Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/3czC3OKaRJ-zK601u_9wd7oi-n4.roa
File: 3czC3OKaRJ-zK601u_9wd7oi-n4.roa (raw, json)
Hash identifier: o3lBo48AxRbe5dzVGEYXMIHbJaXJjH6O9uKc2IOR0V8=
Subject key identifier: DD:CC:C2:DC:E2:9A:44:9F:B3:2B:AD:35:BB:FF:70:77:BA:22:FA:7E
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F623A4A6777634CA7453298B583272F
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/3czC3OKaRJ-zK601u_9wd7oi-n4.roa
Signing time: Tue 25 Jun 2024 12:32:35 +0000
ROA not before: Tue 25 Jun 2024 12:32:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36619
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:3a:4a:67:77:63:4c:a7:45:32:98:b5:83:27:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddccc2dce29a449fb32bad35bbff7077ba22fa7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a9:df:dc:76:c4:f2:37:7f:52:f9:e0:26:03:
fd:42:18:15:1f:3e:dc:70:ac:80:d9:82:53:89:e7:
62:a8:75:6c:78:a6:0d:61:b6:6c:d1:c9:25:d1:7e:
1e:1a:96:08:a6:f2:35:b4:c0:e4:a8:f5:94:90:2e:
75:85:00:c8:f3:61:45:b3:45:11:38:df:90:ef:3b:
d5:9f:19:27:6c:9b:e4:a4:d4:18:85:09:6a:83:1d:
f7:42:36:2f:a5:8f:48:9d:6d:0b:a3:7c:1e:2d:37:
f9:ba:43:39:98:08:f4:ab:42:30:3c:e7:c6:87:77:
57:fd:c8:14:73:bb:93:05:30:75:ce:96:e5:76:37:
be:51:dc:83:e9:2c:0e:fa:8b:bc:5e:4b:33:4f:93:
86:1c:a8:6f:5e:2b:a2:57:52:a9:48:fd:31:79:9c:
a5:0b:31:9a:c9:89:1b:5c:0e:89:71:4d:30:34:7c:
19:e0:51:fc:d1:92:bc:d6:4f:2e:89:2e:24:14:3d:
42:ae:ce:03:b2:c6:4b:17:47:07:d5:82:65:7f:d1:
03:06:f4:2d:70:e7:1c:3f:81:40:6d:62:a4:aa:d2:
d6:5b:b3:e9:bc:9c:4a:f6:4b:dc:71:e8:60:61:54:
db:f6:48:43:d2:1f:e3:51:3f:9b:ce:07:96:96:30:
fc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CC:C2:DC:E2:9A:44:9F:B3:2B:AD:35:BB:FF:70:77:BA:22:FA:7E
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/3czC3OKaRJ-zK601u_9wd7oi-n4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
8b:43:80:c9:94:d8:37:4d:7c:b1:0b:0d:13:52:a6:35:1a:ee:
ed:44:d0:59:99:5c:10:6c:1f:e3:d4:99:d1:78:8b:d2:c0:98:
3f:56:f4:8b:5b:99:8c:c9:e2:6d:61:62:95:c3:dc:68:f6:c1:
cf:00:c1:71:b8:93:ff:0a:38:79:51:c5:71:f4:b5:98:34:85:
4a:8c:08:b9:c0:70:ee:45:8a:8a:0a:0f:4a:02:48:17:51:cb:
bc:54:1b:ce:1a:20:d6:66:65:11:ee:8c:37:a8:5f:7b:35:d8:
01:8b:4d:f7:a5:ea:8e:08:53:c0:6a:20:8b:56:2d:19:d7:90:
5c:15:85:da:eb:04:9d:85:b9:4d:17:96:e8:97:51:2c:5d:0a:
e7:95:f8:b4:81:de:56:a4:3c:6f:ff:fd:f7:af:2e:aa:92:cc:
56:12:db:31:8f:63:16:0f:af:bc:4e:d2:e6:b1:c1:11:0a:47:
cd:8d:87:46:1d:6b:da:85:5e:b9:8d:ab:28:ad:cc:7d:86:03:
d1:d3:d3:14:dc:7e:b4:11:e4:64:b0:04:73:ab:a7:e3:b7:a4:
35:e9:1a:44:56:82:47:a8:d0:fa:51:5e:5b:16:b6:44:72:aa:
71:54:4f:ad:84:2b:c9:28:3e:b9:87:97:6b:67:5c:d9:d3:16:
a2:f2:2a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:23 2025 by rpki-client