Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/WghBh-GfwAD_xOMJjEGAQBO-tcI.roa
File: WghBh-GfwAD_xOMJjEGAQBO-tcI.roa (raw, json)
Hash identifier: OvcCeNtg6CzUFHu6ECpRao/B5jkA3eGwXKffYA7jdRo=
Subject key identifier: 5A:08:41:87:E1:9F:C0:00:FF:C4:E3:09:8C:41:80:40:13:BE:B5:C2
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 0193B6CFA7D664098806676512825D6A7A4B
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/WghBh-GfwAD_xOMJjEGAQBO-tcI.roa
Signing time: Wed 11 Dec 2024 17:41:22 +0000
ROA not before: Wed 11 Dec 2024 17:41:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49632
IP address blocks: 81.30.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Dec 2024 17:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b6:cf:a7:d6:64:09:88:06:67:65:12:82:5d:6a:7a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Dec 11 17:41:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a084187e19fc000ffc4e3098c41804013beb5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0f:bf:29:1f:bb:70:30:85:70:ab:2e:02:1e:
6d:35:38:af:f5:f9:25:46:b1:fe:67:79:63:15:ab:
56:d0:3d:f6:68:63:79:4f:b7:7b:d4:6d:15:bc:8a:
c2:d8:fd:57:28:94:88:a4:eb:b7:fb:04:e1:b5:d9:
4d:bb:3d:e9:c0:9b:c5:f1:d3:c0:23:2d:0a:b2:92:
4f:73:d8:b9:91:59:30:a0:2a:65:8b:d5:2d:1a:2d:
d9:2f:1b:d1:d6:56:84:87:3e:2b:5c:d1:08:4f:1a:
1a:2b:8e:89:24:3b:cc:86:8d:88:80:5e:2f:10:aa:
c2:c8:c0:17:16:8b:b5:e8:e8:b7:14:31:24:47:65:
19:75:29:f1:6c:cb:28:a1:31:94:3c:5e:5a:4a:39:
11:46:fa:26:0b:44:b1:f0:25:ce:ea:2a:8d:5c:b1:
84:e6:b6:ec:11:b6:f2:38:ff:31:7f:36:bb:e5:46:
a0:96:ec:0d:ae:0c:d4:d6:89:be:1d:4f:a6:0f:8b:
e9:26:d7:8a:3b:62:15:70:75:64:40:45:f4:83:35:
cf:25:ec:76:93:f6:b6:3a:db:40:ae:0b:05:36:c0:
bd:bf:9a:fb:a8:1f:c5:8e:9a:d5:41:1a:4c:62:67:
00:7a:1f:c5:be:48:bc:90:5c:1e:cd:d7:c8:02:76:
a9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:08:41:87:E1:9F:C0:00:FF:C4:E3:09:8C:41:80:40:13:BE:B5:C2
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/WghBh-GfwAD_xOMJjEGAQBO-tcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.103.0/24
Signature Algorithm: sha256WithRSAEncryption
66:cc:4b:ba:63:ef:35:8d:a6:6d:40:1a:40:5e:f3:b9:38:4a:
9f:ac:80:b3:ea:05:82:10:53:63:84:08:b2:82:32:bf:9d:01:
1e:d0:12:dd:77:a8:21:3c:14:0a:c6:c6:27:9f:f3:9d:26:c4:
05:af:b6:b7:c2:cf:6c:01:1d:6a:29:69:ea:3f:3f:40:a9:fe:
b3:15:96:c3:ad:95:5a:cd:5f:22:03:58:32:df:d3:71:c2:e6:
91:d9:02:47:d3:1f:8b:81:d7:87:89:58:bc:f8:1e:b1:d3:d4:
82:01:60:c7:9a:80:2a:d2:5e:83:02:3a:ce:aa:ca:09:d5:49:
59:d7:cf:63:6c:16:5c:a3:63:9a:61:a0:ba:86:40:5b:2f:f1:
f6:2a:d7:6a:c4:5a:f8:98:d1:87:1b:6c:f5:55:c6:f2:88:1c:
a5:11:cf:45:95:d0:af:97:ab:32:bb:7d:3c:b8:68:fd:41:b5:
84:9e:a2:c2:f8:34:ee:71:ab:63:bc:75:b0:fe:00:e7:23:ea:
d7:66:43:fb:08:a7:80:2f:14:05:18:f0:41:ac:aa:02:58:1e:
0f:76:76:63:10:14:ae:07:54:d5:f7:66:30:f0:64:08:a6:41:
25:e2:fb:03:76:0f:3d:ea:02:21:cb:04:4e:c7:87:c5:e1:0d:
62:be:f7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:41:41 2025 by rpki-client