Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6mK-yDuU8aQo8nJvmMnZKtHApEA.roa
File: 6mK-yDuU8aQo8nJvmMnZKtHApEA.roa (raw, json)
Hash identifier: 0ffoPxNyhPjISiDQlU7Tc5NnWoI2F/UVO+ESLcxfUb4=
Subject key identifier: EA:62:BE:C8:3B:94:F1:A4:28:F2:72:6F:98:C9:D9:2A:D1:C0:A4:40
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018D5F6E979171246F7DE3F9CEED553C4BBD
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6mK-yDuU8aQo8nJvmMnZKtHApEA.roa
Signing time: Wed 31 Jan 2024 12:11:39 +0000
ROA not before: Wed 31 Jan 2024 12:11:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398465
IP address blocks: 81.168.119.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 18:41:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5f:6e:97:91:71:24:6f:7d:e3:f9:ce:ed:55:3c:4b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 31 12:11:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea62bec83b94f1a428f2726f98c9d92ad1c0a440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:17:97:3e:02:23:6b:f9:08:30:8c:56:2d:e2:
58:91:a1:e5:e1:4b:58:16:d7:2e:c3:cc:1f:51:4f:
6b:5a:ed:90:c3:63:bf:7f:28:fb:df:c1:c6:e2:8c:
82:85:45:bf:be:10:60:ae:3c:41:e5:70:66:5a:37:
1b:a1:76:6a:e3:fb:f0:8c:bb:a5:5b:cd:d5:d2:f4:
ad:a1:6d:59:4c:f6:ae:0c:c2:b4:ad:39:d1:61:3b:
b9:1f:0f:b3:66:62:13:b4:e9:f8:8b:ac:e4:be:b4:
84:ee:ab:db:50:74:3c:80:05:63:c4:f0:8d:e3:0d:
a7:e5:b7:e1:59:de:02:0d:66:f5:c0:e5:f7:d5:91:
c2:b6:3c:d1:18:8c:4c:5d:89:97:e3:78:0d:d2:86:
c9:86:06:a0:f4:05:14:13:66:8c:49:27:14:73:6d:
6f:e9:b3:aa:66:d1:63:9d:51:ae:73:1c:6f:0c:a7:
a6:7a:2e:3f:ef:cc:40:ed:86:9d:37:5c:6c:cb:16:
57:76:69:fe:00:c2:cf:35:23:3c:cf:0a:28:a9:92:
e6:85:dc:46:59:ca:5e:ed:fe:86:fd:09:ad:86:ca:
7a:35:85:1b:82:4a:4d:72:d1:fc:3b:89:52:75:98:
26:1e:d6:0d:99:70:f9:1f:9e:1b:79:eb:bd:ad:e4:
da:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:62:BE:C8:3B:94:F1:A4:28:F2:72:6F:98:C9:D9:2A:D1:C0:A4:40
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6mK-yDuU8aQo8nJvmMnZKtHApEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
82.153.1.0/24
Signature Algorithm: sha256WithRSAEncryption
68:b0:44:46:47:fb:e0:c7:c6:b4:bf:09:ce:16:6a:27:d0:39:
c2:1c:fc:7f:2c:79:ba:6d:9c:62:36:33:fd:2e:6f:84:e5:8c:
25:5d:d9:66:6e:69:c9:1b:03:c5:7f:35:8e:4a:77:4f:61:29:
a1:96:da:8e:2a:4f:af:b7:6c:0d:00:fb:b3:77:2a:53:76:1f:
21:f3:77:e2:c7:ea:9d:fa:b3:c5:8d:62:d1:5f:11:34:02:2b:
58:cc:da:69:82:e6:a6:41:76:5c:90:8a:4f:52:c4:28:c0:30:
59:d2:7d:65:ee:da:89:d7:09:8f:d1:4d:9d:e7:e3:dc:68:13:
05:b5:23:d8:bd:4a:eb:41:e6:cc:2f:fa:c3:56:40:1b:12:29:
0d:00:cc:cb:8e:e2:6d:a1:18:8e:6d:e5:ac:8f:9b:db:b7:5c:
73:f2:b6:c0:08:62:70:40:01:d4:a7:d7:db:81:f8:80:c8:58:
f1:ce:dd:68:ae:00:8e:69:8e:f4:64:d3:3c:a2:cd:90:6e:3e:
9b:fc:1e:fb:89:90:de:b3:93:b0:13:b7:12:b1:3f:cb:c3:04:
d2:14:64:37:dd:94:1d:8c:97:f5:f5:75:4e:54:34:b6:e8:08:
02:2d:33:cb:ae:f3:15:cc:58:09:ff:97:e3:f7:88:99:fe:f6:
e3:e2:b2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:33:25 2025 by rpki-client