Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/53GH9ni1jwvlkTC4bBfbomj-Q3Q.roa
File: 53GH9ni1jwvlkTC4bBfbomj-Q3Q.roa (raw, json)
Hash identifier: k1ighRmTl/FDDElfgY1KJcMdtyEI4jE9HIANky+FfD8=
Subject key identifier: E7:71:87:F6:78:B5:8F:0B:E5:91:30:B8:6C:17:DB:A2:68:FE:43:74
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 019422FBE76F8BED7EC99962A94241EAF44C
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/53GH9ni1jwvlkTC4bBfbomj-Q3Q.roa
Signing time: Wed 01 Jan 2025 17:48:41 +0000
ROA not before: Wed 01 Jan 2025 17:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 212.81.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 11:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e7:6f:8b:ed:7e:c9:99:62:a9:42:41:ea:f4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jan 1 17:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e77187f678b58f0be59130b86c17dba268fe4374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c4:29:f9:08:4b:00:cf:47:fc:b1:a4:0e:05:
7e:3a:4c:ac:a5:77:15:58:76:d5:e7:0e:09:a1:b3:
36:30:d5:07:23:ab:54:73:0c:4a:5d:92:b6:05:f0:
24:45:54:f7:78:56:5a:51:38:15:af:c9:6f:f6:31:
dc:7c:ac:e9:94:68:58:3c:67:14:e8:b9:95:a5:15:
3f:79:7d:d7:f2:13:e2:e2:62:07:db:35:79:12:30:
b4:31:ad:cf:92:21:4a:2f:46:8f:98:8f:6f:0a:09:
f2:59:b0:b5:e7:1b:89:b7:1f:4a:59:5d:78:48:21:
38:02:fa:ee:12:69:53:bc:53:b2:f0:34:95:18:4f:
82:c5:51:42:ab:8e:5f:d6:69:e6:a0:a3:26:86:d5:
38:90:72:92:89:d2:74:ab:de:95:fc:a5:49:7d:e2:
2c:03:e3:ad:d1:bc:c7:74:30:0f:47:21:4f:88:70:
5d:2c:3e:74:0c:75:01:ec:38:54:b8:2a:f0:3d:12:
c3:8f:7b:c6:b4:ca:76:4d:a3:3f:c3:28:64:4f:6f:
86:e4:f7:8c:ff:52:23:1d:52:08:ee:dc:4c:db:6d:
86:29:ff:f7:fd:04:78:58:04:9f:0a:d9:07:1a:48:
20:86:3e:8e:fe:a7:d2:1c:28:3a:52:d6:ad:29:0e:
2a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:71:87:F6:78:B5:8F:0B:E5:91:30:B8:6C:17:DB:A2:68:FE:43:74
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/53GH9ni1jwvlkTC4bBfbomj-Q3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.81.45.0/24
Signature Algorithm: sha256WithRSAEncryption
54:19:0a:ff:2f:8d:d2:ab:d8:10:1c:66:b5:9b:b6:4e:6f:ef:
67:d8:9b:f8:36:48:5b:dc:e5:6d:e5:db:33:c9:5e:f1:47:82:
73:b6:6f:95:47:a4:75:ba:29:70:f0:10:ec:7b:d9:ea:b0:b4:
02:6a:37:38:9d:3c:59:b6:73:a4:75:05:21:1b:a8:9b:df:6d:
ab:07:dd:a4:8d:fb:7b:14:80:7a:ec:b9:d2:1f:4e:dc:9a:d0:
bf:67:db:16:8f:d4:d1:b7:83:18:7d:eb:2e:c1:a4:b4:e6:b4:
23:90:0a:93:d4:b6:5f:9a:82:d9:78:89:ae:0b:b8:ea:e6:c8:
d2:5f:10:0e:d0:32:4d:76:de:39:b3:b1:a0:26:0a:d8:83:0d:
59:6f:09:78:fa:30:80:0b:b1:04:95:99:b7:6e:ce:c1:4a:24:
cb:86:23:d4:ff:47:7f:3f:07:ce:dd:7f:e4:31:8f:26:53:13:
1b:f1:22:14:cd:b4:94:58:55:55:b4:c0:41:64:af:ed:31:52:
ff:5c:27:f9:78:96:78:ab:01:5d:8a:f0:b1:f3:3d:9b:a3:fa:
27:27:bf:ba:b1:b9:1f:f9:e0:a4:e7:bb:44:86:83:1a:28:92:
26:86:33:4d:ec:da:a6:e2:d0:82:3e:aa:f6:65:4d:2b:57:01:
25:b5:04:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:22 2025 by rpki-client