Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gd-gfXtiMrRA4R9gMFE09XpB9tc.roa
File: gd-gfXtiMrRA4R9gMFE09XpB9tc.roa (raw, json)
Hash identifier: JNJUOGwgqvm7nRXpMJsiNPnQgZ/hCOcJ5nrne6IUBV4=
Subject key identifier: 81:DF:A0:7D:7B:62:32:B4:40:E1:1F:60:30:51:34:F5:7A:41:F6:D7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0196CA1FEA7653D5A5155EDC5990F5B6B221
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gd-gfXtiMrRA4R9gMFE09XpB9tc.roa
Signing time: Tue 13 May 2025 14:50:11 +0000
ROA not before: Tue 13 May 2025 14:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216032
IP address blocks: 81.5.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 May 2025 11:59:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:1f:ea:76:53:d5:a5:15:5e:dc:59:90:f5:b6:b2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 13 14:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81dfa07d7b6232b440e11f60305134f57a41f6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0e:5a:af:b9:6f:81:f0:70:f7:d9:87:a5:e8:
bd:f4:34:47:a1:d0:32:60:c8:21:ca:ee:43:1a:3f:
5d:91:b4:06:b8:54:61:f8:b5:74:3b:3b:47:f3:7a:
06:f1:c1:33:8c:df:f9:d8:b2:6e:55:2b:f2:c1:ad:
76:8b:9b:2c:9e:fb:a6:8d:c5:23:fe:e3:b2:6c:41:
69:72:36:98:49:dd:52:08:e8:13:9a:8b:0b:13:d8:
73:61:a4:cb:40:8e:41:0a:bd:43:ba:ca:91:08:c5:
f9:37:89:a9:c0:ad:83:d3:72:9a:7f:9c:b4:cf:18:
9d:67:7a:cb:4e:00:08:a3:08:77:b8:de:cb:89:a8:
e1:f8:9e:fe:09:c3:c3:08:cd:f7:38:00:55:af:b4:
ca:dd:21:6a:98:fe:66:f8:b5:4c:2d:83:35:9f:1a:
4a:7a:0a:4c:88:a6:2b:b1:ab:a1:be:bd:88:50:ad:
dc:35:3c:d5:fe:83:17:7a:8e:78:ab:e6:ea:41:0b:
71:1c:bf:a1:54:94:4b:38:37:61:a1:da:57:3c:76:
8a:21:34:e5:61:0b:d5:1f:47:33:c7:fe:a1:21:3c:
eb:c3:a0:46:f9:3c:0a:ae:9e:ab:31:ba:62:e1:ad:
6d:9e:33:70:f3:65:98:4d:80:07:ca:ba:c0:17:68:
bd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DF:A0:7D:7B:62:32:B4:40:E1:1F:60:30:51:34:F5:7A:41:F6:D7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gd-gfXtiMrRA4R9gMFE09XpB9tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.189.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ee:e1:4f:cf:df:69:85:98:6b:82:2d:9f:1e:d4:98:2b:3c:
0a:7e:b5:bd:08:9c:d9:16:b8:24:bb:90:eb:ff:eb:7a:a5:86:
14:01:d5:4c:3c:5a:3f:08:f5:1d:33:48:8a:fa:2b:d6:9c:1b:
01:de:40:b9:f1:11:3a:ae:32:bb:9a:75:3f:eb:19:de:cb:e9:
90:00:5d:78:2e:4f:38:a1:3e:67:21:7c:4e:04:3e:09:81:92:
6e:85:d8:d1:d3:af:17:53:e1:5c:8c:9a:4b:2e:b1:bb:9a:01:
34:93:92:70:aa:dd:1a:83:3c:21:24:06:79:57:6a:78:5f:82:
ff:7b:f0:fa:2f:59:99:0f:a2:d1:51:a7:95:a2:6e:08:b3:fa:
f0:a0:b1:9b:78:54:d5:ef:66:14:d2:01:25:cb:11:ed:eb:97:
a5:16:0d:9c:f2:e1:03:67:46:34:e4:1d:ce:87:df:fa:43:5f:
1d:f1:6d:ed:da:fc:99:56:90:f5:60:23:fd:b6:12:17:cc:7f:
f3:a1:64:ec:98:4d:f9:d4:6d:81:4a:c6:43:e9:6b:0b:ae:f9:
9f:20:21:71:c2:9a:95:9c:08:79:89:b3:1f:d3:da:32:5b:08:
5d:bd:1a:5a:01:22:19:f2:c1:e6:fa:78:20:c7:4b:8b:fc:b0:
ac:5c:ee:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:23:48 2025 by rpki-client