Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/Rxpkt8L9NBM7r32r3ix4abRdq3M.roa
File: Rxpkt8L9NBM7r32r3ix4abRdq3M.roa (raw, json)
Hash identifier: 57NP/Jiq8pDxX/7tLHFz3yVmjEqnN9yq0+EpwO1YaDg=
Subject key identifier: 47:1A:64:B7:C2:FD:34:13:3B:AF:7D:AB:DE:2C:78:69:B4:5D:AB:73
Certificate issuer: /CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
Certificate serial: 018FB9174AFF619653AD318A797EB7C60401
Authority key identifier: 57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/Rxpkt8L9NBM7r32r3ix4abRdq3M.roa
Signing time: Mon 27 May 2024 08:07:42 +0000
ROA not before: Mon 27 May 2024 08:07:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48129
IP address blocks: 81.30.112.0/24 maxlen: 24
81.30.113.0/24 maxlen: 24
81.30.114.0/24 maxlen: 24
81.30.115.0/24 maxlen: 24
81.30.116.0/24 maxlen: 24
81.30.117.0/24 maxlen: 24
81.30.118.0/24 maxlen: 24
81.30.119.0/24 maxlen: 24
81.30.124.0/24 maxlen: 24
81.30.125.0/24 maxlen: 24
81.30.126.0/24 maxlen: 24
81.30.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 07:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:17:4a:ff:61:96:53:ad:31:8a:79:7e:b7:c6:04:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
Validity
Not Before: May 27 08:07:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=471a64b7c2fd34133baf7dabde2c7869b45dab73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:f3:a0:86:ea:07:82:21:10:e6:2f:ae:d5:
b7:88:2a:42:df:3f:22:3c:08:2a:56:d5:e9:67:bb:
c6:b7:3b:d6:88:68:46:f9:3d:6c:68:2e:9d:2b:fd:
78:cd:3c:8d:47:f2:da:ff:3e:95:1d:bb:93:3c:52:
4a:a3:0b:09:ae:7c:2c:68:bf:bd:27:b6:86:96:3f:
dc:7f:34:3d:44:5b:68:d3:bb:e2:d5:97:aa:82:68:
ce:cf:75:55:d6:f4:b6:74:e8:5e:6d:ef:ac:f1:df:
df:84:97:a5:b5:b6:f0:2b:cc:db:11:e7:f4:b9:ac:
05:4a:5a:8e:c2:fb:58:6f:93:79:e7:8e:c1:67:bf:
b4:e7:de:80:1f:fc:c9:b1:3d:d4:d0:20:1a:19:c8:
ec:f7:27:da:de:3a:30:05:bd:3d:ca:22:9e:9b:7c:
eb:23:44:8b:99:1f:a1:58:09:ad:db:7b:d2:a0:4c:
3f:18:98:28:bf:9d:c3:cd:47:1b:f2:b7:31:bb:58:
9f:d6:b0:d0:fe:74:5c:5f:e2:5e:d4:8e:e5:64:ff:
76:07:85:ab:01:0e:d7:85:52:ce:f7:55:6d:5c:2c:
4a:d1:c5:0b:2d:86:fa:68:6e:9e:c1:aa:a9:b4:93:
03:bf:fd:99:78:f4:4a:0f:81:f5:b9:bb:44:10:5d:
75:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1A:64:B7:C2:FD:34:13:3B:AF:7D:AB:DE:2C:78:69:B4:5D:AB:73
X509v3 Authority Key Identifier:
keyid:57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/Rxpkt8L9NBM7r32r3ix4abRdq3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.112.0/21
81.30.124.0/22
Signature Algorithm: sha256WithRSAEncryption
21:a8:5d:09:11:59:21:f0:28:3f:82:1c:51:b4:57:99:e1:04:
11:bb:3e:67:6b:3c:9b:47:98:27:09:f4:c4:6a:44:40:54:06:
3f:14:df:2a:ce:42:ca:99:8b:8c:95:28:24:f2:27:b7:f0:88:
1f:28:16:0d:67:10:aa:6b:48:b5:65:4e:81:c0:1a:b6:60:58:
5a:23:e7:b4:3a:45:31:e0:9d:02:23:9a:3d:0e:d4:be:69:1f:
65:0d:1f:9f:f9:06:4b:8e:bb:67:5c:c2:6b:47:a4:90:2b:7d:
db:db:3f:44:86:f0:69:27:90:4a:a8:e7:87:e6:9a:0e:52:91:
6f:ae:22:22:ce:d0:cb:53:c6:fb:3a:11:df:88:a5:02:9e:c3:
4d:f0:53:31:ab:42:0f:b7:a9:11:c7:e0:2b:a5:e8:36:28:fe:
6a:03:2e:14:d4:5a:51:fa:7f:7e:0b:9d:c6:e3:21:c1:d4:f3:
bb:af:5d:74:ef:63:ce:45:8c:d3:4c:93:37:30:ac:f5:85:4d:
f5:42:92:c2:71:35:d5:8e:41:98:bc:01:db:e0:e2:b3:ec:3d:
6f:ef:d0:90:bb:8a:5d:5d:5a:02:84:9a:eb:25:bb:34:70:96:
63:9f:ed:c6:d4:1d:8b:5f:a3:65:07:18:5c:21:52:47:6f:d9:
92:6d:8b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:37 2025 by rpki-client