Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/3aAwQAY_N8bJ-jiNbQ0Jgbd0SFU.roa
File: 3aAwQAY_N8bJ-jiNbQ0Jgbd0SFU.roa (raw, json)
Hash identifier: /atkRRmMgNiPu2/5kdqV4e2JQpDAysugX/6C23Gx3gw=
Subject key identifier: DD:A0:30:40:06:3F:37:C6:C9:FA:38:8D:6D:0D:09:81:B7:74:48:55
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 019644F8FD2AF513AC26AF2795D9EA260D80
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/3aAwQAY_N8bJ-jiNbQ0Jgbd0SFU.roa
Signing time: Thu 17 Apr 2025 18:18:10 +0000
ROA not before: Thu 17 Apr 2025 18:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214891
IP address blocks: 92.42.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 13:15:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:f8:fd:2a:f5:13:ac:26:af:27:95:d9:ea:26:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Apr 17 18:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dda03040063f37c6c9fa388d6d0d0981b7744855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ee:1a:65:c5:d3:c3:99:a4:31:e0:fc:68:8a:
98:f7:e7:81:40:7b:bc:f7:e0:1b:6e:44:ad:2e:96:
07:5e:85:7b:03:66:0c:da:30:43:c8:49:56:9e:72:
cd:17:62:c3:6f:c1:28:4e:ba:e2:78:37:81:d3:9b:
23:46:f6:f8:75:6b:5b:b4:42:e8:5f:10:e3:f3:0a:
59:38:11:ef:2a:b4:46:a9:de:11:ac:de:cf:d0:d2:
f3:dd:db:4f:91:4b:33:11:0d:99:9c:07:e3:d2:ed:
00:55:60:ec:2c:59:d1:a8:31:56:36:4b:1f:52:55:
bf:51:70:02:3a:d0:2e:45:9b:69:fd:01:e2:a2:8d:
d6:33:c0:88:82:be:99:f8:82:1c:1c:f1:b9:81:d3:
b9:bd:74:f7:4b:b9:87:3a:25:3f:72:62:30:46:76:
90:8b:ab:1c:53:d8:46:cb:8e:9c:04:b8:c2:b4:a4:
6e:51:86:96:99:3d:29:53:16:62:b1:e8:fc:bf:f2:
97:c4:4b:20:fb:f0:73:68:56:2d:11:21:21:59:8f:
5d:94:40:e1:e7:35:bd:75:86:08:a9:e4:04:66:e1:
2a:fa:95:b6:60:f0:ee:ac:67:02:bd:3a:69:84:ce:
c9:2b:05:98:fb:d0:6d:4e:cf:6b:9b:7b:c0:4a:90:
fa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A0:30:40:06:3F:37:C6:C9:FA:38:8D:6D:0D:09:81:B7:74:48:55
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/3aAwQAY_N8bJ-jiNbQ0Jgbd0SFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.102.0/24
Signature Algorithm: sha256WithRSAEncryption
98:55:45:97:65:91:36:45:97:37:8c:14:9c:73:c1:5c:58:33:
69:b6:96:2e:b6:64:bd:4f:4e:aa:94:78:5d:ec:55:35:93:92:
34:45:41:78:62:c3:1b:19:5b:98:0e:ee:41:94:07:4e:9c:3e:
03:05:93:3f:7e:a3:58:72:83:fd:6a:b1:e3:fb:b2:44:a4:20:
22:7f:88:94:aa:40:b1:9d:3c:3c:e8:41:54:47:4c:ac:8d:6d:
dc:a7:d9:3e:19:30:bb:b8:97:b0:db:54:3b:70:71:55:2e:56:
a0:8c:e6:2c:be:02:29:e7:23:4a:19:a2:5f:e1:ed:06:21:e6:
17:7d:28:ab:83:51:07:77:f4:fc:fb:34:19:7c:ef:83:7e:4c:
ca:b2:55:f5:47:80:e9:6a:7a:b2:b8:84:78:8f:34:b8:64:bb:
76:fc:62:a4:59:44:ac:6f:a4:52:67:b4:50:06:f9:00:68:e3:
f4:d5:8f:af:ba:fc:3f:f9:f4:62:29:07:16:7f:f4:d0:80:79:
c4:03:d0:6f:98:35:90:e0:76:7d:8a:e4:14:50:7f:4a:8f:1d:
5f:41:74:9c:a1:8e:26:70:20:0a:5a:37:cf:09:26:dc:63:06:
38:62:75:ba:8a:bc:5e:75:f6:22:d8:bc:d9:39:11:95:99:2a:
52:2d:5c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:01:07 2025 by rpki-client