Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aGq7lN1hNetaRmaq6XrWoE7gVSQ.roa
File: aGq7lN1hNetaRmaq6XrWoE7gVSQ.roa (raw, json)
Hash identifier: qaj2TpZyyTjGR4voa+L0+XIFkuZWmS7Xq5idegrsmMM=
Subject key identifier: 68:6A:BB:94:DD:61:35:EB:5A:46:66:AA:E9:7A:D6:A0:4E:E0:55:24
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018FF38FF2B577B5F3ED56F74FAE0E9736B5
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aGq7lN1hNetaRmaq6XrWoE7gVSQ.roa
Signing time: Fri 07 Jun 2024 16:37:28 +0000
ROA not before: Fri 07 Jun 2024 16:37:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211826
IP address blocks: 81.168.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 07:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f3:8f:f2:b5:77:b5:f3:ed:56:f7:4f:ae:0e:97:36:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 7 16:37:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=686abb94dd6135eb5a4666aae97ad6a04ee05524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:9d:8b:3a:be:0a:56:63:90:cd:8a:2c:b2:
b9:ca:75:1b:d3:7f:1d:3a:3a:53:83:0e:d9:c7:7f:
af:7a:45:fa:cd:73:02:2e:4c:73:40:a2:b0:c8:5b:
e0:90:6b:b1:6e:b5:f9:c0:fb:39:86:11:98:64:d7:
63:03:84:65:e8:df:0f:1a:0c:0f:47:3f:67:dd:64:
d5:1d:6b:26:57:14:c0:77:3c:99:a9:40:66:c6:39:
ba:5b:b5:ae:27:84:22:fd:c9:22:74:27:a6:88:99:
26:0f:9b:b4:d7:2b:1a:a0:b5:5e:50:e9:1e:a1:8f:
08:fe:91:06:f2:bd:8b:58:67:f2:4b:ff:4c:91:db:
38:d7:8b:f7:92:e6:65:4c:dc:38:cd:8c:ca:a5:2a:
37:90:31:68:40:22:d9:a7:d7:40:92:44:55:9e:8a:
4c:7c:78:42:bd:76:d8:e7:15:9d:9f:32:ef:cd:00:
97:8a:e8:49:97:7d:c8:24:55:90:5b:e7:b9:75:37:
69:39:d4:14:48:8e:ed:6c:d2:03:2b:65:c2:2b:1c:
dd:8f:3a:53:90:04:b7:02:71:4b:05:4b:3f:aa:92:
29:43:6e:a4:a7:41:ad:d0:03:af:e4:0a:01:de:f7:
cc:8c:86:b1:b6:db:d5:f3:de:3c:5a:4b:82:24:0c:
37:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6A:BB:94:DD:61:35:EB:5A:46:66:AA:E9:7A:D6:A0:4E:E0:55:24
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aGq7lN1hNetaRmaq6XrWoE7gVSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.67.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:32:ce:0d:45:42:8b:69:c1:74:0f:2f:12:85:d9:de:ca:a6:
d6:38:76:af:cd:c2:16:d1:b7:f4:1d:26:8a:b4:be:70:f3:44:
7e:1f:fe:a2:66:a7:68:55:fc:0a:6d:86:91:b5:c1:7c:b2:78:
29:5d:50:34:13:a1:c2:5b:46:87:c4:d5:f3:37:b7:eb:f4:f6:
cf:87:64:4a:d6:dc:f8:a3:6b:40:46:b5:58:ff:39:be:cd:48:
55:d4:3a:e5:43:32:ed:3d:5d:eb:9a:4d:35:53:63:a9:b4:c5:
f2:72:7a:20:7c:79:a0:b1:24:b3:95:37:7b:fe:ae:41:5c:eb:
ac:91:3a:2d:18:64:9d:0d:a7:25:4a:eb:34:d2:a3:bb:d0:cc:
a3:27:a9:ef:8d:a5:3b:91:59:31:ee:a2:ff:ff:67:5f:06:c0:
7b:7f:24:ba:bf:c2:b6:e2:85:f5:bb:98:3f:ee:b2:67:fa:f7:
28:e7:e1:73:1d:aa:16:86:1c:ca:e5:c9:8b:e7:13:ab:00:72:
38:f5:85:91:8f:ba:e1:d1:a6:68:c6:ec:29:6c:3d:b5:10:c8:
e0:86:3e:08:71:aa:fb:0e:ad:99:9d:bd:3f:61:ca:e2:d4:c6:
07:95:c2:d0:6d:e6:5b:e0:ae:f1:9d:bb:ba:71:5b:cd:f0:b2:
d1:87:49:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:27:20 2025 by rpki-client