Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/3SUeA0dtla0YNeSQXHNhPaAjuGo.roa
File: 3SUeA0dtla0YNeSQXHNhPaAjuGo.roa (raw, json)
Hash identifier: YSQXHchLJvKuAf+DmOXg2GhcnI6U92n2fIPGY7mQ1dk=
Subject key identifier: DD:25:1E:03:47:6D:95:AD:18:35:E4:90:5C:73:61:3D:A0:23:B8:6A
Certificate issuer: /CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
Certificate serial: 018FC1DB40B622B330F611DDD40E15B067E9
Authority key identifier: 57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/3SUeA0dtla0YNeSQXHNhPaAjuGo.roa
Signing time: Wed 29 May 2024 00:58:42 +0000
ROA not before: Wed 29 May 2024 00:58:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39718
IP address blocks: 81.30.117.0/24 maxlen: 24
81.30.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 10:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c1:db:40:b6:22:b3:30:f6:11:dd:d4:0e:15:b0:67:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
Validity
Not Before: May 29 00:58:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd251e03476d95ad1835e4905c73613da023b86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:cc:65:5e:e5:4b:ca:40:22:0b:6f:4c:11:
42:48:69:a7:e7:20:aa:fb:48:f8:40:0a:31:77:c3:
b2:a1:b2:e6:bd:73:70:96:d3:31:f5:8c:22:e0:b7:
f3:65:0f:e8:0d:68:25:70:5c:01:80:6c:d7:44:76:
a7:9d:47:37:c3:9a:d1:39:6a:6c:03:f5:9c:4e:01:
87:60:4a:52:09:23:70:1f:97:bc:a4:d3:99:68:ea:
ba:42:3c:89:4e:c6:c2:47:fa:c9:8c:3e:a1:12:62:
9a:66:fa:79:96:e7:88:23:d3:de:fa:95:36:62:72:
0d:da:94:e6:ea:98:06:74:d8:87:ca:e0:fc:42:84:
89:34:2c:30:d2:09:7f:cb:8c:f8:c6:f4:17:ac:b8:
27:b9:6d:8b:52:f7:b4:fc:ea:c2:e6:c8:ec:d1:52:
14:ab:e6:95:cc:12:92:0c:06:4f:ff:71:39:0a:cd:
4b:67:8a:98:86:9c:f7:7a:c0:4b:b4:15:43:6f:a5:
96:2d:8c:dc:c2:4c:90:4a:8a:7a:8c:30:89:f2:f7:
0e:a4:5c:f5:58:e0:1d:15:f0:a8:55:a1:ca:79:70:
ae:68:97:4f:62:f3:e6:5c:52:b9:80:8c:c2:65:75:
0d:9d:04:b7:0e:5c:bc:cc:46:86:49:16:96:5f:57:
76:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:25:1E:03:47:6D:95:AD:18:35:E4:90:5C:73:61:3D:A0:23:B8:6A
X509v3 Authority Key Identifier:
keyid:57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/3SUeA0dtla0YNeSQXHNhPaAjuGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.117.0/24
81.30.127.0/24
Signature Algorithm: sha256WithRSAEncryption
33:8f:f6:6b:36:bc:a9:26:ff:20:6c:3d:ed:19:2a:4b:2a:3c:
e2:25:2e:84:db:c6:a4:e8:0e:1e:89:d1:19:3f:ba:e2:96:03:
a9:f2:7b:ca:10:a6:bf:08:9a:55:3e:32:ab:48:02:ce:19:ac:
e3:62:99:2c:47:71:1d:6c:9e:8f:af:81:1c:fc:42:f4:d7:d2:
c8:f1:3a:dd:fd:b8:e2:44:d6:1a:19:2f:89:a2:18:53:bb:12:
cc:83:a6:5a:9f:f7:da:be:a1:a3:4c:c1:1c:9e:39:71:e1:93:
ed:c8:4e:6c:40:c5:8a:31:2e:43:94:00:5c:37:07:50:30:7d:
aa:78:0d:f8:67:17:94:72:d9:3b:3b:64:89:48:60:d9:dc:26:
2b:c5:ef:e4:65:f1:8d:44:93:40:b8:49:a7:69:bd:41:8d:99:
37:e6:83:2f:14:b7:a3:0e:aa:5b:d5:6e:06:48:c4:5f:c6:c3:
13:f8:dc:a8:6e:d8:e2:ed:ac:be:fe:16:54:65:de:f5:08:2d:
e2:24:09:69:d6:72:45:2c:21:4f:ec:5b:44:e3:11:7c:75:eb:
89:a0:27:13:8e:46:07:9f:e8:6c:8a:0a:c5:48:cb:5d:94:7a:
0c:f8:96:c2:58:5a:59:19:bb:86:7a:12:bc:d5:2e:63:c5:03:
1e:a1:5f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:00 2025 by rpki-client