Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uIU5VR2KuJd6NYd2zZsbmnc7uzQ.roa
File: uIU5VR2KuJd6NYd2zZsbmnc7uzQ.roa (raw, json)
Hash identifier: i+f2ZM9fjanisSZ51N/Wrovi6NbHP60x+csGAufsXBM=
Subject key identifier: B8:85:39:55:1D:8A:B8:97:7A:35:87:76:CD:9B:1B:9A:77:3B:BB:34
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194EF51C6576C9AE0502234CF691F7BD1A9
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uIU5VR2KuJd6NYd2zZsbmnc7uzQ.roa
Signing time: Mon 10 Feb 2025 10:05:01 +0000
ROA not before: Mon 10 Feb 2025 10:05:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 81.168.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 12:52:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ef:51:c6:57:6c:9a:e0:50:22:34:cf:69:1f:7b:d1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 10 10:05:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b88539551d8ab8977a358776cd9b1b9a773bbb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:19:d8:70:af:1b:bf:2d:40:7c:bb:cb:9b:
38:f2:da:4c:3f:6f:e9:8b:02:b6:58:3a:5c:64:4f:
95:30:73:9b:b6:47:b2:3a:b3:7e:0a:e6:68:64:a9:
4c:b8:a0:98:41:40:11:05:12:e8:9d:34:ff:4e:96:
e2:5a:91:1b:d1:28:1b:a0:fb:aa:7f:78:4e:cb:d2:
5e:c9:9f:b5:aa:37:56:b0:49:1b:55:19:74:6f:08:
24:aa:16:8c:e0:77:21:48:4d:88:dd:22:03:43:d4:
33:23:bc:c8:c7:a4:ba:fd:14:70:24:df:03:c9:d9:
0a:6e:47:53:9c:d0:1e:e5:7b:27:46:a4:a8:f4:d1:
9e:ef:07:1f:57:14:f0:a6:be:fd:73:9e:69:2b:17:
fb:c1:a0:e7:d8:b7:9f:8c:1e:9b:f2:a3:8d:c2:e8:
01:f0:aa:70:bd:a7:e7:c2:56:53:ba:57:10:a1:f3:
28:33:fa:1a:89:3a:37:3d:5d:9d:39:61:dc:07:89:
2c:7b:16:27:0b:1b:0f:79:ed:d8:62:f0:9a:34:15:
3e:40:7a:9f:e1:c5:a0:8b:e9:fb:aa:99:8f:d3:03:
19:41:03:71:e4:29:ca:63:8b:3b:7b:62:a8:c8:05:
1b:20:b1:7f:33:44:20:2a:f5:4e:26:af:6c:af:92:
ca:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:85:39:55:1D:8A:B8:97:7A:35:87:76:CD:9B:1B:9A:77:3B:BB:34
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uIU5VR2KuJd6NYd2zZsbmnc7uzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
Signature Algorithm: sha256WithRSAEncryption
05:58:d1:33:f0:ff:1a:82:f4:f2:be:c0:49:74:10:0c:9e:b4:
95:83:e6:a2:be:fc:4c:ac:49:b3:71:ce:94:f0:ec:00:35:17:
3c:45:af:38:f2:2c:2e:62:7a:a9:19:24:15:ce:f0:f8:ba:26:
5f:e9:ac:c6:07:e2:28:32:8d:4f:c4:22:a1:0f:fb:64:9e:65:
fd:1f:5d:6f:63:d3:bd:a4:bf:d6:48:b6:8e:76:5f:3d:00:78:
67:9f:2a:07:0b:f5:9e:ce:68:bb:fc:73:47:ce:49:9a:0b:dc:
2a:88:66:88:7c:b0:7d:e5:38:08:dc:7e:d0:d5:29:96:b7:b4:
91:d1:84:1d:b2:ae:d8:71:c4:66:5e:80:54:a7:eb:34:42:b4:
72:c7:97:22:c5:0d:60:90:7b:1d:98:e3:fc:c1:c9:67:34:b8:
70:c8:75:c3:63:4c:47:e6:79:ae:f4:00:c1:61:58:cf:11:65:
f8:eb:8f:17:e3:53:3f:df:e1:65:95:a2:a2:f4:a6:6a:12:d1:
e7:c5:9d:60:d1:20:36:eb:ba:d9:65:ee:a0:65:e9:6b:1d:fc:
1b:48:3d:09:e6:70:d0:fc:b8:4e:a5:96:5d:1f:ea:c9:de:66:
cc:8e:72:de:ad:b9:a0:8a:4b:06:1f:32:fb:49:9d:fd:a3:3c:
13:16:39:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:29:21 2025 by rpki-client