Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/6Fb6JuGYcPniIlt8FJCD4050320.roa
File: 6Fb6JuGYcPniIlt8FJCD4050320.roa (raw, json)
Hash identifier: buwPxQtxptW7ltnTuJNJOYSDWdmpgVebCCszfca+/24=
Subject key identifier: E8:56:FA:26:E1:98:70:F9:E2:22:5B:7C:14:90:83:E3:4E:74:DF:6D
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 0193D59077805700B277B004E1C8336247B1
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/6Fb6JuGYcPniIlt8FJCD4050320.roa
Signing time: Tue 17 Dec 2024 17:00:34 +0000
ROA not before: Tue 17 Dec 2024 17:00:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 81.30.103.0/24 maxlen: 24
2a13:ae00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 18 Dec 2024 11:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d5:90:77:80:57:00:b2:77:b0:04:e1:c8:33:62:47:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Dec 17 17:00:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e856fa26e19870f9e2225b7c149083e34e74df6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ce:71:b2:9e:b3:17:90:58:31:11:02:18:ed:
f3:30:0e:db:6f:bc:08:0b:6e:61:fd:48:4a:c8:a5:
9b:a1:61:99:fc:39:85:c8:ec:57:bf:af:aa:5b:44:
9a:85:bd:91:eb:40:3b:ea:b7:1b:60:97:9a:b0:52:
51:70:3a:54:7d:71:49:ab:03:34:10:71:bc:71:9d:
1c:cd:ed:46:e2:eb:c2:f6:8e:41:1c:54:68:bf:b2:
6b:84:1d:a9:de:4c:58:b9:0b:7b:ea:21:0d:ea:15:
b8:bd:60:b5:16:99:fe:c9:7f:9e:a4:0f:e6:b2:82:
9f:19:55:59:7f:08:3e:b3:6a:41:42:ff:95:b8:3d:
37:d8:05:2c:30:a8:53:18:27:e3:4c:e8:28:b5:6b:
6c:fb:24:97:3e:f6:e7:d4:25:6c:30:94:45:98:d4:
ce:2b:c8:b7:09:cf:6d:e6:08:0a:de:74:65:31:42:
9d:b2:98:2e:ef:34:df:29:3a:f4:ae:b0:6d:72:ca:
23:20:3f:fc:61:5b:b7:38:98:b8:44:87:6e:fd:b3:
f2:53:af:4e:44:dc:9d:32:67:12:0c:09:7b:12:7d:
c9:25:d2:29:60:f2:ee:a4:37:cd:d9:5d:83:1e:1a:
48:05:4d:f5:53:a0:11:69:96:e5:f2:ff:67:8f:00:
fd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:56:FA:26:E1:98:70:F9:E2:22:5B:7C:14:90:83:E3:4E:74:DF:6D
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/6Fb6JuGYcPniIlt8FJCD4050320.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.103.0/24
IPv6:
2a13:ae00::/29
Signature Algorithm: sha256WithRSAEncryption
8e:f0:5b:f6:11:4f:35:6f:a5:10:d9:8e:9e:90:e7:82:a6:db:
c2:75:9d:83:01:00:06:08:45:be:53:9b:cf:a6:29:8d:51:1c:
b2:98:53:a6:1e:2e:cc:a7:9f:04:2c:bc:33:fd:9e:48:5b:cf:
aa:d6:e0:1a:f0:d7:bc:aa:2f:56:59:ef:68:a2:94:77:57:88:
95:05:cb:7d:2b:cf:c0:69:50:bc:ad:03:eb:7e:dd:9b:56:8a:
0d:7a:ab:0c:63:97:a6:0f:87:ac:5f:6c:b0:bd:b5:b1:f3:1e:
1f:6f:d7:fe:64:b8:31:50:00:82:ab:1f:28:98:b5:97:b1:9a:
f9:38:d5:16:a8:1c:53:54:81:92:ec:2a:6a:51:20:2b:51:33:
50:b8:3d:34:d2:a5:45:41:45:39:3a:c8:8f:fe:3d:15:9c:52:
0a:e0:5e:8c:d4:65:f7:fa:05:27:20:63:74:6e:fe:e9:60:0a:
8c:e4:41:41:e7:de:c7:2a:8e:61:9c:cb:c3:2d:3a:7a:78:ca:
f4:b6:03:3c:42:a2:c2:12:36:67:81:f0:eb:92:30:1e:2e:0b:
d4:c4:2c:f5:4e:77:2b:cc:b3:09:26:3e:20:1f:78:e5:44:9c:
2b:f6:bb:48:67:5c:18:fd:9f:fe:08:e0:05:2f:fd:f0:b9:0c:
95:a2:14:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:12:52 2025 by rpki-client