Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/7yREpnr_zLL1mIyT8ZoLMun12iY.roa
File: 7yREpnr_zLL1mIyT8ZoLMun12iY.roa (raw, json)
Hash identifier: qEYbKHjXJgTuHlz3uV5DO4EFiUouTMSP/4ONIbTRRX4=
Subject key identifier: EF:24:44:A6:7A:FF:CC:B2:F5:98:8C:93:F1:9A:0B:32:E9:F5:DA:26
Certificate issuer: /CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
Certificate serial: 018EEFE54D3682A67D7DBCD97BB6559EACFB
Authority key identifier: 57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/7yREpnr_zLL1mIyT8ZoLMun12iY.roa
Signing time: Thu 18 Apr 2024 06:29:25 +0000
ROA not before: Thu 18 Apr 2024 06:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48129
IP address blocks: 81.30.124.0/24 maxlen: 24
81.30.125.0/24 maxlen: 24
81.30.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 14:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ef:e5:4d:36:82:a6:7d:7d:bc:d9:7b:b6:55:9e:ac:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
Validity
Not Before: Apr 18 06:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef2444a67affccb2f5988c93f19a0b32e9f5da26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:df:13:00:52:8f:35:18:b6:28:6b:7c:e8:ec:
da:b9:a7:f8:99:a2:eb:8a:3f:db:f2:1b:5f:ca:39:
53:6a:b1:3b:70:c9:c3:97:98:df:94:36:40:9a:f1:
ff:c9:ed:b9:08:c1:e7:df:fb:f6:60:a9:9e:39:d2:
eb:1d:80:ac:29:a4:6d:f1:d7:09:1a:6c:72:8f:82:
be:20:b9:2d:03:fb:35:57:71:f2:85:c9:cf:c8:e8:
03:0d:cb:3c:31:b3:e9:1a:6e:7b:37:fb:3b:4e:0e:
d1:49:5a:c8:9d:6f:2c:67:2a:c8:07:bd:90:e9:3e:
9c:c8:39:54:8c:bb:ea:46:95:d4:11:68:13:06:09:
1b:7d:90:7e:e5:9a:fc:b4:09:88:95:87:f4:1a:f6:
11:1a:e9:aa:a4:cf:45:97:62:25:ed:f0:3d:d1:43:
4c:72:dd:57:7e:10:1c:ad:bc:d1:4d:7c:a8:07:aa:
93:2d:36:ae:fb:83:62:57:b6:c5:eb:00:bb:df:2a:
9d:61:7c:bf:e4:86:34:4b:0e:d2:7f:12:ef:8c:53:
34:2f:0a:70:65:5a:80:12:50:bb:39:d8:3b:cb:37:
a7:9d:70:5b:a4:6f:c7:de:75:0a:67:90:b2:91:04:
38:db:e6:c7:df:11:23:a9:23:fe:67:13:18:40:85:
5e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:24:44:A6:7A:FF:CC:B2:F5:98:8C:93:F1:9A:0B:32:E9:F5:DA:26
X509v3 Authority Key Identifier:
keyid:57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/7yREpnr_zLL1mIyT8ZoLMun12iY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.124.0-81.30.126.255
Signature Algorithm: sha256WithRSAEncryption
22:78:05:b9:55:30:07:c4:93:76:f2:7a:ce:94:d2:32:d2:7b:
a2:0d:0b:b2:00:df:8a:99:b0:4b:fc:8f:51:37:99:b3:b6:27:
ea:97:c6:7f:83:8b:eb:fe:1a:87:cc:f5:85:3d:aa:c8:51:e1:
e8:29:4f:8f:91:a4:ca:48:75:bc:fa:f7:99:15:87:3c:ae:fb:
77:cc:ad:2f:7e:d8:db:c1:e8:2a:c0:08:8e:1d:21:30:bc:37:
56:fc:e2:92:48:d2:5c:26:3a:20:19:d1:9a:39:8a:ce:77:6a:
71:99:e6:f2:16:8c:dd:54:71:1f:ec:47:75:f7:8b:35:b5:da:
f0:8e:b5:7f:14:97:2f:08:45:49:76:8d:c4:68:27:fd:e8:df:
60:0e:de:f9:a0:da:c1:9e:f3:9f:15:f8:36:6c:ca:1a:ff:bb:
26:ea:fd:46:90:4e:b5:2a:19:dd:a1:30:00:e6:6f:a8:6c:59:
f7:54:d7:7e:e9:8f:e0:81:9f:c9:a9:c8:ba:7d:60:d5:fd:df:
71:0e:70:ad:4f:ac:b0:8e:21:47:ae:31:d7:da:c0:cc:b1:1d:
de:c3:8d:7c:9d:6a:a3:e3:f8:e8:0e:c2:da:19:fe:bc:96:2e:
12:e7:04:81:a5:45:60:29:1f:8d:6b:8a:2e:57:62:fa:81:c8:
ec:8c:77:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:49 2024 by rpki-client on console-fra.rpki-client.org