Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/6O38QqNwUczhDsUXitiKa9BHZl0.roa
File: 6O38QqNwUczhDsUXitiKa9BHZl0.roa (raw, json)
Hash identifier: N3qtcOxt06P/fCPzJ5olbkqVoibaQtKqqJmj0D/iAEk=
Subject key identifier: E8:ED:FC:42:A3:70:51:CC:E1:0E:C5:17:8A:D8:8A:6B:D0:47:66:5D
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEE946EB8DB5DF51FBB3DA2E86775C
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/6O38QqNwUczhDsUXitiKa9BHZl0.roa
Signing time: Tue 26 Nov 2024 13:35:13 +0000
ROA not before: Tue 26 Nov 2024 13:35:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36630
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:e9:46:eb:8d:b5:df:51:fb:b3:da:2e:86:77:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8edfc42a37051cce10ec5178ad88a6bd047665d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:2d:a1:61:64:c2:67:e4:d7:e5:6b:5a:08:
38:9c:62:a8:fa:a3:c7:f2:ae:ae:52:ee:69:dc:91:
bb:c3:4c:95:94:7a:e3:b9:e5:48:15:e2:e0:8f:d4:
99:39:5d:65:c6:9c:87:10:21:b7:61:39:d4:1d:ae:
79:f6:9d:48:71:45:f8:0a:c6:05:42:76:28:39:93:
ce:92:3f:40:1c:c8:00:35:68:12:48:60:18:c7:a4:
58:59:24:b0:80:43:ea:42:4a:1b:4c:5b:67:de:3e:
56:84:f6:ee:9a:4e:1e:68:05:fc:58:f2:28:34:a4:
6a:70:b3:64:fe:ff:3c:af:9f:b7:0c:d4:5c:e4:fe:
20:c8:07:65:32:28:4d:94:4c:68:4a:be:a4:18:0c:
73:19:70:c0:de:f2:4b:68:83:29:1e:1d:a9:43:a0:
e2:59:b9:4a:6c:8d:94:7c:91:b9:aa:67:76:95:24:
3f:7c:09:01:55:26:d4:89:06:0f:3e:56:c4:cb:e1:
8f:e4:96:6b:62:0b:98:9c:5c:41:a4:0c:fb:ea:5d:
ab:7a:0b:02:d6:f4:e6:32:e2:f7:a4:8c:8b:db:69:
45:50:3f:31:53:e5:c0:c3:2f:a8:d3:71:2b:2a:58:
22:a7:0c:8c:1f:36:ca:09:a9:f5:ee:b6:5d:04:9f:
b3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:ED:FC:42:A3:70:51:CC:E1:0E:C5:17:8A:D8:8A:6B:D0:47:66:5D
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/6O38QqNwUczhDsUXitiKa9BHZl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
57:bf:9c:d5:f4:6e:48:74:fd:51:45:7d:9d:ab:47:11:f6:52:
1d:1b:55:9d:a1:44:c0:68:5b:fe:1b:d0:71:c3:73:bd:3b:0c:
02:3f:20:83:2c:b5:9d:52:ca:aa:a8:6d:2f:a8:a3:4d:40:73:
e0:0d:b0:6a:94:fa:7a:8e:1f:a3:75:d4:e9:9e:1a:69:dc:c6:
b0:63:2d:66:8f:c6:3d:98:73:c4:10:7f:cb:85:f4:11:a2:4b:
60:b2:4e:0e:f8:75:65:ec:db:92:93:c9:f2:92:bd:84:b9:b4:
15:60:99:52:90:20:43:15:6e:13:81:16:e8:61:f8:b1:d1:de:
41:77:42:d7:24:6e:9d:d0:e3:94:01:dc:2a:e2:85:52:7f:0e:
78:71:30:fc:23:75:72:98:93:b0:3e:d4:1a:73:0b:33:0c:ef:
a1:91:99:77:05:e3:db:1c:a2:07:57:a8:0d:e1:4e:9f:1e:4e:
da:bb:ba:33:8e:1a:82:6c:f9:f4:72:6c:46:45:e4:c7:33:d0:
1a:f8:b3:7c:22:d3:4d:48:6e:73:0c:eb:86:47:fe:97:5e:1a:
2c:c7:ae:d7:5a:3f:ec:ba:90:2e:bf:f4:07:46:c5:be:36:05:
ac:72:b9:4c:34:e0:f0:7b:2b:fc:01:0c:8c:06:b3:c6:57:d7:
de:8e:b0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:36 2025 by rpki-client