Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/b69YPV7cBglaBkB04t5PDHZkCFs.roa
File: b69YPV7cBglaBkB04t5PDHZkCFs.roa (raw, json)
Hash identifier: c3PcmeIkUmELO9qpg25/gSKpljCY6G3yGKVPUl569wg=
Subject key identifier: 6F:AF:58:3D:5E:DC:06:09:5A:06:40:74:E2:DE:4F:0C:76:64:08:5B
Certificate issuer: /CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
Certificate serial: 018FCD9C5CA0718FB99474E490780CD16D62
Authority key identifier: 57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/b69YPV7cBglaBkB04t5PDHZkCFs.roa
Signing time: Fri 31 May 2024 07:45:27 +0000
ROA not before: Fri 31 May 2024 07:45:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48129
IP address blocks: 81.30.112.0/24 maxlen: 24
81.30.113.0/24 maxlen: 24
81.30.114.0/24 maxlen: 24
81.30.115.0/24 maxlen: 24
81.30.116.0/24 maxlen: 24
81.30.117.0/24 maxlen: 24
81.30.118.0/24 maxlen: 24
81.30.119.0/24 maxlen: 24
81.30.124.0/24 maxlen: 24
81.30.125.0/24 maxlen: 24
81.30.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 10:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cd:9c:5c:a0:71:8f:b9:94:74:e4:90:78:0c:d1:6d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
Validity
Not Before: May 31 07:45:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6faf583d5edc06095a064074e2de4f0c7664085b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1a:11:04:7a:08:2d:6a:5e:3a:2c:40:08:18:
49:03:b2:9e:6d:23:fa:17:29:fe:ff:25:cc:01:83:
3e:dc:b4:2e:4d:b1:ee:ca:82:47:f3:4d:50:e6:a8:
1d:6e:a3:fc:74:56:af:ee:12:ba:ba:3c:b9:58:d4:
1e:cc:fd:75:7a:75:03:e4:12:49:17:e7:33:5a:c4:
80:77:45:66:6c:86:7c:60:55:d0:8e:f3:de:82:b9:
b7:d2:c9:c1:dd:ba:c9:15:bd:b4:c9:f1:93:6b:cc:
9f:70:4e:f9:b2:2e:09:5f:ba:b3:71:e7:99:ae:8b:
44:ad:ee:64:58:88:03:57:4d:85:3d:85:ad:2f:3d:
2a:b1:00:a2:97:85:bd:e0:f3:d7:da:ed:cd:7e:0a:
da:b3:0e:79:be:7c:27:e4:86:6a:fa:b8:e9:4d:9d:
8f:7f:5a:14:16:d0:c2:76:71:e5:df:fa:5e:1a:77:
7f:28:ac:70:37:c2:d2:fa:ed:0d:66:28:b2:01:61:
53:ef:4a:d2:78:01:a8:dd:d4:2b:c8:ce:94:00:7b:
db:42:8d:77:1c:f6:4d:e9:24:91:af:85:68:3b:08:
5b:1d:96:6e:f4:bd:b8:da:42:a0:d7:80:2f:c2:0b:
f5:2f:54:06:83:01:b7:c6:f8:72:1a:c0:ec:38:82:
58:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AF:58:3D:5E:DC:06:09:5A:06:40:74:E2:DE:4F:0C:76:64:08:5B
X509v3 Authority Key Identifier:
keyid:57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/b69YPV7cBglaBkB04t5PDHZkCFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.112.0/21
81.30.124.0-81.30.126.255
Signature Algorithm: sha256WithRSAEncryption
