Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/BslbGEjrNr649fpn9bVkWN97tfM.roa
File: BslbGEjrNr649fpn9bVkWN97tfM.roa (raw, json)
Hash identifier: z+8J6sig3vd5CcfT47w3gzzO5OBq+GkTQ7eHalr/hbk=
Subject key identifier: 06:C9:5B:18:48:EB:36:BE:B8:F5:FA:67:F5:B5:64:58:DF:7B:B5:F3
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 0193D9866563385CDA7792504FEE257AEB97
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/BslbGEjrNr649fpn9bVkWN97tfM.roa
Signing time: Wed 18 Dec 2024 11:28:03 +0000
ROA not before: Wed 18 Dec 2024 11:28:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 81.30.103.0/24 maxlen: 24
2a13:ae00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 23 Dec 2024 07:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d9:86:65:63:38:5c:da:77:92:50:4f:ee:25:7a:eb:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Dec 18 11:28:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06c95b1848eb36beb8f5fa67f5b56458df7bb5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:64:d3:05:49:9e:49:ac:20:5a:33:d7:ac:44:
49:c0:7a:42:90:4f:00:36:7c:67:1f:c6:a2:9b:fc:
7f:a8:dd:f1:dd:21:6e:75:40:f2:61:00:35:33:af:
9b:23:25:45:ae:bd:b3:17:08:e8:44:44:12:f9:12:
70:f6:44:a1:70:ad:91:40:1f:e5:45:94:97:18:db:
3b:d5:61:d2:ce:4c:bb:ec:49:0d:5c:98:21:90:32:
5a:26:c2:df:d7:f2:bd:1d:ca:59:95:1d:6a:48:a4:
df:94:56:4b:9a:7c:1e:23:f4:f4:b5:a5:a3:d8:46:
2d:5a:ec:d9:b8:06:a0:98:69:8d:d6:04:05:e1:f1:
bb:5b:03:0c:a0:43:c3:58:16:75:7e:6a:8c:e8:71:
4f:12:c7:ff:fd:1e:ed:a3:a1:a9:58:9d:6f:96:58:
40:1f:2a:aa:6a:25:50:10:53:28:81:67:df:bb:80:
3d:72:96:90:b2:7f:6f:e8:02:ad:bc:26:6b:2b:b5:
c9:5d:6f:30:25:93:a2:70:41:c6:0a:ac:dd:5e:f0:
38:41:84:53:88:e9:fe:81:63:d2:0d:90:e1:dc:5d:
3b:f3:23:80:49:75:65:bd:d5:d4:13:78:8a:bb:b4:
6e:7a:31:1c:9e:df:94:6a:95:8a:a0:f6:a9:72:a0:
36:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C9:5B:18:48:EB:36:BE:B8:F5:FA:67:F5:B5:64:58:DF:7B:B5:F3
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/BslbGEjrNr649fpn9bVkWN97tfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.103.0/24
IPv6:
2a13:ae00::/29
Signature Algorithm: sha256WithRSAEncryption
01:6b:0b:43:bb:a0:41:c9:44:ce:37:e2:7a:84:e1:cc:b2:6e:
b8:d0:f1:69:0b:9b:08:f6:50:70:c1:cd:72:01:a8:4f:2c:e3:
e7:e0:89:94:be:e4:44:61:51:40:ab:f2:12:0d:af:03:06:32:
fc:3f:63:59:3a:a8:7d:6f:a9:48:3c:c7:37:01:7c:03:ec:f6:
31:6e:c9:50:d7:83:d3:11:a6:d0:d1:f5:81:a0:c3:6c:ab:bf:
39:e4:56:e4:dd:7c:f1:72:f9:7a:61:91:d2:f8:90:6e:55:61:
f7:b7:3c:13:d5:a0:90:cc:03:06:48:83:09:ec:f1:bf:bd:8e:
63:c8:df:10:2a:99:5b:7f:b7:38:10:06:23:ae:7e:b7:db:e1:
2f:51:aa:2e:b4:6c:ae:e6:3f:5a:90:dc:6d:23:e7:f6:5c:15:
0c:1b:af:e2:32:6b:8b:cf:7d:31:73:82:5a:e4:fd:00:e0:4e:
7f:b2:14:71:5c:c8:2e:2f:ad:6a:88:00:dd:4f:1e:cf:69:ff:
09:a1:51:d9:1c:df:e9:df:93:46:ed:aa:78:2a:29:f0:af:ee:
53:54:55:6d:3c:54:fe:9e:fb:a2:3f:8d:b0:cb:7d:84:28:08:
f9:94:31:6e:e5:e3:d7:11:f9:65:1c:8f:41:1c:ae:d8:4c:62:
be:44:4f:5d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZPZhmVjOFzad5JQT+4leuuXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzODkzNDFlMTBlNmIwMjFmYTg0N2Y1NTVlNTYwM2RlZjg1
ZDJjMmIwHhcNMjQxMjE4MTEyODAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmM5NWIxODQ4ZWIzNmJlYjhmNWZhNjdmNWI1NjQ1OGRmN2JiNWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGTTBUmeSawgWjPXrERJwHpCkE8A
NnxnH8aim/x/qN3x3SFudUDyYQA1M6+bIyVFrr2zFwjoREQS+RJw9kShcK2RQB/l
RZSXGNs71WHSzky77EkNXJghkDJaJsLf1/K9HcpZlR1qSKTflFZLmnweI/T0taWj
2EYtWuzZuAagmGmN1gQF4fG7WwMMoEPDWBZ1fmqM6HFPEsf//R7to6GpWJ1vllhA
HyqqaiVQEFMogWffu4A9cpaQsn9v6AKtvCZrK7XJXW8wJZOicEHGCqzdXvA4QYRT
iOn+gWPSDZDh3F078yOASXVlvdXUE3iKu7RuejEcnt+UapWKoPapcqA2VwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAbJWxhI6za+uPX6Z/W1ZFjfe7XzMB8GA1UdIwQY
MBaAFCOJNB4Q5rAh+oR/VV5WA974XSwrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTRrMEhoRG1zQ0g2aEg5VlhsWUQzdmhkTENzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82YWI5M2UtODU2My00NjA2LWIxOWUt
OGMwMDNjNGE1NDU2LzEvQnNsYkdFanJOcjY0OWZwbjliVmtXTjk3dGZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC82YWI5M2UtODU2My00NjA2LWIxOWUtOGMwMDNjNGE1NDU2
LzEvSTRrMEhoRG1zQ0g2aEg5VlhsWUQzdmhkTENzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAUR5nMA0E
AgACMAcDBQMqE64AMA0GCSqGSIb3DQEBCwUAA4IBAQABawtDu6BByUTON+J6hOHM
sm640PFpC5sI9lBwwc1yAahPLOPn4ImUvuREYVFAq/ISDa8DBjL8P2NZOqh9b6lI
PMc3AXwD7PYxbslQ14PTEabQ0fWBoMNsq7855Fbk3Xzxcvl6YZHS+JBuVWH3tzwT
1aCQzAMGSIMJ7PG/vY5jyN8QKplbf7c4EAYjrn632+EvUaoutGyu5j9akNxtI+f2
XBUMG6/iMmuLz30xc4Ja5P0A4E5/shRxXMguL61qiADdTx7Paf8JoVHZHN/p35NG
7ap4Kinwr+5TVFVtPFT+nvuiP42wy32EKAj5lDFu5ePXEfllHI9BHK7YTGK+RE9d
-----END CERTIFICATE-----
Generated at Fri Apr 18 20:14:43 2025 by rpki-client