Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/FG7ijy4DLqP-cbZDf-6B3ZJ2hwo.roa
File: FG7ijy4DLqP-cbZDf-6B3ZJ2hwo.roa (raw, json)
Hash identifier: U9pcPB/DNSm9Mv0uZ+W6cb5kGd1QKtazO9O3DceAn/M=
Subject key identifier: 14:6E:E2:8F:2E:03:2E:A3:FE:71:B6:43:7F:EE:81:DD:92:76:87:0A
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0194EEF28CC6810284A206FB3DD501C0BD58
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/FG7ijy4DLqP-cbZDf-6B3ZJ2hwo.roa
Signing time: Mon 10 Feb 2025 08:21:00 +0000
ROA not before: Mon 10 Feb 2025 08:21:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59532
IP address blocks: 81.181.251.0/24 maxlen: 24
217.156.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 08:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ee:f2:8c:c6:81:02:84:a2:06:fb:3d:d5:01:c0:bd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Feb 10 08:21:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=146ee28f2e032ea3fe71b6437fee81dd9276870a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:e1:db:0c:4f:16:e2:b5:1b:6d:53:6b:e7:
7e:60:5e:fa:b6:5a:70:06:51:4f:f5:60:83:d7:a7:
e7:7d:6f:97:d2:11:72:d4:e3:32:b2:2d:cd:d8:b1:
e3:9e:82:c9:90:54:64:49:a0:a4:67:f8:fe:93:99:
0b:05:e0:a9:39:37:9d:2e:d2:09:c9:40:5e:78:61:
2a:bb:f2:7c:34:f7:3b:ac:24:59:2b:0f:e0:28:39:
dd:45:c1:5e:a0:ec:6b:31:c0:48:fa:7c:74:63:3f:
c8:65:6d:66:a7:a1:2b:4f:30:3e:a3:0d:3d:60:1b:
a3:1b:e8:bd:e8:45:14:78:7f:73:0d:09:7c:c5:cf:
3c:7d:8c:82:81:26:63:b5:ce:26:19:62:12:0a:bc:
74:22:f9:15:98:18:52:42:e0:ff:db:bc:83:2f:48:
f4:d0:aa:a2:0c:21:6c:f3:f3:94:0b:c2:bb:fa:03:
68:6c:6a:b2:ae:d8:e3:8d:e0:81:29:34:e9:1f:ac:
d7:ed:26:9f:1d:65:b9:72:60:13:a1:56:32:b5:31:
94:06:17:dd:61:eb:64:80:63:e7:a1:c0:62:07:d1:
d9:3e:a3:50:f1:e5:92:ab:1a:f6:f2:5b:aa:72:70:
b6:e5:86:59:d6:0f:a7:d8:38:21:ae:26:a8:f2:04:
be:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6E:E2:8F:2E:03:2E:A3:FE:71:B6:43:7F:EE:81:DD:92:76:87:0A
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/FG7ijy4DLqP-cbZDf-6B3ZJ2hwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.251.0/24
217.156.126.0/24
Signature Algorithm: sha256WithRSAEncryption
51:46:b3:9e:2a:9d:98:31:45:ba:1d:e4:b6:f8:0e:ca:12:92:
e8:3f:67:e5:90:5f:18:53:c2:f5:26:c0:16:5f:d2:55:5d:3b:
92:fe:65:cd:22:6e:87:2e:18:c6:e6:32:76:d9:3d:26:e4:99:
cb:84:7a:77:ee:af:65:3e:98:b8:6a:3e:28:bc:2a:89:5d:88:
0f:82:96:2c:0a:d6:89:db:7c:91:52:0d:e1:1b:54:bc:5c:8e:
fd:2f:c6:b3:f8:69:c4:91:3e:17:9a:42:62:23:ca:bc:0b:c1:
6a:3d:8e:0a:82:c8:0a:2f:26:69:be:0f:cd:a3:fb:8b:17:8a:
7d:1d:6e:34:3c:f0:3b:cf:04:0c:38:d4:c5:ac:2d:31:44:6f:
fd:ce:5e:b8:f0:4f:a1:6c:af:6f:ec:66:09:ea:fd:1a:87:d6:
80:a3:4a:42:87:b3:1f:fe:94:2b:d9:c1:7e:19:72:69:f5:dc:
46:41:b4:81:85:bd:e0:12:02:5f:dc:78:c4:f8:6d:6e:f4:c2:
58:52:fa:32:15:bd:90:b9:48:e7:a8:05:e4:37:fa:3f:cc:32:
a5:d5:cf:9c:2c:0e:90:0a:ff:3c:0c:75:01:81:5d:88:c5:dc:
aa:d5:24:b1:64:45:27:e8:2e:0d:fa:c8:d3:ca:77:70:d1:5e:
1b:e7:fd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:59:21 2025 by rpki-client