Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/JyRINM_Ly3GMDsldhbMPvteY5QY.roa
File: JyRINM_Ly3GMDsldhbMPvteY5QY.roa (raw, json)
Hash identifier: 1W+PdnAjYhp1f6giYx1LvLz8+urNFf6f8vHMwFn09NQ=
Subject key identifier: 27:24:48:34:CF:CB:CB:71:8C:0E:C9:5D:85:B3:0F:BE:D7:98:E5:06
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 0193D978A9C666D2D20C63AD182C2296EE1E
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/JyRINM_Ly3GMDsldhbMPvteY5QY.roa
Signing time: Wed 18 Dec 2024 11:13:03 +0000
ROA not before: Wed 18 Dec 2024 11:13:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 81.30.103.0/24 maxlen: 24
2a13:ae00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 18 Dec 2024 11:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d9:78:a9:c6:66:d2:d2:0c:63:ad:18:2c:22:96:ee:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Dec 18 11:13:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27244834cfcbcb718c0ec95d85b30fbed798e506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:03:61:61:6c:69:8e:7d:4f:a5:07:c8:a4:dc:
db:6f:37:5d:0b:df:34:cd:69:4b:cc:55:56:f1:a7:
a5:58:0c:69:36:da:b1:46:87:24:4a:ed:ac:f0:95:
05:63:0b:00:f5:62:92:5c:ee:68:a2:4a:2c:4e:e6:
60:25:26:e5:6e:4b:3f:7c:d2:7e:d9:2e:ec:7e:0b:
21:69:90:8e:5a:e8:c9:d9:b2:b5:ec:32:6b:5b:cb:
34:d9:1f:f3:eb:05:1a:1d:be:a1:c6:ed:0d:a7:91:
f0:dc:ec:84:20:07:9a:d4:94:a9:8c:0b:b9:fa:c5:
85:34:36:9e:e7:51:b9:74:bb:04:4b:b0:42:0d:0d:
10:16:39:af:a3:5f:f2:6b:e0:04:42:d1:f8:f1:e1:
ac:63:32:03:5f:79:15:5a:e1:9b:ab:b7:1c:d4:ad:
0d:a2:45:92:a2:ed:0f:05:71:62:1e:14:d3:7a:ba:
8a:0c:44:f9:14:ee:08:b2:01:ff:e7:f8:39:61:18:
8c:1b:71:fc:e0:61:f2:29:68:d5:10:33:00:44:80:
e9:fc:30:c3:9a:7b:7f:a2:55:d6:7e:ef:ec:38:ce:
ef:a4:c4:70:46:90:d3:10:ce:7a:31:f7:90:ec:56:
d0:b2:90:6d:63:82:63:62:8d:fb:93:bd:a8:e2:37:
66:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:24:48:34:CF:CB:CB:71:8C:0E:C9:5D:85:B3:0F:BE:D7:98:E5:06
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/JyRINM_Ly3GMDsldhbMPvteY5QY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.103.0/24
IPv6:
2a13:ae00::/29
Signature Algorithm: sha256WithRSAEncryption
06:10:92:a0:80:a1:b3:fd:72:20:b9:77:c8:59:ac:6a:c9:97:
d1:9f:b0:97:89:8a:aa:e7:ba:4c:6b:11:be:c6:a4:7f:16:f1:
ca:cd:3b:2e:f1:40:33:07:78:bd:5e:a6:2b:07:82:6e:33:03:
1d:1a:9c:10:51:f3:8d:ae:3e:0e:bb:f1:62:1d:96:d9:19:31:
e9:ef:35:7e:63:88:5a:e1:be:4f:71:2a:b5:41:34:70:fc:c3:
6b:d0:94:26:55:7b:f8:d9:02:99:29:df:5b:a5:97:87:2a:6b:
c3:70:a7:9c:12:ef:4a:6c:58:2a:8e:1d:96:5c:99:93:09:52:
74:01:9c:e7:d9:72:25:ba:61:b5:fd:c3:01:ee:cd:9a:d8:b1:
ae:a9:67:94:d9:19:35:d4:07:fb:6b:a4:1e:fc:b7:df:42:96:
6a:28:d8:f5:e0:8c:3f:ac:54:0a:7e:eb:84:af:ce:0e:9e:6c:
92:2e:77:cb:bb:b4:09:6f:ec:3d:6d:ce:98:95:40:a1:5a:19:
77:34:f3:02:f5:3b:37:d5:59:c8:18:e4:1b:f1:23:af:40:f1:
37:5a:af:99:25:14:d8:b2:54:e5:79:ce:d0:30:8a:72:09:6c:
d4:c6:78:49:5b:64:3d:50:3c:1e:54:4f:f1:58:39:24:95:7f:
86:da:e6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:57:17 2025 by rpki-client