:56:2a:a6:2d:66:66:04:
89:ac:a5:11:98:c8:ee:84:01:03:79:08:e8:77:96:1c:55:ea:
28:52:30:68:3e:a1:ae:d3:66:01:dc:cd:b6:61:70:23:32:3c:
64:a1:1a:a1:cf:01:69:23:08:d7:08:9c:2d:33:17:6f:9e:46:
f4:ab:92:5a:4b:6a:71:d7:fc:6f:04:2a:11:a6:bb:50:0b:1e:
c7:42:6e:49:f3:9f:4f:09:eb:74:6f:3d:40:5a:b8:49:40:48:
86:17:14:29:68:07:14:f3:0a:5a:c8:3f:44:6b:0e:d3:60:25:
aa:a9:52:bd:a9:cc:fb:c1:a2:be:5b:a7:2c:07:1e:8f:a1:e6:
84:88:09:5a
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZbp9eyF1NwsllQafArbl1B1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzODI4MGM1MzAwYjc0ODg4YWM3ZWI0YmZhNjQxN2Q5YTJl
N2IwYmUwHhcNMjUwNTE5MTkxMjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzU0OWMyNzkxZWNmODI4MjFjZGIyNzg4NWQ2MDcyNjlkNmI1MDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO55j/6NuRbF+VMttEJR0eU5LO8s
sDcmZJJeN2juj6dfjut7Au+H89xX/OJLdkOAQW5ljg2kVKtnLcbnIpm21EtWOGMg
hHGn+kWsLIoqmZSlQwRI6MQ9/XF88Fmixy7/mA3QImzkzMk7QzHepAxQ0IKwYTyd
j4IIZ0rMb1qdxVpFTL9kwVMrEk1ZOqTzixI47E4rIh7JzkYoOuadHE1Ef0TpIG9B
iH5qhux2W/KxpfgGLRD1IdSBs9ngNI0mxWx7PgnzKfYLB7uJNTBjZF1+aF9gSvXE
Yd2+4+yzzweWTGZV0Aaldr6CSo2f8SaHqtxn9j5Lz3GAIT03WVpbOYot0wIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFNxUnCeR7PgoIc2yeIXWByada1CbMB8GA1UdIwQY
MBaAFMOCgMUwC3SIisfrS/pkF9mi57C+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2Yt
NDFiYjIxYWMyODAxLzEvM0ZTY0o1SHMtQ2doemJKNGhkWUhKcDFyVUpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2YtNDFiYjIxYWMyODAx
LzEvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwUAKg4PAwMF
ACoOhUUDBQAqETGGAwUAKhFKAwMFACoRhQUwDQYJKoZIhvcNAQELBQADggEBABZB
V64rtfqZpiy44TxQqX2TehaPdB45PnrCWA767mcfBj4f5V8OfqnUU+PJbuUn3hnI
Q7UiotvktHKXjUmuZWbn0ctX0tvBrzpXQC0nzwej+M+87wKfF9KDlSsjZUpEyoAY
EbLAo/7BBMBLCwyWx0TQEYgCcXQ+ViqmLWZmBImspRGYyO6EAQN5COh3lhxV6ihS
MGg+oa7TZgHczbZhcCMyPGShGqHPAWkjCNcInC0zF2+eRvSrklpLanHX/G8EKhGm
u1ALHsdCbknzn08J63RvPUBauElASIYXFCloBxTzClrIP0RrDtNgJaqpUr2pzPvB
or5bpywHHo+h5oSICVo=
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:06:58 2025 by rpki-client