Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/3qM3jTTmAf0Jzp17JKhS2sXEoKM.roa
File: 3qM3jTTmAf0Jzp17JKhS2sXEoKM.roa (raw, json)
Hash identifier: mZgNVB6+9pAE+nxpA7Lay1zmy5Otj8pxh/WdJBx9sE0=
Subject key identifier: DE:A3:37:8D:34:E6:01:FD:09:CE:9D:7B:24:A8:52:DA:C5:C4:A0:A3
Certificate issuer: /CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Certificate serial: 0194072D5520BC550ED3B9A9811D9355390C
Authority key identifier: 36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/3qM3jTTmAf0Jzp17JKhS2sXEoKM.roa
Signing time: Fri 27 Dec 2024 08:13:18 +0000
ROA not before: Fri 27 Dec 2024 08:13:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213683
IP address blocks: 91.239.6.0/24 maxlen: 24
91.239.7.0/24 maxlen: 24
2001:67c:fd0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:2d:55:20:bc:55:0e:d3:b9:a9:81:1d:93:55:39:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Validity
Not Before: Dec 27 08:13:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dea3378d34e601fd09ce9d7b24a852dac5c4a0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8a:b8:15:7e:50:17:fd:32:5a:c2:31:62:98:
6d:80:70:d0:e3:3f:f2:29:09:e9:a4:9e:17:55:04:
76:bb:48:27:1b:9c:50:99:6f:47:ce:31:2d:77:d8:
4f:8d:d2:b9:90:d8:2b:12:c6:27:ce:72:26:23:5e:
55:fc:50:12:57:1d:0c:a2:8f:b6:76:fd:d9:d2:96:
9b:6d:6c:f1:0d:bd:40:ea:b3:a9:bb:9a:40:f8:5f:
04:25:60:5a:4b:c2:9b:e3:68:64:6f:6e:38:9c:d9:
d7:db:c4:76:91:b0:6c:80:af:26:04:7d:37:90:e4:
0c:23:43:fc:08:a7:9f:ec:a2:23:25:57:cc:a7:fb:
77:a1:50:c0:85:2b:8f:3c:70:22:a1:b8:1d:42:8c:
23:ed:3a:65:a9:e3:97:29:01:50:80:11:56:65:be:
4d:65:db:6d:3a:94:13:2a:28:3e:3f:1c:98:49:23:
ef:1f:29:dc:2f:59:f6:8f:48:1b:f0:cf:00:7f:c6:
c0:1b:76:63:a0:b6:8c:8e:b6:51:b8:95:b3:b7:ca:
e9:bb:3d:5d:4f:0e:4b:8a:e6:b9:74:90:5b:7b:65:
3d:da:4d:73:11:66:5c:ac:2e:f5:4f:42:20:18:70:
c2:43:ff:0e:85:a8:ac:98:32:af:e0:36:8a:04:8e:
f5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A3:37:8D:34:E6:01:FD:09:CE:9D:7B:24:A8:52:DA:C5:C4:A0:A3
X509v3 Authority Key Identifier:
keyid:36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/3qM3jTTmAf0Jzp17JKhS2sXEoKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.6.0/23
IPv6:
2001:67c:fd0::/48
Signature Algorithm: sha256WithRSAEncryption
20:9c:9f:52:36:83:94:f1:ab:1f:ef:11:c1:f9:34:b4:3e:93:
07:12:c2:ba:b2:72:74:67:21:8c:b4:50:cc:5f:91:22:77:55:
e3:b9:4a:97:c9:ab:cf:62:9e:75:49:22:43:d0:b3:2c:93:67:
