Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/3F4cUTQ1Qbg5ooF-Niw8OqsdMSo.roa
File: 3F4cUTQ1Qbg5ooF-Niw8OqsdMSo.roa (raw, json)
Hash identifier: xH4CtKD11tPcmuyhbx92YEcOXu5lnOT7MREdjEzicSA=
Subject key identifier: DC:5E:1C:51:34:35:41:B8:39:A2:81:7E:36:2C:3C:3A:AB:1D:31:2A
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEF245C64392127038A7949BE24246
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/3F4cUTQ1Qbg5ooF-Niw8OqsdMSo.roa
Signing time: Tue 26 Nov 2024 13:35:15 +0000
ROA not before: Tue 26 Nov 2024 13:35:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396557
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:f2:45:c6:43:92:12:70:38:a7:94:9b:e2:42:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc5e1c51343541b839a2817e362c3c3aab1d312a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:47:6d:f6:32:8c:60:87:71:02:9e:73:00:
08:92:fe:86:94:4d:77:34:f4:a6:53:b1:81:80:f0:
eb:7c:dc:45:a3:30:34:eb:28:34:3b:be:86:62:64:
97:eb:f1:71:27:21:f5:10:c4:12:53:f6:c9:ec:89:
f9:77:93:7c:5b:da:b9:8d:ae:5a:f2:b2:4d:ca:3f:
cf:2d:98:62:e3:07:5b:73:e6:2c:0b:cd:00:e0:28:
52:96:99:3e:cd:e0:c6:42:f0:b1:d6:d6:d8:97:1e:
32:17:f2:89:22:59:14:12:13:3e:f2:bd:7b:96:bc:
67:7c:4a:47:91:8a:e3:de:8f:50:d8:93:b2:cb:6e:
53:01:3b:b9:a4:5a:94:3d:0f:cc:c8:ff:be:a1:a1:
f1:90:35:7c:13:c3:24:9c:34:30:1e:b6:9e:be:fe:
b5:92:ab:59:54:36:7e:42:4c:f7:b8:fd:e4:1c:08:
3b:71:a1:64:0f:c3:ef:c6:13:12:85:2c:18:d9:59:
94:96:cb:9a:53:ab:11:cf:ee:8b:a6:7a:d8:16:fb:
e6:98:2b:f6:8a:71:bd:3b:e9:0e:3b:12:23:78:54:
ff:14:35:7d:f4:4e:69:9c:e8:86:d4:f9:aa:5f:17:
33:0c:c1:0a:45:12:bf:91:4e:7b:91:3f:22:a0:7f:
84:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5E:1C:51:34:35:41:B8:39:A2:81:7E:36:2C:3C:3A:AB:1D:31:2A
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/3F4cUTQ1Qbg5ooF-Niw8OqsdMSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
1c:d6:3a:5d:bd:1c:e9:48:8e:91:82:e3:87:68:fb:e2:73:fc:
a4:26:24:fa:39:0c:3c:d4:32:b3:dd:4d:4a:95:1c:1e:68:06:
67:cb:84:a2:5f:74:88:0f:51:41:98:c0:f3:cb:4e:6a:bb:ab:
2d:9b:4b:88:ec:15:84:e5:12:ec:70:13:60:a7:53:20:04:d4:
fe:3a:f3:5c:a1:84:46:a0:1b:44:97:40:11:cc:f3:06:b4:7d:
06:55:08:42:e8:df:61:ae:58:9e:ea:ee:4c:9c:c9:51:42:1b:
06:fd:dc:e5:0a:15:3e:ec:a4:0d:05:45:26:10:c2:8d:ed:d3:
00:8e:6c:fc:76:8e:12:a6:fd:7e:e3:18:43:b5:99:3f:fb:28:
bc:6e:af:57:9c:4c:cc:6e:5a:9b:9b:25:12:38:67:fa:c7:de:
06:68:e1:3a:cf:d1:96:bb:fb:e1:5b:7c:99:4f:ef:8c:01:31:
63:db:97:ae:24:8b:5f:3a:bd:c3:e9:a7:d1:d0:9f:88:4f:38:
c0:d3:07:40:ea:11:33:28:52:3c:6c:03:9b:81:b8:46:3a:21:
ef:b4:e1:bf:99:30:7a:dc:7a:b8:3a:b0:f3:d0:eb:54:6e:05:
20:5c:5c:23:57:01:71:b3:3c:89:11:9c:7c:fe:53:4f:63:e4:
74:c6:e5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:51 2025 by rpki-client