Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/18VtwINbqFmeLIu2D3Y04cTYfgs.roa
File: 18VtwINbqFmeLIu2D3Y04cTYfgs.roa (raw, json)
Hash identifier: 1+vVkaaDE4QP9F+14SNjtJ4V6WtIWdTsgHCS+DmA//s=
Subject key identifier: D7:C5:6D:C0:83:5B:A8:59:9E:2C:8B:B6:0F:76:34:E1:C4:D8:7E:0B
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F62671E122EA681886A19115AFA9AA3
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/18VtwINbqFmeLIu2D3Y04cTYfgs.roa
Signing time: Tue 25 Jun 2024 12:32:47 +0000
ROA not before: Tue 25 Jun 2024 12:32:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396614
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:67:1e:12:2e:a6:81:88:6a:19:11:5a:fa:9a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7c56dc0835ba8599e2c8bb60f7634e1c4d87e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:52:5f:7f:a8:a3:d3:c9:63:ba:70:45:10:a8:
0e:b7:c0:6f:1d:d5:a5:cc:fd:48:53:7b:91:52:e0:
da:c2:ee:d2:1a:90:2c:cf:7e:a8:ee:ec:32:7e:47:
12:fe:bb:71:99:85:01:16:05:3f:88:cd:81:d7:ce:
3c:91:6d:43:5f:8c:37:fb:25:cf:03:48:34:6a:8e:
d6:e9:3f:9d:f0:17:a7:9d:09:98:cd:8d:de:72:e0:
f4:ea:8c:5d:d8:26:ac:35:f6:36:09:b4:e5:eb:3d:
57:9f:fd:e0:cb:e0:7f:de:d7:2c:bc:46:4d:15:85:
ec:2b:02:af:35:f7:f7:2a:4e:9d:a3:79:b0:2b:62:
3f:6d:6e:02:27:a7:39:48:b2:50:91:ab:4c:3d:0c:
8f:fd:bf:0f:ac:3a:72:37:2d:33:f6:94:59:7a:46:
9d:90:67:c2:d6:93:7e:32:c9:6b:98:2e:e6:1e:98:
70:1a:17:c9:04:8e:92:f5:57:a0:49:18:17:ed:db:
c0:5c:c8:c9:b5:89:a1:96:8b:c6:4f:0e:e3:e0:5e:
ee:dd:29:ad:1b:85:0e:d7:eb:a4:c2:29:43:65:c8:
0c:4a:78:8d:ef:61:4e:64:f7:98:dd:bd:4c:e3:11:
08:0f:c7:7e:68:fd:d4:4d:da:4d:fd:51:9a:d7:b7:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C5:6D:C0:83:5B:A8:59:9E:2C:8B:B6:0F:76:34:E1:C4:D8:7E:0B
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/18VtwINbqFmeLIu2D3Y04cTYfgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
25:0e:24:3c:9a:95:99:92:83:42:0e:be:fb:b8:8c:00:5a:0a:
5a:99:52:88:2b:d1:28:9f:a2:b6:f6:ef:38:28:2b:59:cf:06:
33:93:91:e1:87:37:b0:29:ba:29:41:85:8d:5f:15:0f:94:fe:
f3:3e:88:ba:54:c0:cf:f6:70:e8:29:4e:55:35:d7:f7:23:aa:
64:fb:04:4d:c7:84:36:c0:2f:64:8b:a8:34:a9:c6:b9:60:61:
00:40:08:a7:da:29:bd:43:a1:78:95:53:3f:dc:ea:98:31:7e:
cd:45:d5:2a:59:84:81:e8:4d:85:02:d1:4b:ba:40:f5:83:98:
4a:19:b3:70:32:ef:cf:21:e3:f2:ca:ec:45:6a:aa:88:a2:ef:
e5:a1:31:e9:2f:8b:90:47:73:1d:c8:79:11:12:2d:8f:bc:60:
f3:1d:c5:2c:8f:f7:9c:5b:4b:ef:5d:18:9b:11:62:53:3b:82:
94:fc:da:c9:15:60:06:45:f9:4a:d8:c9:8f:8c:95:e1:8b:3f:
41:ea:41:a9:b1:04:da:58:a7:c6:05:1a:85:f4:73:59:4f:4d:
0c:07:0e:56:d8:9d:0f:a1:34:79:0f:66:2f:e7:7a:60:34:3f:
b0:b0:a9:7f:99:fa:1e:dc:80:8f:8c:9b:ca:2e:23:80:80:1b:
f1:32:92:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:19 2025 by rpki-client