Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/m3ySq4VHSkeYDxMQYcPC7bllP3Y.roa
File: m3ySq4VHSkeYDxMQYcPC7bllP3Y.roa (raw, json)
Hash identifier: PAV5d0JntpVjOOFSBjF4c4USxL68XJwerVbn8e2XP5M=
Subject key identifier: 9B:7C:92:AB:85:47:4A:47:98:0F:13:10:61:C3:C2:ED:B9:65:3F:76
Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial: 01969C05D64E19866468B408F578CC06735F
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/m3ySq4VHSkeYDxMQYcPC7bllP3Y.roa
Signing time: Sun 04 May 2025 15:59:10 +0000
ROA not before: Sun 04 May 2025 15:59:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.38.27.0/24 maxlen: 24
194.31.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 May 2025 04:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:05:d6:4e:19:86:64:68:b4:08:f5:78:cc:06:73:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Validity
Not Before: May 4 15:59:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b7c92ab85474a47980f131061c3c2edb9653f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0a:ca:c8:c7:cd:39:1a:42:8c:a5:f2:ae:77:
36:7b:60:94:86:91:67:87:9e:c2:84:07:2c:5e:5d:
f8:e9:89:90:41:d3:1e:fa:aa:02:5a:1d:15:19:15:
1f:cb:4e:d2:cb:d7:ee:87:b8:88:c3:7f:64:98:fe:
9f:ff:2e:57:30:d5:c1:be:9b:40:d3:70:78:da:a0:
87:29:62:e5:9c:0b:bf:c1:bd:7c:a5:ce:d2:17:9a:
d0:c8:74:80:3a:f9:df:86:a4:c5:be:05:71:86:2d:
37:76:d3:2c:c7:23:77:a6:6f:53:72:7d:aa:77:1a:
3e:27:6a:40:03:15:43:9e:86:e6:0f:7d:ca:2d:ff:
f0:3a:2f:c2:a0:bc:79:03:d6:26:be:c0:49:19:ca:
42:73:ae:e2:25:05:5c:9c:b3:3e:ba:8e:9a:a4:21:
f6:b6:40:a0:e8:2a:a7:0c:52:7e:8c:9a:a2:3d:9c:
4a:46:5b:1a:f7:ba:11:9e:1e:ff:f8:46:e6:1b:da:
64:9e:91:e6:5b:ff:5d:c4:e6:12:39:99:47:b3:45:
d6:66:db:b0:77:67:ab:dd:eb:de:2a:f1:98:94:61:
c2:1c:bd:f4:ee:05:8d:74:4f:41:ab:8e:ec:ff:69:
a5:eb:fb:36:0b:d0:1a:1c:fb:6d:39:08:39:2a:47:
74:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7C:92:AB:85:47:4A:47:98:0F:13:10:61:C3:C2:ED:B9:65:3F:76
X509v3 Authority Key Identifier:
keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/m3ySq4VHSkeYDxMQYcPC7bllP3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.27.0/24
194.31.165.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:9c:72:e2:e0:f2:67:29:86:d2:8e:85:41:0e:af:2c:48:46:
5d:c6:b7:48:64:41:a7:0e:53:ed:78:2b:0b:09:01:ad:0a:60:
cd:d5:ce:b2:e6:cb:a2:e8:1a:a3:39:4d:b7:a9:8c:a0:5f:38:
c2:c8:03:4c:3f:bd:4c:d6:83:5a:f2:f0:84:91:aa:d8:e4:8b:
2c:3a:cb:e6:90:81:b4:c3:56:cf:19:3e:38:40:c4:03:a3:f2:
41:6f:84:9e:c3:8b:36:49:9d:2e:ba:8a:9b:0d:6a:b9:93:48:
47:26:1b:51:7b:80:25:ff:f5:8d:03:1b:c9:06:94:4d:2e:9b:
9a:13:d9:2a:87:ba:0c:be:15:dc:58:a3:4f:85:cb:c7:7f:c3:
28:cd:21:a3:36:0e:a7:5e:72:9d:12:bd:d1:d1:ba:7e:2b:c3:
e9:f3:34:ed:14:44:94:c1:24:c0:58:f4:05:0e:17:85:50:16:
3f:ae:7a:99:25:56:02:f8:68:f4:67:5d:bd:31:13:ca:c2:ad:
d8:ad:1a:15:9a:60:89:b6:ac:e0:c7:1d:0c:3f:27:65:04:0a:
2f:8b:3b:c4:af:ff:2f:8a:c9:66:a4:64:ce:46:13:10:3b:c9:
b1:c5:fa:64:78:52:ba:e2:2c:59:66:03:4a:63:7b:f4:d0:6e:
ae:8b:1a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:21:08 2025 by rpki-client