Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/28fusn5euFR5kd1AP69ANKqWfn0.roa
File: 28fusn5euFR5kd1AP69ANKqWfn0.roa (raw, json)
Hash identifier: GFiwMhlC8r9i8cjM1sFELdLadFJ+/Zo+5J4XIThMD/8=
Subject key identifier: DB:C7:EE:B2:7E:5E:B8:54:79:91:DD:40:3F:AF:40:34:AA:96:7E:7D
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01932F6F17F52D7A1CE1E685989CD4392582
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/28fusn5euFR5kd1AP69ANKqWfn0.roa
Signing time: Fri 15 Nov 2024 10:47:10 +0000
ROA not before: Fri 15 Nov 2024 10:47:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62448
IP address blocks: 81.181.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2f:6f:17:f5:2d:7a:1c:e1:e6:85:98:9c:d4:39:25:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Nov 15 10:47:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbc7eeb27e5eb8547991dd403faf4034aa967e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9d:fb:bd:ad:c6:9b:f3:54:45:f3:87:3d:60:
86:f5:a6:17:38:fc:70:6f:e9:4b:34:01:13:f2:48:
f0:f2:c1:36:93:65:e6:5d:28:1f:cd:3d:6f:c5:46:
6c:d1:65:ca:3e:cc:06:a7:4a:40:d9:48:2c:a6:46:
57:20:4d:c8:80:80:f4:3c:b8:ab:61:87:12:b2:4c:
0c:fc:43:9f:51:73:e6:28:3a:86:b2:d4:02:e8:f7:
68:dd:50:70:03:d5:86:e5:ee:c4:4a:57:a8:f5:f5:
92:95:c5:21:b0:d7:fa:b5:9d:28:6d:09:37:d3:ff:
fd:76:dc:35:d5:b4:0e:e1:69:1b:6b:63:b2:65:4d:
25:93:aa:09:c3:e7:d2:96:94:df:eb:c7:6f:d0:e6:
15:10:86:9a:9f:70:a5:39:71:a7:bf:c2:d5:17:d0:
2c:54:c0:3d:a5:38:bb:d4:06:aa:1e:cf:59:80:31:
1a:d5:95:97:06:68:1c:9e:a2:cd:0e:b3:cf:4f:be:
4e:c9:3f:44:71:3c:72:a9:21:e0:fc:c9:46:99:65:
51:cf:a5:2a:13:42:b7:f6:14:36:33:a6:69:de:e5:
77:42:07:e1:a4:82:fa:9e:85:41:f9:b2:12:b2:fc:
35:f4:c0:40:71:d2:d1:b8:cd:cf:22:61:25:62:73:
05:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C7:EE:B2:7E:5E:B8:54:79:91:DD:40:3F:AF:40:34:AA:96:7E:7D
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/28fusn5euFR5kd1AP69ANKqWfn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.242.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:8d:d7:1a:76:a8:f8:ca:7d:68:65:35:57:08:5a:cd:1d:91:
48:df:88:57:1d:c0:ec:11:fc:f1:97:e7:e7:23:fd:ab:43:cc:
7b:c1:96:cd:91:38:62:39:ac:ca:36:69:b4:5d:f7:fc:ca:da:
0c:ab:d2:44:d4:27:6b:3b:e6:72:0e:32:3c:7c:b2:a9:af:d6:
cc:bc:8d:f9:c3:60:5d:03:29:13:f9:12:11:6c:e2:9d:0f:b4:
bf:54:b1:95:21:98:9a:62:97:87:5a:25:76:50:0c:e4:fb:03:
53:89:a1:b3:09:6f:9e:bb:e0:7e:ff:b4:a7:0b:db:47:b4:15:
a1:37:50:f7:52:96:65:93:a5:df:bb:46:7e:46:c2:71:70:d5:
a0:e9:be:8c:68:b4:0e:80:06:0c:d0:ac:84:f4:7c:f8:06:47:
56:21:08:ac:50:41:5b:b8:cc:77:12:d2:1a:04:04:eb:77:bd:
48:e8:be:9b:cb:9a:c2:fd:77:52:84:1d:f2:59:8c:6e:77:88:
67:ce:fc:af:f4:40:1e:10:ab:c5:65:cd:dc:55:2a:f1:d4:24:
92:6e:ab:12:bb:82:81:f5:7a:74:d4:1c:09:8a:65:34:e4:0c:
f8:33:8c:06:57:6a:8d:04:d1:ed:24:39:fc:93:86:14:67:0b:
69:a0:b0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:44 2025 by rpki-client