Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/3xYq7S-ITBIQvcQ2qGDT5rD8k8I.roa
File: 3xYq7S-ITBIQvcQ2qGDT5rD8k8I.roa (raw, json)
Hash identifier: jWOlxcXdJe/p1LTUKLSmGEi3IwmRJE+1hWDKPnV2BD4=
Subject key identifier: DF:16:2A:ED:2F:88:4C:12:10:BD:C4:36:A8:60:D3:E6:B0:FC:93:C2
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 0197AAFA570E04C76F29E8EEAF9C2A8DE06D
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/3xYq7S-ITBIQvcQ2qGDT5rD8k8I.roa
Signing time: Thu 26 Jun 2025 06:43:42 +0000
ROA not before: Thu 26 Jun 2025 06:43:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 212.100.176.0/22 maxlen: 24
212.100.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jun 2025 06:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:aa:fa:57:0e:04:c7:6f:29:e8:ee:af:9c:2a:8d:e0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Jun 26 06:43:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df162aed2f884c1210bdc436a860d3e6b0fc93c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:89:60:37:25:28:2b:0a:61:53:76:23:2f:
1c:1f:34:74:1b:67:d2:e8:72:26:c5:39:27:b6:81:
30:31:6b:b1:42:ce:ac:fc:da:28:32:9d:0c:d9:14:
8b:51:20:ea:1f:90:5d:ca:13:1d:e7:bd:16:22:a4:
9e:c5:b1:ea:a7:23:6c:36:e6:12:0d:29:a0:23:9f:
78:20:db:b0:62:bc:14:cb:d0:9d:79:a1:b1:a0:80:
b7:12:25:63:6b:26:a8:6d:7a:7b:91:bd:c7:f6:4b:
fb:46:a7:8b:e7:7c:6c:9c:8f:54:bc:83:b7:78:f7:
c9:c8:91:ab:8a:82:fa:4b:87:33:b6:4a:12:b7:4c:
e1:fa:66:c7:98:4a:28:56:a7:85:39:ec:56:11:57:
0a:ad:0a:05:8f:2f:bf:0d:96:f8:a9:4e:76:88:57:
cf:fd:a6:db:57:76:17:24:d7:b8:37:17:d7:4c:49:
68:8a:3b:66:49:3e:ff:7e:09:30:93:00:ce:b4:7d:
73:43:75:e2:41:49:7b:cd:d3:20:dd:07:e6:a5:b0:
48:5b:11:b5:5e:fd:18:7b:ca:f4:2f:bc:3e:d2:78:
c4:f2:b1:f0:05:5c:4c:f7:8d:0e:ac:2d:34:27:ee:
0c:87:b6:cc:ac:8e:4b:0d:a5:2e:00:35:fc:e5:74:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:16:2A:ED:2F:88:4C:12:10:BD:C4:36:A8:60:D3:E6:B0:FC:93:C2
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/3xYq7S-ITBIQvcQ2qGDT5rD8k8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.176.0/22
212.100.184.0/22
Signature Algorithm: sha256WithRSAEncryption
62:a3:d8:17:2f:56:a5:a6:4b:e3:a7:78:85:03:dd:a7:d4:25:
d9:83:e7:36:38:4a:f6:c1:aa:87:39:16:c8:82:7c:20:22:71:
8b:f1:3e:4e:58:cb:6b:0c:02:9d:9c:2d:41:7f:6c:f3:f4:46:
b2:e5:d5:f8:f8:ad:21:12:7e:ff:b8:02:c7:c1:28:3a:b1:df:
b0:3e:17:39:45:9a:ae:f9:fc:e1:32:be:42:34:5d:39:a0:3c:
61:fe:47:94:9a:25:58:13:27:d8:69:0f:25:66:e2:e8:60:2b:
02:e2:3b:70:ac:fe:7b:b0:00:73:51:2a:80:e5:09:92:bd:8b:
18:73:f3:56:0e:c5:2e:65:33:33:58:e5:29:98:ad:f2:3f:7a:
04:16:69:0a:56:67:7a:9c:58:8a:4b:6f:70:85:16:12:68:9e:
a4:5b:87:ab:b4:02:d9:74:e7:ec:48:d5:d6:7f:18:7c:cf:33:
cd:56:40:cd:19:56:65:5b:52:61:51:bc:c8:f8:9b:41:c0:84:
5e:d3:2c:cf:94:97:a1:e7:67:85:a0:8a:9c:ef:55:47:e9:5a:
ef:29:2d:b7:fb:a1:95:42:bd:0d:07:d7:2d:45:6f:08:38:1c:
fc:c6:9e:a6:41:0c:d9:02:b4:29:98:de:1a:ac:59:7e:e5:45:
21:95:a2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:09:14 2025 by rpki-client