Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/0A81Rujin_CnJCdjJVQTCXE7u-M.roa
File: 0A81Rujin_CnJCdjJVQTCXE7u-M.roa (raw, json)
Hash identifier: DiQG0XmODGAcQkXJucZBKi0yPkIpgD9CZggE0RonT1Q=
Subject key identifier: D0:0F:35:46:E8:E2:9F:F0:A7:24:27:63:25:54:13:09:71:3B:BB:E3
Certificate issuer: /CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Certificate serial: 018CC9BC88999AF9596C4A17741513BAED4B
Authority key identifier: 7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/0A81Rujin_CnJCdjJVQTCXE7u-M.roa
Signing time: Tue 02 Jan 2024 10:33:45 +0000
ROA not before: Tue 02 Jan 2024 10:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51862
IP address blocks: 185.132.44.0/24 maxlen: 24
185.132.47.0/24 maxlen: 24
185.132.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 10:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:88:99:9a:f9:59:6c:4a:17:74:15:13:ba:ed:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Validity
Not Before: Jan 2 10:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d00f3546e8e29ff0a724276325541309713bbbe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:97:cb:58:76:6c:bd:1e:85:3b:8e:63:b0:
ab:cc:5b:78:ed:db:44:14:83:56:c0:68:d7:1f:fd:
6d:4c:c7:86:be:26:f3:a9:dc:24:90:70:04:5f:27:
d1:e4:8d:33:e4:ca:87:a4:c8:4f:37:fb:6d:79:71:
ca:d3:31:da:4c:1a:2f:b4:f4:82:a8:5c:3d:1d:62:
9a:e8:9a:ba:1f:1f:81:46:2f:26:57:61:ff:33:cf:
20:97:3f:fc:30:b7:b9:6a:dd:a2:64:e2:c9:fd:83:
0a:81:19:50:96:2a:3b:16:33:7c:29:98:de:48:0a:
61:ee:48:4c:31:7f:f7:ce:e7:a3:05:bb:9f:d1:4d:
c8:3a:32:69:c2:e3:f1:b3:bf:2b:9e:96:e7:2b:c6:
c4:73:55:ba:19:1f:97:a3:90:ba:1f:cf:92:f6:b5:
fa:8c:b5:27:54:86:df:2f:27:c7:08:a2:1a:f7:de:
fd:ba:f9:4c:f5:de:34:f8:68:87:e1:d7:8f:8f:8e:
7c:ce:0b:de:36:53:c7:61:fc:f8:30:03:16:f7:6d:
94:c0:e2:95:e7:25:4c:48:e2:f5:99:7e:36:a2:fb:
d8:59:8d:d1:30:e9:76:da:18:5f:3e:9e:98:ef:c3:
58:4d:0e:a5:bf:50:9c:88:22:4f:78:7b:7f:cd:38:
4a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0F:35:46:E8:E2:9F:F0:A7:24:27:63:25:54:13:09:71:3B:BB:E3
X509v3 Authority Key Identifier:
keyid:7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/0A81Rujin_CnJCdjJVQTCXE7u-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.44.0/23
185.132.47.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:d3:7e:35:71:e4:22:a5:91:42:37:17:c9:6e:4b:7e:6c:e8:
84:fd:e1:47:8b:f2:13:d6:72:df:9d:0f:48:37:04:4e:09:90:
87:9a:40:9b:8c:a6:70:16:81:79:47:9b:37:5c:49:0e:4a:03:
38:87:e5:4f:2d:fe:42:34:f9:53:85:f7:1d:b3:33:cc:d4:c8:
03:5e:cc:f7:53:93:0a:73:d4:b2:ab:2a:b8:8c:85:49:ec:a6:
e6:83:76:a0:11:07:21:18:f4:92:5b:12:bf:1f:5c:0d:04:f5:
ca:f6:d2:e8:be:93:41:bb:bc:3a:3f:1c:ee:b1:b5:c7:1a:be:
be:5d:4e:25:41:72:d1:6c:4e:92:62:bc:5f:0e:d8:d4:66:4c:
29:34:cc:d9:de:a8:98:bb:d8:87:30:bf:26:b3:7c:45:27:a9:
9d:a3:f1:4b:b4:aa:bf:ec:5e:b2:d4:02:3c:3c:0f:67:94:f6:
bf:9f:ac:f6:ff:08:9a:c9:de:d3:0b:21:68:06:5f:82:2a:ae:
d4:02:78:67:f4:b0:9a:0f:a5:ce:85:3a:f1:41:09:ad:fd:55:
14:01:b9:4b:57:79:43:38:6e:b0:cd:7c:23:7b:e4:46:81:3d:
16:dd:d7:ff:22:4e:8a:7e:d3:d7:98:21:cb:9d:d2:e5:30:25:
ae:b6:b0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:54:13 2025 by rpki-client