Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/3Q3DD72riTqIVnk_f8F0ZQuJiEI.roa
File: 3Q3DD72riTqIVnk_f8F0ZQuJiEI.roa (raw, json)
Hash identifier: 7bAE72QheHVU+KJbjd7R9TzF3+akOc4HnmtdlfHqNTc=
Subject key identifier: DD:0D:C3:0F:BD:AB:89:3A:88:56:79:3F:7F:C1:74:65:0B:89:88:42
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0196DC303B603F6EFB73B45FAB3D65C368F7
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/3Q3DD72riTqIVnk_f8F0ZQuJiEI.roa
Signing time: Sat 17 May 2025 03:01:10 +0000
ROA not before: Sat 17 May 2025 03:01:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56619
IP address blocks: 79.98.248.0/24 maxlen: 24
94.233.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 May 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dc:30:3b:60:3f:6e:fb:73:b4:5f:ab:3d:65:c3:68:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: May 17 03:01:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd0dc30fbdab893a8856793f7fc174650b898842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:72:64:b4:a2:c0:55:11:c2:e3:54:b1:c6:d3:
30:b9:4a:da:e1:c3:39:dc:2b:1b:ec:0a:25:6d:dc:
36:1f:e4:16:f9:65:d6:ae:e5:77:ed:6e:b5:3e:b7:
e9:13:bc:89:d4:ff:a4:35:9c:13:d6:d4:42:98:d3:
8e:89:b1:43:43:b2:fb:1b:2b:a5:49:9a:0f:0a:11:
02:b2:75:87:13:a5:94:67:eb:b0:ee:32:4c:5a:63:
d7:87:0f:48:40:a1:93:0c:4d:d8:24:f7:ed:cc:7f:
b0:e2:e4:59:4c:16:72:3e:1d:da:17:eb:72:48:08:
85:f9:de:09:77:4f:dd:ea:46:1e:5a:62:32:9a:fe:
3c:b3:a4:48:4f:fc:e8:34:72:da:e9:a1:da:ec:4c:
06:1f:2d:66:39:4f:1b:65:63:34:1b:d8:b8:a2:68:
b4:4b:9f:6f:0e:c3:49:20:0a:20:b4:b6:5e:eb:95:
38:72:f3:08:51:6c:8d:bb:73:08:90:fe:ae:15:6e:
46:8d:18:9a:91:16:07:0a:d9:34:74:94:8f:ee:10:
a7:f1:61:d5:dc:44:38:01:a8:bf:4a:89:99:13:9a:
4d:e8:91:5b:d1:a5:80:19:79:d7:58:8f:7d:42:d4:
2f:c1:63:c8:92:b6:db:63:ca:b2:b7:26:93:07:70:
9e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0D:C3:0F:BD:AB:89:3A:88:56:79:3F:7F:C1:74:65:0B:89:88:42
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/3Q3DD72riTqIVnk_f8F0ZQuJiEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.248.0/24
94.233.184.0/24
Signature Algorithm: sha256WithRSAEncryption
76:0e:bb:4c:20:a2:76:48:9e:5d:d3:50:65:ea:d7:c2:9d:4a:
44:b2:3c:b8:6d:41:a1:61:8a:8b:4a:e9:a5:41:02:a0:9b:8e:
1e:88:04:0b:50:f6:67:7d:ee:08:0b:d4:5b:a8:bb:2b:9a:a6:
a6:fe:5f:4a:ce:65:98:a5:af:ec:24:fc:9d:6a:81:4a:e9:66:
d7:e5:aa:e1:3a:ea:09:22:d0:cc:67:4f:25:c0:0b:e0:3f:ec:
65:3e:a8:6c:2a:a9:7c:af:b6:bb:b0:21:cc:3f:3a:98:79:74:
6c:6f:8f:de:b4:f6:9e:16:10:93:35:24:a6:55:34:ea:ab:c6:
e6:f8:8d:05:07:04:6d:5d:77:df:7d:ef:4a:f3:28:a7:56:57:
89:a9:0c:a9:b3:3c:e0:da:79:33:89:2d:92:06:66:16:9f:37:
f1:74:94:31:fb:80:c3:27:72:9c:73:95:52:1b:89:19:b6:ee:
fe:af:04:3f:93:fb:18:91:2c:1a:31:a1:ff:76:d0:39:c1:32:
60:24:55:77:d0:17:50:2e:e4:f8:da:f8:d0:cc:0f:56:31:c3:
be:46:63:aa:a3:40:15:22:07:17:79:d5:02:f1:58:29:9d:6d:
83:de:b1:24:c5:d0:9f:35:87:d2:f4:bb:42:54:f0:9b:50:c9:
5a:33:41:e3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZbcMDtgP277c7Rfqz1lw2j3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjUwNTE3MDMwMTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDBkYzMwZmJkYWI4OTNhODg1Njc5M2Y3ZmMxNzQ2NTBiODk4ODQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHJktKLAVRHC41SxxtMwuUra4cM5
3Csb7Aolbdw2H+QW+WXWruV37W61PrfpE7yJ1P+kNZwT1tRCmNOOibFDQ7L7Gyul
SZoPChECsnWHE6WUZ+uw7jJMWmPXhw9IQKGTDE3YJPftzH+w4uRZTBZyPh3aF+ty
SAiF+d4Jd0/d6kYeWmIymv48s6RIT/zoNHLa6aHa7EwGHy1mOU8bZWM0G9i4omi0
S59vDsNJIAogtLZe65U4cvMIUWyNu3MIkP6uFW5GjRiakRYHCtk0dJSP7hCn8WHV
3EQ4Aai/SomZE5pN6JFb0aWAGXnXWI99QtQvwWPIkrbbY8qytyaTB3CebQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFN0Nww+9q4k6iFZ5P3/BdGULiYhCMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvM1EzREQ3MnJpVHFJVm5rX2Y4RjBaUXVKaUVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT2L4AwQA
Xum4MA0GCSqGSIb3DQEBCwUAA4IBAQB2DrtMIKJ2SJ5d01Bl6tfCnUpEsjy4bUGh
YYqLSumlQQKgm44eiAQLUPZnfe4IC9RbqLsrmqam/l9KzmWYpa/sJPydaoFK6WbX
5arhOuoJItDMZ08lwAvgP+xlPqhsKql8r7a7sCHMPzqYeXRsb4/etPaeFhCTNSSm
VTTqq8bm+I0FBwRtXXfffe9K8yinVleJqQypszzg2nkziS2SBmYWnzfxdJQx+4DD
J3Kcc5VSG4kZtu7+rwQ/k/sYkSwaMaH/dtA5wTJgJFV30BdQLuT42vjQzA9WMcO+
RmOqo0AVIgcXedUC8VgpnW2D3rEkxdCfNYfS9LtCVPCbUMlaM0Hj
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:23:22 2025 by rpki-client