Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hM5H5UxuxBwG8dJlwG46SgwA378.roa
File: hM5H5UxuxBwG8dJlwG46SgwA378.roa (raw, json)
Hash identifier: eEACOSpEt15kTZkfFRMv0YMZYGPZ2QcXQN3HsCUhpeE=
Subject key identifier: 84:CE:47:E5:4C:6E:C4:1C:06:F1:D2:65:C0:6E:3A:4A:0C:00:DF:BF
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190CAE6C4B3900225978F3ADBD3B4273BA3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hM5H5UxuxBwG8dJlwG46SgwA378.roa
Signing time: Fri 19 Jul 2024 12:10:39 +0000
ROA not before: Fri 19 Jul 2024 12:10:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208328
IP address blocks: 81.168.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ca:e6:c4:b3:90:02:25:97:8f:3a:db:d3:b4:27:3b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 19 12:10:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84ce47e54c6ec41c06f1d265c06e3a4a0c00dfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3e:c8:95:a3:c3:09:16:fc:af:39:73:a2:a9:
19:00:cb:52:c4:4c:18:eb:e0:24:27:ca:6e:2c:76:
06:8e:5a:41:6c:be:0f:19:83:c2:92:2e:e3:aa:f5:
18:67:2b:6a:6a:90:80:34:91:56:ca:d1:99:b4:85:
47:df:dc:27:1f:05:d0:8b:d7:52:4c:e1:1e:40:28:
cd:a6:ab:32:78:34:ac:92:b4:a2:a2:4d:cd:1a:c6:
03:18:b0:69:5b:e9:2c:59:f7:f5:70:84:7d:1f:44:
35:67:e3:13:05:db:e7:8f:8c:6b:ab:b8:2e:02:c2:
39:7c:92:1d:39:5a:f3:95:dd:d3:b9:62:23:fe:b0:
16:56:65:a0:56:08:e4:0b:9d:b4:9b:76:28:43:ec:
30:44:67:ab:69:88:99:66:2a:8a:bb:c3:8b:7f:35:
d1:ae:b7:eb:d8:a5:ef:92:20:ae:59:7c:28:2f:62:
2c:37:ab:a2:9e:1b:bf:68:04:98:be:91:c0:7b:61:
5a:93:91:37:e6:cb:c7:f6:36:f8:24:84:db:74:f5:
90:9c:e1:aa:37:ae:c1:13:33:99:07:0e:b2:ee:39:
8d:4c:5b:e6:3e:b2:bd:e8:22:8b:1b:ab:c5:df:95:
f1:39:83:7a:51:8e:95:87:01:2e:97:06:63:e7:94:
b7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CE:47:E5:4C:6E:C4:1C:06:F1:D2:65:C0:6E:3A:4A:0C:00:DF:BF
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hM5H5UxuxBwG8dJlwG46SgwA378.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.83.0/24
Signature Algorithm: sha256WithRSAEncryption
39:13:3b:14:c5:2b:e2:9a:6f:10:08:e8:9d:0a:a2:0d:97:57:
38:34:07:89:61:d9:c4:40:da:01:60:67:af:bb:16:d1:1f:3a:
a0:8f:58:f8:42:b7:f6:a6:c7:aa:0c:82:fc:1c:f5:39:51:3b:
94:77:c4:63:c1:75:c5:8e:04:cd:55:0a:b1:c3:40:9f:06:98:
99:4a:0b:de:87:b6:1e:f2:02:11:a1:7e:a4:ca:19:bf:a9:7c:
a5:c3:0d:7b:e5:e9:59:01:75:ec:40:7d:0c:b5:b8:17:35:05:
c4:d6:9e:ce:0b:64:61:8a:1c:55:6d:df:48:1a:df:59:c9:aa:
01:b7:6f:a7:eb:9c:a5:1c:fe:da:75:a0:ab:ca:09:44:93:dc:
f7:95:df:70:7a:1d:61:fd:60:07:7a:44:cd:98:cf:cf:1b:17:
6b:58:86:65:30:93:d4:ad:bc:70:35:7f:7e:40:b9:1e:0c:83:
6e:81:51:37:b9:d7:2e:37:c7:0e:07:50:69:17:3b:a1:ec:98:
f5:b2:c0:d4:b7:92:a9:a1:b0:54:a6:23:a8:a1:a7:d1:28:8d:
aa:f5:da:2d:fe:78:42:e8:c9:3d:e5:8e:ce:da:53:57:c8:a4:
f0:d5:2a:14:fd:65:a5:76:e4:09:4d:c0:47:71:56:47:31:d9:
c7:26:6a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:06:22 2025 by rpki-client