Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/weJhfQaNSRlkBCep2ENRTIlnehI.roa
File: weJhfQaNSRlkBCep2ENRTIlnehI.roa (raw, json)
Hash identifier: s7abZ/QD2b3AQoAV/9hxJVywNjiTE0eVPDf34ymuyBU=
Subject key identifier: C1:E2:61:7D:06:8D:49:19:64:04:27:A9:D8:43:51:4C:89:67:7A:12
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC349535D52B2E003EA60466E6C14AAAD
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/weJhfQaNSRlkBCep2ENRTIlnehI.roa
Signing time: Mon 01 Jan 2024 04:30:11 +0000
ROA not before: Mon 01 Jan 2024 04:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48266
IP address blocks: 81.5.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jun 2024 07:57:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:53:5d:52:b2:e0:03:ea:60:46:6e:6c:14:aa:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1e2617d068d4919640427a9d843514c89677a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f9:f7:e5:26:f4:1b:c0:89:ed:b3:8f:5b:4e:
e3:d4:db:b3:ad:82:d6:41:47:ab:df:1d:40:95:0b:
1f:79:73:8c:5f:ed:9a:0c:31:6d:b0:58:f6:4c:b0:
eb:55:df:b9:18:35:ce:56:0a:ee:b0:bb:87:69:48:
54:1e:4c:60:d1:cb:06:e5:42:bb:c4:63:5c:11:be:
70:78:28:6b:2d:e8:ca:68:bb:fa:df:98:ce:be:9f:
4b:96:0f:3c:da:2f:58:87:7c:0e:a5:8b:01:22:d0:
c9:72:93:fe:bb:6a:35:32:62:29:e5:33:0c:71:7b:
87:b2:47:dc:05:24:f0:f0:6f:b4:df:75:bb:f7:06:
fc:ec:36:a6:c2:80:7a:a0:5a:c1:44:80:6c:b8:02:
fb:1f:96:27:68:bf:56:4e:9c:fd:31:97:e8:8a:41:
23:2e:c9:f8:44:6e:d8:8f:fb:20:c0:21:72:5b:05:
e9:31:e9:39:0f:b2:22:3d:db:83:75:25:3e:bb:1c:
f4:85:87:00:98:00:e5:e9:8e:89:ef:0a:e9:4d:e5:
c4:d7:87:57:81:16:75:21:13:75:eb:e9:43:7e:e7:
80:df:7b:62:f0:29:08:1f:a2:36:bf:fc:74:e0:0b:
bc:5d:87:8b:bd:af:56:90:0e:a5:c8:a3:99:0c:d1:
10:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E2:61:7D:06:8D:49:19:64:04:27:A9:D8:43:51:4C:89:67:7A:12
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/weJhfQaNSRlkBCep2ENRTIlnehI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.191.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:fe:f2:c7:d5:fb:27:4c:a9:95:4f:a6:d4:db:01:4e:a2:74:
08:7a:10:1a:91:c9:ad:28:42:b9:06:c1:10:01:ba:44:33:e1:
ff:c3:c3:1d:a8:38:02:ff:a8:28:28:8d:69:c6:45:7b:73:fb:
3e:6f:5c:a7:a5:5a:80:be:bd:3c:47:9c:1f:d7:4e:32:79:90:
34:5e:3c:db:c0:21:e5:eb:e0:90:e2:b8:f4:d0:ee:37:6e:b5:
1d:71:49:6c:73:b2:57:b6:c7:f1:a9:98:a9:8c:71:df:00:d4:
8c:a0:46:19:37:40:e1:4d:be:5e:03:9c:7b:46:a0:55:27:80:
ce:42:ea:77:36:6f:55:24:b3:fc:90:4f:f7:05:d4:4f:f0:e8:
7f:9d:df:a6:c6:2b:7e:4d:2c:83:fa:36:d8:cc:c2:0f:92:f3:
f8:8b:9f:c5:7c:95:f0:5f:b5:dc:b1:e9:0e:0f:aa:a1:17:1d:
f3:e1:02:7b:0d:14:e9:78:26:27:3c:5d:2a:27:10:ac:31:0f:
b4:9b:49:11:a0:81:9d:9d:41:06:ea:ff:02:6a:d2:37:a4:a3:
a8:fe:2d:b9:17:0e:c0:34:65:bd:f5:6a:ea:58:db:95:4e:b0:
ec:56:61:cd:a1:d7:52:5c:dd:2c:ab:1d:7c:98:c6:76:a1:03:
4f:3d:00:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:20:59 2025 by rpki-client