Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/f0u7IDGOUQLEMArEztTePi5PidA.roa
File: f0u7IDGOUQLEMArEztTePi5PidA.roa (raw, json)
Hash identifier: PQKEaCSJmZXSo/3dbxQTN4QhRmlXaKmKroMjzAHGinI=
Subject key identifier: 7F:4B:BB:20:31:8E:51:02:C4:30:0A:C4:CE:D4:DE:3E:2E:4F:89:D0
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C3005FAC7A98EA6F6F07C32ACEE74
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/f0u7IDGOUQLEMArEztTePi5PidA.roa
Signing time: Wed 01 Jan 2025 01:47:48 +0000
ROA not before: Wed 01 Jan 2025 01:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59532
IP address blocks: 81.181.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 08:21:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:30:05:fa:c7:a9:8e:a6:f6:f0:7c:32:ac:ee:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f4bbb20318e5102c4300ac4ced4de3e2e4f89d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:e9:f2:82:6f:3a:23:df:16:1f:96:b9:71:
8b:59:8b:e2:1a:4e:0e:73:58:e0:de:69:cb:bb:e3:
d7:d7:f1:53:fe:0f:93:52:96:db:24:fb:7a:36:09:
1b:24:08:a9:d5:31:7d:65:f5:50:a6:90:55:a9:54:
b5:82:a1:2a:0c:4c:1d:94:c2:9c:13:6c:1f:cf:0d:
e4:1f:69:12:be:46:e3:21:eb:3f:6c:08:ba:a7:33:
1f:e6:38:33:ec:f3:d9:34:88:d3:ae:50:79:5b:e5:
e4:ec:c0:3b:7d:29:43:d3:50:bb:38:96:a3:c0:fa:
e7:6b:c9:4a:25:da:4e:4f:3c:6a:d2:3b:dc:35:91:
bb:fc:b7:da:65:34:e3:e5:50:1b:99:40:e6:aa:e6:
1f:99:09:a5:b9:cd:fe:6e:72:20:e1:20:46:c3:ee:
49:22:94:67:dd:10:3b:df:96:41:65:27:1f:77:98:
c8:2e:88:3a:e7:df:e0:40:a3:45:4a:26:80:ee:f7:
5a:f7:06:ec:cf:f2:6e:09:8f:0a:9c:26:90:5f:76:
b8:52:43:da:4f:80:1b:47:68:7b:c4:2b:6f:38:5d:
07:28:89:b5:02:db:b5:2a:73:40:8f:e2:bf:c4:6e:
e3:1a:90:6a:b5:db:51:6a:72:5b:b4:81:04:d9:c1:
4d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4B:BB:20:31:8E:51:02:C4:30:0A:C4:CE:D4:DE:3E:2E:4F:89:D0
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/f0u7IDGOUQLEMArEztTePi5PidA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:99:49:44:fb:30:1e:ef:17:11:61:f8:6b:e1:cb:2c:4d:16:
56:03:13:19:e8:af:31:33:1d:eb:e4:00:5a:41:e2:56:63:b9:
20:69:d5:d2:ee:e2:19:66:5f:1e:e6:a1:29:31:8e:ec:d7:58:
a6:94:9f:84:a9:a9:e0:92:3c:e9:95:3c:b8:f6:81:cd:b8:e4:
f7:d5:3c:b1:7f:36:79:71:2f:97:c3:fa:a7:79:16:b0:03:3d:
91:b8:7b:f8:99:56:f1:9f:05:7e:fe:b3:b4:84:a5:df:b5:14:
74:23:38:ac:c2:e7:02:5b:8e:3c:92:87:07:63:23:10:07:ac:
cd:31:2a:40:35:a1:07:cb:6a:fc:b6:69:7c:e3:64:fc:4f:77:
57:e5:24:a6:87:63:35:d7:e9:17:60:b8:df:92:ad:08:19:8a:
1c:6e:e8:16:c5:a5:a3:dc:2e:f4:3c:d6:e9:ba:80:8d:08:e5:
0b:91:4d:0c:7e:4d:64:ef:9f:33:3d:34:40:00:41:34:3c:24:
94:59:69:f9:1e:f7:ee:6e:5a:43:74:47:64:0e:ad:05:37:ef:
7e:81:e1:a2:e7:23:7e:20:58:78:6b:40:39:f8:b0:87:b1:48:
84:02:2d:93:94:6d:69:d1:a3:c0:b6:ad:a0:a8:98:af:83:c8:
3b:76:f3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:11 2025 by rpki-client