Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/MOGcexZHEbY4jSKdmP-QqiQRxCY.roa
File: MOGcexZHEbY4jSKdmP-QqiQRxCY.roa (raw, json)
Hash identifier: TCFDYaE1HP1uDa9/bPODAQHGIuHVS/SQy3ti6kLvDs8=
Subject key identifier: 30:E1:9C:7B:16:47:11:B6:38:8D:22:9D:98:FF:90:AA:24:11:C4:26
Certificate issuer: /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial: 019421444C1CAE643484CA5930519F0948E4
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/MOGcexZHEbY4jSKdmP-QqiQRxCY.roa
Signing time: Wed 01 Jan 2025 09:48:31 +0000
ROA not before: Wed 01 Jan 2025 09:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199732
IP address blocks: 81.27.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 12:44:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4c:1c:ae:64:34:84:ca:59:30:51:9f:09:48:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
Validity
Not Before: Jan 1 09:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30e19c7b164711b6388d229d98ff90aa2411c426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:67:ae:84:0f:4c:ec:17:2a:f6:9f:57:9a:
6e:b4:bb:a7:45:f0:60:7d:70:0f:a9:20:32:b7:51:
93:84:fb:6d:a4:d3:71:6f:19:9f:90:e9:2e:48:6c:
77:80:c1:0d:d9:ac:0d:22:73:d3:da:64:6c:5d:22:
2b:fa:8c:fd:e6:52:fe:41:c5:84:b9:fe:12:75:f2:
22:25:25:81:e5:c6:4f:26:ec:d9:91:07:63:cf:2c:
c8:1f:35:da:79:9f:56:2a:46:35:71:0a:05:65:ef:
fb:84:31:04:f5:f4:c1:f9:5c:d8:e6:fe:f6:9d:a9:
1b:3d:69:42:07:2d:ef:97:a4:f5:a6:ae:f8:8a:54:
b5:61:a7:9b:6e:96:bc:f6:80:7d:d4:bf:5e:f4:28:
e5:95:5f:97:89:d1:58:a1:a6:02:63:c5:9b:e3:3d:
6f:59:8a:da:7b:d4:d8:8c:a1:80:1b:04:36:c8:76:
67:b1:b4:e4:e5:21:79:7e:05:6c:4f:44:05:be:c3:
63:24:98:0a:6c:6c:4a:28:f1:a7:8e:9b:c6:0d:81:
d9:9c:aa:12:7d:e3:87:8d:81:dd:2c:b2:15:f3:8d:
1e:23:07:af:8b:af:d6:4f:ed:11:6b:75:c3:75:e3:
e4:f9:8e:77:76:44:2d:12:6d:37:42:15:8f:b1:75:
d6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E1:9C:7B:16:47:11:B6:38:8D:22:9D:98:FF:90:AA:24:11:C4:26
X509v3 Authority Key Identifier:
keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/MOGcexZHEbY4jSKdmP-QqiQRxCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.245.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:6c:49:7d:00:6a:2f:51:8c:91:ad:4f:23:c8:34:31:e0:01:
ca:36:46:c1:c6:b1:63:12:a1:ed:78:9b:86:49:75:5f:54:e5:
e6:0a:95:91:9a:fa:b7:ea:cf:65:ca:ed:fa:ca:9a:96:c9:11:
43:f5:f3:71:4c:3a:f7:36:9f:2d:b9:aa:84:83:5b:b9:92:00:
03:f2:ef:cd:2c:50:53:4a:41:42:d8:0f:83:60:8b:35:51:37:
81:cf:e8:19:3a:ab:43:5b:ec:e4:9d:26:ae:58:10:5d:97:a2:
31:8b:a1:56:8f:87:e7:57:b3:1e:6a:60:ce:2d:67:ff:c6:25:
77:e2:02:2f:78:e9:13:5c:6c:0f:15:84:86:79:e5:42:a1:b7:
77:53:63:e7:62:e4:93:3a:7d:29:24:15:d9:c7:81:91:50:c4:
80:b0:4f:3f:25:99:33:42:57:00:06:86:73:29:7b:42:1c:1a:
79:8b:d9:4c:8d:32:e3:99:a9:34:0c:7b:9c:a9:ef:2e:40:69:
6e:0e:e0:f4:83:5a:a8:3e:76:88:f9:b3:e8:c0:ea:85:2f:41:
eb:e7:4d:be:18:a8:48:ef:9a:a3:8d:24:e8:fb:68:ea:09:90:
9b:50:a8:e9:0f:ab:40:dd:2b:00:79:4b:d5:2b:ef:80:0a:95:
a6:7b:84:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:18 2025 by rpki-client