Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1-ApPyK-Qum9g5KGN610rd-SgJzE.roa
File: 1-ApPyK-Qum9g5KGN610rd-SgJzE.roa (raw, json)
Hash identifier: IXQdbjsgCoURp6estIBrSE9QxBrKxN+ZjUhobrGFFyY=
Subject key identifier: F8:0A:4F:C8:AF:90:BA:6F:60:E4:A1:8D:EB:5D:2B:77:E4:A0:27:31
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF119C6535426046691D878204E0A6
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1-ApPyK-Qum9g5KGN610rd-SgJzE.roa
Signing time: Tue 26 Nov 2024 13:35:23 +0000
ROA not before: Tue 26 Nov 2024 13:35:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397200
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:11:9c:65:35:42:60:46:69:1d:87:82:04:e0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f80a4fc8af90ba6f60e4a18deb5d2b77e4a02731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e5:2c:0d:8c:db:e5:e4:2c:dc:30:95:6d:ec:
16:4a:de:ea:92:2d:60:02:74:6e:cb:0d:d1:56:64:
2b:2c:ba:15:cf:8b:c6:57:37:b1:4c:e1:b9:32:d7:
3e:0d:1e:74:cd:3d:c5:2f:e3:f3:3d:47:fc:ec:6e:
87:09:7b:c6:07:3a:e4:03:b4:31:e5:0c:85:75:66:
f8:8f:e2:32:6a:f9:c4:c4:bb:36:da:34:e6:47:22:
42:26:a4:1d:3d:10:57:22:c4:93:ac:fd:8c:8d:ef:
61:5e:de:67:ff:bc:63:7b:b0:ef:7d:d6:03:d4:65:
30:b1:b2:e5:c6:d4:10:a1:48:b2:18:88:db:e2:df:
aa:cb:d7:88:dc:70:d1:e5:ec:a5:b9:cf:43:99:88:
19:9f:7a:a6:74:f1:72:b7:b6:42:59:42:c5:51:cf:
3c:58:df:75:67:3b:d2:95:53:f6:f5:ab:3a:6b:7f:
c7:e3:b6:22:61:60:59:6d:c7:10:25:f3:be:2e:80:
7d:52:9a:db:ff:bd:16:b8:21:c4:97:33:cf:d8:82:
d9:f7:78:f9:7c:4f:14:fc:f6:8a:cc:53:a0:7d:56:
99:ea:15:6e:22:8f:06:9e:f6:48:10:a7:a5:18:3f:
ee:0d:40:e3:ae:70:d2:13:c0:27:9e:4d:2e:bf:b6:
7b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0A:4F:C8:AF:90:BA:6F:60:E4:A1:8D:EB:5D:2B:77:E4:A0:27:31
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1-ApPyK-Qum9g5KGN610rd-SgJzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
17:d9:3c:07:5d:54:64:d2:e5:fa:b7:95:30:8b:3c:ed:a3:9d:
a6:28:cb:d6:b5:9c:42:06:08:f6:48:85:3b:0d:69:04:a6:71:
28:bf:ef:e2:b7:44:c7:ca:f8:a2:b3:21:60:14:d1:e1:a7:5d:
03:86:17:d1:3e:9e:cc:4c:e4:3a:53:14:7e:03:46:99:6e:f4:
15:12:09:04:ee:9d:c7:9e:61:f0:09:a0:a1:ab:2e:fa:10:90:
9d:19:fb:22:de:8c:2a:82:58:4b:61:1f:79:a8:14:de:8c:5c:
c2:99:73:40:ee:20:18:4d:4a:4b:3b:af:4d:72:42:f3:54:20:
a6:54:8c:25:26:f0:60:09:8c:29:c2:95:6a:e3:b0:06:b0:da:
86:a9:60:e8:f9:60:bb:0e:2b:54:9f:79:a0:8f:81:46:8c:94:
73:c7:f0:79:13:9c:a4:79:94:fa:a0:08:f8:ca:39:a0:e5:49:
08:8f:89:8f:df:30:1b:bf:74:d3:d1:d7:a0:02:6f:15:6f:84:
a6:ac:57:9e:cb:84:18:6a:f1:98:52:4f:31:f8:03:b7:d3:0f:
d7:c6:34:e4:89:96:6b:f9:2c:4b:57:c0:b4:1f:af:27:d1:dd:
c8:6d:f1:76:da:a1:18:ff:5f:e9:43:a3:c0:d6:d6:fb:25:2f:
18:f9:2e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:55 2025 by rpki-client