73:73:08:39:e0:f7:f3:07:6f:fc:5f:e4:18:3c:19:cd:89:cd:
ff:ae:0f:35:9d:51:9b:61:35:bf:27:16:b0:23:fb:ad:b4:f4:
0c:5d:58:e9:ed:64:2b:9f:3f:10:4f:10:b9:c5:37:3a:a5:26:
fe:7d:af:5e:09:01:0b:51:c1:d0:69:4f:8e:36:82:1f:fb:a5:
56:8f:f6:a2:70:8a:9f:5a:b2:f2:57:82:a2:3b:5a:9a:63:cb:
12:74:95:21:d5:cc:d8:bf:a6:3e:85:0c:5c:3a:fc:71:f5:94:
8d:df:7c:7e:a6:3d:65:6f:ee:f4:d3:c7:9a:11:57:eb:e6:48:
17:a9:a5:3e:2f:69:5a:53:2e:08:72:b7:c9:6e:a6:e9:de:68:
3d:84:40:49:f7:f3:8a:22:47:b1:9b:d5:13:59:c1:0c:c1:50:
28:3c:6f:04:b4:4f:28:66:5a:31:78:ea:2b:b2:26:80:74:21:
47:51:b5:87:86:bd:b6:ca:da:be:82:51:8c:60:52:f6:69:78:
cf:fb:78:e5:26:5a:47:8c:e8:68:cc:6c:c9:32:cd:19:bb:4a:
dc:1b:2e:b6:89:17:ff:5a:c6:89:c2:90:e8:f8:41:ba:c9:07:
d3:ae:0d:94:13:85:06:f7:84:dc:2a:3d:40:df:c1:e1:c8:f4:
42:05:e4:c1
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAY/NnFygcY+5lHTkkHgM0W1iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NThjYjExZTg0MmJjYWYxMzIzNjQ3ZjNiZWZlZWUyZmM2
ZjBlMmMwHhcNMjQwNTMxMDc0NTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmFmNTgzZDVlZGMwNjA5NWEwNjQwNzRlMmRlNGYwYzc2NjQwODViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhoRBHoILWpeOixACBhJA7KebSP6
Fyn+/yXMAYM+3LQuTbHuyoJH801Q5qgdbqP8dFav7hK6ujy5WNQezP11enUD5BJJ
F+czWsSAd0VmbIZ8YFXQjvPegrm30snB3brJFb20yfGTa8yfcE75si4JX7qzceeZ
rotEre5kWIgDV02FPYWtLz0qsQCil4W94PPX2u3Nfgrasw55vnwn5IZq+rjpTZ2P
f1oUFtDCdnHl3/peGnd/KKxwN8LS+u0NZiiyAWFT70rSeAGo3dQryM6UAHvbQo13
HPZN6SSRr4VoOwhbHZZu9L242kKg14Avwgv1L1QGgwG3xvhyGsDsOIJYdwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFG+vWD1e3AYJWgZAdOLeTwx2ZAhbMB8GA1UdIwQY
MBaAFFdYyxHoQryvEyNkfzvv7uL8bw4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFqTEVlaEN2SzhUSTJSX08tX3U0dnh2RGl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hMjgzMzAtOGJhMC00Yjg4LWE3YWMt
OGJiZjhiZmM2ZDhlLzEvYjY5WVBWN2NCZ2xhQmtCMDR0NVBESFprQ0ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9hMjgzMzAtOGJhMC00Yjg4LWE3YWMtOGJiZjhiZmM2ZDhl
LzEvVjFqTEVlaEN2SzhUSTJSX08tX3U0dnh2RGl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDUR5wMAwD
BAJRHnwDBABRHn4wDQYJKoZIhvcNAQELBQADggEBAHNzCDng9/MHb/xf5Bg8Gc2J
zf+uDzWdUZthNb8nFrAj+6209AxdWOntZCufPxBPELnFNzqlJv59r14JAQtRwdBp
T442gh/7pVaP9qJwip9asvJXgqI7WppjyxJ0lSHVzNi/pj6FDFw6/HH1lI3ffH6m
PWVv7vTTx5oRV+vmSBeppT4vaVpTLghyt8lupuneaD2EQEn384oiR7Gb1RNZwQzB
UCg8bwS0TyhmWjF46iuyJoB0IUdRtYeGvbbK2r6CUYxgUvZpeM/7eOUmWkeM6GjM
bMkyzRm7StwbLraJF/9axonCkOj4QbrJB9OuDZQThQb3hNwqPUDfweHI9EIF5ME=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:37 2024 by rpki-client on console-ams.rpki-client.org