73:ad:ef:b0:e8:f5:2d:b1:92:ef:6d:8a:a1:13:92:c4:da:98:
f4:9f:43:2b:a3:1d:a4:25:ff:af:ac:c9:32:6a:cd:27:47:1c:
13:49:48:b5:4f:80:3e:72:07:0b:0f:da:bc:fb:ca:75:59:c3:
cf:74:4d:e0:d4:a0:d1:b6:a7:75:bf:92:b9:86:d1:2b:f1:01:
ea:4c:2f:75:1d:3a:37:f1:88:d8:2a:39:13:9b:9b:13:9d:f9:
e0:15:d5:b1:f5:41:62:ca:98:82:64:c2:22:d7:20:10:77:c9:
6f:3c:8e:48:eb:0a:29:b9:1a:0e:d2:ee:e5:8a:40:b7:9d:19:
5b:15:63:36:d3:9d:d0:6f:2e:1d:8c:d4:6a:d1:06:ae:72:ca:
b6:2e:b7:60:f6:2d:6d:11:86:fa:4e:c2:42:61:2f:b4:39:e3:
c8:70:e8:0d:7f:57:63:d4:3c:a4:5d:db:70:7e:78:4d:2c:87:
cd:c1:da:d1:a7:1e:f8:9f:28:b8:56:51:b3:83:2f:ee:e1:a2:
e5:85:94:69
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQHLVUgvFUO07mpgR2TVTkMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2M2NiNWM2YTA1Y2RkNDgxZjMwNGMwY2Q5NWU4NmQ3MjJk
OTZkM2MwHhcNMjQxMjI3MDgxMzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWEzMzc4ZDM0ZTYwMWZkMDljZTlkN2IyNGE4NTJkYWM1YzRhMGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYq4FX5QF/0yWsIxYphtgHDQ4z/y
KQnppJ4XVQR2u0gnG5xQmW9HzjEtd9hPjdK5kNgrEsYnznImI15V/FASVx0Moo+2
dv3Z0pabbWzxDb1A6rOpu5pA+F8EJWBaS8Kb42hkb244nNnX28R2kbBsgK8mBH03
kOQMI0P8CKef7KIjJVfMp/t3oVDAhSuPPHAiobgdQowj7TplqeOXKQFQgBFWZb5N
ZdttOpQTKig+PxyYSSPvHyncL1n2j0gb8M8Af8bAG3ZjoLaMjrZRuJWzt8rpuz1d
Tw5Liua5dJBbe2U92k1zEWZcrC71T0IgGHDCQ/8OhaismDKv4DaKBI71hwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN6jN4005gH9Cc6deySoUtrFxKCjMB8GA1UdIwQY
MBaAFDY8tcagXN1IHzBMDNlehtci2W08MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmp5MXhxQmMzVWdmTUV3TTJWNkcxeUxaYlR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wMjA2ZmYtN2U4Ny00NGE2LTlhNTYt
YmEzYzY0ZTE0YTFkLzEvM3FNM2pUVG1BZjBKenAxN0pLaFMyc1hFb0tNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8wMjA2ZmYtN2U4Ny00NGE2LTlhNTYtYmEzYzY0ZTE0YTFk
LzEvTmp5MXhxQmMzVWdmTUV3TTJWNkcxeUxaYlR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBW+8GMA8E
AgACMAkDBwAgAQZ8D9AwDQYJKoZIhvcNAQELBQADggEBACCcn1I2g5Txqx/vEcH5
NLQ+kwcSwrqycnRnIYy0UMxfkSJ3VeO5SpfJq89innVJIkPQsyyTZ3Ot77Do9S2x
ku9tiqETksTamPSfQyujHaQl/6+syTJqzSdHHBNJSLVPgD5yBwsP2rz7ynVZw890
TeDUoNG2p3W/krmG0SvxAepML3UdOjfxiNgqORObmxOd+eAV1bH1QWLKmIJkwiLX
IBB3yW88jkjrCim5Gg7S7uWKQLedGVsVYzbTndBvLh2M1GrRBq5yyrYut2D2LW0R
hvpOwkJhL7Q548hw6A1/V2PUPKRd23B+eE0sh83B2tGnHvifKLhWUbODL+7houWF
lGk=
-----END CERTIFICATE-----
Generated at Wed May 14 04:48:57 2025 by rpki-client