Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/gVXdAoIl6qeDZNeie7ItELP-eZQ.roa
File: gVXdAoIl6qeDZNeie7ItELP-eZQ.roa (raw, json)
Hash identifier: +HVbrjsm1xgmKvzUYNgXerLXl4jADGL74VKPcvxtFhc=
Subject key identifier: 81:55:DD:02:82:25:EA:A7:83:64:D7:A2:7B:B2:2D:10:B3:FE:79:94
Certificate issuer: /CN=567190854786a16afa6b0ec78dfb0620abaacfef
Certificate serial: 018CCA99039E5D9F0FD7810449E785AEC2D1
Authority key identifier: 56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/gVXdAoIl6qeDZNeie7ItELP-eZQ.roa
Signing time: Tue 02 Jan 2024 14:34:34 +0000
ROA not before: Tue 02 Jan 2024 14:34:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41489
IP address blocks: 81.187.42.0/24 maxlen: 24
81.187.96.0/20 maxlen: 20
81.187.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:03:9e:5d:9f:0f:d7:81:04:49:e7:85:ae:c2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567190854786a16afa6b0ec78dfb0620abaacfef
Validity
Not Before: Jan 2 14:34:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8155dd028225eaa78364d7a27bb22d10b3fe7994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d0:b2:66:7b:4f:d3:b9:07:e9:ad:35:a1:c3:
bd:4a:f6:d1:4e:e3:dc:9e:f2:37:27:5e:31:38:90:
48:bd:b8:3d:de:e8:7e:f6:85:d8:6d:df:60:23:fd:
f2:8e:d4:9f:41:57:56:49:b7:c8:f8:d6:f6:d2:ca:
18:1f:a5:c8:71:b6:37:e9:25:01:12:97:a5:e6:9c:
25:7a:c8:54:35:9c:b2:86:eb:ef:0d:36:d7:7f:d1:
6b:73:ea:01:4f:c5:44:f4:fd:eb:22:ea:26:45:04:
84:5d:9b:e7:ee:f1:52:6b:ef:19:14:55:43:98:bc:
2c:e5:f9:56:47:d2:12:c6:d6:ff:46:91:62:62:99:
a0:2f:a5:d6:23:4f:7e:ec:4b:7c:24:5d:08:73:4e:
af:88:01:ca:63:41:1f:3e:dd:c3:d4:8a:0a:e9:bd:
1d:48:e3:9e:90:c5:97:fe:c7:8d:f2:fe:4c:2c:5a:
06:1d:88:c1:e6:aa:5f:a6:30:9b:28:40:5c:3b:da:
81:9c:e9:27:00:03:8f:80:8e:be:ee:16:04:ad:de:
b3:01:95:8e:f7:90:7b:b1:90:56:84:bf:86:6f:fb:
3b:46:5f:b6:b1:5b:21:fd:0b:c0:9a:1b:3a:8a:24:
95:2f:6c:aa:19:ab:3c:da:d1:b9:a5:a2:7e:49:72:
11:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:55:DD:02:82:25:EA:A7:83:64:D7:A2:7B:B2:2D:10:B3:FE:79:94
X509v3 Authority Key Identifier:
keyid:56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/gVXdAoIl6qeDZNeie7ItELP-eZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.187.42.0/24
81.187.96.0/20
81.187.128.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:7b:52:7f:f6:3c:67:a8:00:3d:82:00:21:ae:3c:56:0c:96:
19:3d:6e:f0:45:af:9a:32:07:1f:40:f9:e3:b9:fc:d7:45:24:
f4:09:98:a0:ad:34:95:74:1c:f7:bf:e7:38:8a:d7:47:3c:e9:
49:c1:7e:ef:aa:e2:98:38:eb:ac:44:ca:03:82:6b:1e:ce:a7:
30:fc:41:6f:f5:59:a6:06:53:2e:48:10:26:61:41:2b:32:1b:
bd:bc:13:a9:c3:7d:68:af:9f:4e:53:cb:82:af:d0:92:02:85:
de:6d:20:a4:1b:e4:ad:c7:0d:6a:5a:a2:79:08:93:a5:f7:a6:
fa:96:f1:aa:bf:93:aa:bc:91:38:e6:52:8b:fd:e0:33:03:fa:
ea:60:3f:ed:7f:ff:e2:22:d7:9e:58:7a:72:44:b1:3d:c3:1e:
80:f8:cb:b9:25:2d:84:60:d0:8f:df:c5:e1:53:28:44:4f:17:
44:07:9d:10:e4:e1:fe:a1:20:92:01:8f:01:34:a6:e6:ea:e9:
a9:15:51:a4:12:34:cf:83:eb:10:be:0f:8b:61:ef:48:50:8d:
e9:50:34:22:c6:a4:43:5c:3f:13:17:51:e7:65:5d:c6:d8:af:
2b:01:ee:d6:7d:e3:95:8e:0c:07:b9:82:41:d9:36:a0:30:53:
d3:01:bc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:30 2025 by rpki-client