Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-J0BccDyqel_ZoYCcZz1UtxdZpg.roa
File: 1-J0BccDyqel_ZoYCcZz1UtxdZpg.roa (raw, json)
Hash identifier: JRc7kUsMkm7aiGB7S3YzruBnzvZkBiiaRFwBIfIFVcM=
Subject key identifier: F8:9D:01:71:C0:F2:A9:E9:7F:66:86:02:71:9C:F5:52:DC:5D:66:98
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01900126F3612AFED559FCDA20ED997BC728
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-J0BccDyqel_ZoYCcZz1UtxdZpg.roa
Signing time: Mon 10 Jun 2024 07:57:28 +0000
ROA not before: Mon 10 Jun 2024 07:57:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48266
IP address blocks: 81.5.191.0/24 maxlen: 24
213.218.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 12:37:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:26:f3:61:2a:fe:d5:59:fc:da:20:ed:99:7b:c7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 10 07:57:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f89d0171c0f2a9e97f668602719cf552dc5d6698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:43:ee:dd:ae:af:c0:dc:96:df:5d:99:c6:
b8:cf:31:42:31:fa:5b:ba:3c:d8:a1:95:c0:84:88:
db:c1:19:bb:33:69:04:07:61:d7:4a:4b:fb:eb:50:
46:7a:20:32:7d:50:64:d5:6f:fe:87:d1:42:44:80:
11:26:b1:a5:d1:13:10:fc:44:d5:15:b6:50:e9:5f:
1a:92:29:d8:f6:91:e2:db:d8:8d:04:45:54:c2:9c:
07:45:6d:ef:06:0c:65:4c:8d:4a:35:c3:0f:db:e2:
bd:e6:11:1e:a9:b9:d8:19:ea:eb:38:fc:79:0a:d8:
be:6f:fa:1f:b8:32:f1:20:e1:fd:e5:3b:5a:76:80:
82:9c:1a:ce:43:8f:1a:c4:f4:94:23:e0:28:cd:d3:
21:d0:fa:2c:e4:de:50:30:83:45:a1:7c:d4:1e:60:
47:6f:56:06:89:6f:9c:c2:c7:79:ce:47:e5:62:59:
1c:76:45:63:eb:df:55:a2:17:78:ed:1e:6b:27:9b:
aa:45:2f:e1:1d:57:a8:74:26:d1:83:4e:16:b1:6c:
ab:d8:60:ba:05:5c:64:37:53:dc:ff:47:fe:7c:f6:
ef:d3:a5:e0:15:83:f1:00:d5:07:af:9e:a5:d6:ac:
5e:92:82:69:31:30:f7:a6:af:58:7b:ad:d6:7b:99:
c0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9D:01:71:C0:F2:A9:E9:7F:66:86:02:71:9C:F5:52:DC:5D:66:98
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-J0BccDyqel_ZoYCcZz1UtxdZpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.191.0/24
213.218.238.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:2e:40:9e:ce:ac:71:73:18:18:34:7e:25:ad:c3:6e:26:7d:
b0:13:e7:8f:1e:c9:3a:3b:75:87:d3:b0:14:36:b8:74:fd:df:
85:a1:12:0c:ff:a5:63:25:cb:53:04:bd:a8:da:aa:9c:c9:9d:
0e:25:c0:70:d8:0b:fc:22:8a:ce:0d:b8:89:04:8a:f3:98:b2:
75:11:2a:20:88:55:ff:32:6c:56:d8:6b:06:8d:8c:13:85:fa:
00:19:ed:2f:fe:8d:e6:d9:0d:34:37:04:84:1f:da:b9:ee:73:
81:fc:2f:f3:a3:8a:6c:b0:31:ab:9f:84:15:14:48:19:a7:68:
f5:aa:a1:8f:13:89:8d:75:8e:5a:50:e7:b5:19:fa:a1:92:34:
74:3b:31:8f:c8:0f:e3:f0:d8:f4:d3:cb:c3:4e:c2:fb:f3:3a:
4b:ad:ef:26:fb:1d:e6:37:97:05:ca:e0:0b:43:2b:4b:59:be:
aa:15:4b:2c:2f:86:f5:13:96:a7:ac:97:c7:fa:9b:13:9f:4f:
48:56:a3:f9:a7:fa:dd:05:ce:2c:2f:84:9c:34:de:a8:f1:94:
28:74:c2:15:91:65:7e:cc:3d:66:a1:7f:ef:6d:72:26:16:69:
12:3e:43:bf:92:72:28:e9:5c:77:08:21:62:a7:fe:de:38:0d:
16:ee:ed:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:18:07 2025 by rpki-client