Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/7RsYk5WkAJKUezokF3LBYi89FWs.roa
File: 7RsYk5WkAJKUezokF3LBYi89FWs.roa (raw, json)
Hash identifier: 63bcrPMT/8882FxKdY3JkwMWZLvEJElfCZvGE0SK8Yk=
Subject key identifier: ED:1B:18:93:95:A4:00:92:94:7B:3A:24:17:72:C1:62:2F:3D:15:6B
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 0193CEC11CBF95CDAF142D6328E5A4C5DBF4
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/7RsYk5WkAJKUezokF3LBYi89FWs.roa
Signing time: Mon 16 Dec 2024 09:16:22 +0000
ROA not before: Mon 16 Dec 2024 09:16:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 81.30.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Dec 2024 16:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ce:c1:1c:bf:95:cd:af:14:2d:63:28:e5:a4:c5:db:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Dec 16 09:16:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed1b189395a40092947b3a241772c1622f3d156b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:51:f6:9a:29:e1:4e:41:15:5e:a9:ea:76:
a8:1f:a1:5f:3a:5b:75:15:02:ab:0b:eb:0d:a5:63:
cc:07:05:2d:ec:7e:1a:3f:9b:b7:22:b7:90:f2:77:
de:b3:66:e8:b6:c3:4f:d9:eb:60:d2:fe:26:62:84:
f1:32:f6:da:1d:f6:b3:1d:4e:f3:06:30:50:05:21:
64:d1:f9:25:24:5d:29:ff:13:25:a9:f4:1e:af:67:
09:76:ce:a7:71:67:0e:14:a6:a4:0e:71:0c:00:91:
d7:0f:b3:46:06:40:d1:b3:1d:89:3d:f9:b1:05:b0:
21:e3:83:24:11:0a:25:f1:6a:a9:87:dc:5a:54:bd:
cb:0d:de:e2:03:70:84:c2:9f:39:e9:bf:af:7c:01:
51:bc:04:d5:7a:83:e9:4d:84:7c:25:28:d9:9d:3d:
d4:9e:30:47:95:53:f3:da:d1:64:bf:6f:29:cf:1a:
b7:d5:25:c9:bd:3a:72:d7:74:4a:01:89:d9:19:ca:
f1:7f:a5:fa:49:46:27:3f:72:03:d2:63:8d:43:03:
67:ef:48:86:1d:08:c5:e9:d3:c8:43:c3:8d:b7:92:
c6:f2:c0:2c:01:50:76:4f:54:65:81:2e:18:05:33:
60:0d:ac:55:e1:cf:ab:c4:6a:16:38:93:97:5e:b3:
58:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1B:18:93:95:A4:00:92:94:7B:3A:24:17:72:C1:62:2F:3D:15:6B
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/7RsYk5WkAJKUezokF3LBYi89FWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.103.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:fe:1b:bb:5e:e6:52:2c:10:06:cb:42:90:1c:dd:21:5a:22:
e3:95:20:2a:c1:26:5b:eb:62:16:03:9a:c6:44:8e:4e:d8:93:
d9:84:66:3b:95:94:a7:cc:da:89:d8:7b:6e:72:78:d7:70:2b:
ee:f8:84:fb:3f:d6:93:28:5f:b1:ab:73:3e:72:37:cd:44:bc:
a8:b5:d9:12:7b:5a:fc:69:1a:87:1d:22:cd:65:e0:2a:3c:02:
b6:ab:51:9a:23:42:eb:af:a4:3e:63:b5:59:89:5a:d5:f8:42:
84:98:cc:2b:10:1a:8b:d8:bf:aa:33:2b:f4:5f:17:e3:5a:85:
88:23:93:07:f4:99:a0:88:41:fd:7d:9c:20:92:75:b2:6b:1e:
55:66:89:55:3d:0b:df:05:89:21:e4:a8:f1:a1:55:63:bb:0c:
2c:27:a4:d3:90:0b:bf:b4:b3:16:b4:5b:a7:59:41:11:9b:84:
0f:6f:df:ff:c9:ee:b8:a5:cc:76:ac:c8:a6:62:7d:0c:ef:c6:
9b:45:ea:0f:7e:02:fa:11:fc:bb:dd:6a:d7:fc:a4:d3:88:d4:
2e:10:2a:0f:09:8c:f0:94:a3:03:67:59:50:34:e1:ed:56:c2:
66:59:c9:c0:66:1f:c0:73:1d:aa:1e:27:21:c9:e0:88:02:f9:
21:98:b2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:12:52 2025 by rpki-client