Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/opwg-69cyXxfp2rdn7kU78JxEbI.roa
File: opwg-69cyXxfp2rdn7kU78JxEbI.roa (raw, json)
Hash identifier: j/BIVmwsS199O+bBqA4cG4w0VHYaSVJ+PDSqdR8dO3U=
Subject key identifier: A2:9C:20:FB:AF:5C:C9:7C:5F:A7:6A:DD:9F:B9:14:EF:C2:71:11:B2
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 018D03DC87B31194A562764CC29201F73986
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/opwg-69cyXxfp2rdn7kU78JxEbI.roa
Signing time: Sat 13 Jan 2024 17:26:40 +0000
ROA not before: Sat 13 Jan 2024 17:26:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203217
IP address blocks: 81.90.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Jan 2024 17:28:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:03:dc:87:b3:11:94:a5:62:76:4c:c2:92:01:f7:39:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Jan 13 17:26:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a29c20fbaf5cc97c5fa76add9fb914efc27111b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:50:bd:e4:f2:20:c7:92:63:61:d1:fe:dc:ef:
b8:a7:26:4b:52:cf:1c:90:30:de:97:94:e3:5e:51:
b5:53:64:0a:5c:e7:68:90:30:6c:d4:ce:e7:e0:72:
c8:46:f0:20:72:33:65:06:4c:48:ba:db:aa:14:78:
a1:07:53:d6:ff:3c:b6:36:10:91:3f:d2:3c:77:66:
dd:d5:f4:9f:6c:4c:f9:fc:b8:06:00:10:35:18:5b:
99:d9:94:16:ae:e4:6d:3c:8b:71:48:4b:dd:f1:10:
6b:19:2a:3c:3a:1f:7d:b4:a8:97:4b:2e:7d:e1:74:
70:1b:83:41:a4:26:4f:06:6c:9d:c1:80:81:8e:9e:
21:f6:00:a6:ef:80:e4:5c:32:3b:97:70:61:f5:cb:
e1:df:7c:d3:5d:94:85:91:a1:c1:2d:51:75:71:5b:
68:e2:53:42:20:38:29:79:8b:ca:3a:3e:a3:85:2a:
32:6d:ec:db:f8:95:6d:2f:69:1f:64:e2:43:61:30:
73:ce:f5:7f:98:22:33:cc:b7:e8:63:37:63:a3:dc:
2e:7d:9b:b4:4f:b6:d8:8f:64:e3:39:59:47:a2:98:
b9:eb:9d:79:28:9e:00:6b:b2:3d:bb:09:65:23:30:
9e:83:c9:4b:19:40:03:c2:39:03:64:95:0a:8f:4e:
2a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9C:20:FB:AF:5C:C9:7C:5F:A7:6A:DD:9F:B9:14:EF:C2:71:11:B2
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/opwg-69cyXxfp2rdn7kU78JxEbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.17.0/24
Signature Algorithm: sha256WithRSAEncryption
be:25:cd:5e:8c:02:ad:2c:0d:78:9a:da:6c:c0:14:c1:21:d4:
a7:03:c6:7e:d8:e4:f2:74:0c:c3:e8:48:22:f1:89:91:55:e1:
dc:9d:c7:4c:35:9b:54:a2:df:56:8a:a4:1e:a1:6d:47:73:4f:
fb:4c:c8:2a:d5:f3:93:64:19:43:37:87:05:32:1a:c1:b5:fe:
9b:c3:35:7c:ac:a3:a1:1c:f8:5e:48:89:ed:f1:e6:df:97:a0:
a7:69:84:4a:1f:5e:24:ce:aa:88:0f:79:84:ee:26:eb:3e:2d:
f6:46:6a:13:6d:6a:a7:b0:0d:f6:90:f2:3d:56:68:7e:e4:47:
d6:9c:06:18:97:91:92:7f:2c:8c:1b:15:99:cf:e6:bf:6b:da:
f8:17:eb:fb:4e:8c:25:b2:64:2d:a3:2d:58:0e:a1:0d:b0:7d:
56:de:95:f9:77:72:a7:ca:39:40:db:ea:2b:1c:7a:d7:02:e8:
c1:33:da:21:1f:3d:56:48:c3:c9:f4:f6:df:df:6b:4f:16:3a:
84:1c:a5:15:f3:8e:7d:92:42:b5:a1:88:f7:49:5e:41:d9:98:
a9:a1:ba:06:1d:1d:73:38:05:49:64:0e:0c:a0:3a:98:73:0c:
62:a6:c6:69:55:ff:75:28:9c:1d:13:ee:c7:e0:d0:0d:c5:2b:
d9:0f:81:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:32:42 2025 by rpki-client