Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/8ihhRApssrEcmOipUcIei9uYXyg.roa
File: 8ihhRApssrEcmOipUcIei9uYXyg.roa (raw, json)
Hash identifier: qqPHcCoqXIIiI3nFC44y+AwbMYlQmcttOdVfy9pJheA=
Subject key identifier: F2:28:61:44:0A:6C:B2:B1:1C:98:E8:A9:51:C2:1E:8B:DB:98:5F:28
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F624E9537E4F08E4130820C37895F63
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/8ihhRApssrEcmOipUcIei9uYXyg.roa
Signing time: Tue 25 Jun 2024 12:32:41 +0000
ROA not before: Tue 25 Jun 2024 12:32:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396563
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:4e:95:37:e4:f0:8e:41:30:82:0c:37:89:5f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f22861440a6cb2b11c98e8a951c21e8bdb985f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:8c:9c:b2:b2:0a:0b:6c:d7:79:38:40:00:
e9:3a:6e:d6:a6:3d:d0:f2:16:20:98:31:e1:69:12:
22:c6:90:86:56:06:7b:36:b5:86:ad:64:20:fc:f9:
50:d0:57:ac:1e:98:19:fa:33:f1:60:26:b8:2c:14:
00:89:57:8e:65:04:a5:74:7f:cb:b6:74:8a:f8:55:
94:c5:8a:e5:56:19:c3:c9:66:bd:a4:34:8c:41:32:
d0:d4:8a:20:15:0b:f0:79:07:9b:87:e1:d6:38:70:
6d:b6:9e:ea:1d:b5:f1:85:26:8e:61:f0:84:c4:52:
02:66:c1:22:70:b9:e8:5f:3f:77:b3:e4:b4:19:80:
9c:d2:b5:84:fb:86:7b:79:d1:1c:3b:8d:85:23:12:
f3:fd:1b:91:d2:72:5f:e8:9e:a8:e5:00:0a:0b:13:
4b:5d:5f:9d:8d:ec:f3:54:25:30:90:6c:2d:27:e3:
30:f2:38:b9:1f:af:db:08:46:0d:cc:27:ae:60:ff:
fa:d8:78:fa:a9:ec:b3:13:a8:db:2d:bb:fe:f4:7e:
85:36:6e:c3:07:e3:9d:c5:63:24:33:54:a3:ef:7c:
1f:14:64:e7:64:bd:6d:68:61:28:72:79:74:bc:7e:
f5:e1:6e:4d:1b:42:69:f5:22:63:ff:d1:38:30:4c:
a6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:28:61:44:0A:6C:B2:B1:1C:98:E8:A9:51:C2:1E:8B:DB:98:5F:28
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/8ihhRApssrEcmOipUcIei9uYXyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
1f:c1:ae:9e:55:12:b2:55:02:da:ff:70:e3:6d:15:20:1a:04:
09:e6:72:0f:eb:ec:ad:96:e4:5c:5e:c5:c5:e3:b0:2e:5f:68:
d7:4f:d6:c5:ff:23:b2:77:0d:bd:4a:70:dc:01:b6:ac:03:23:
5f:7c:a2:4f:65:98:f9:1f:6f:a5:e8:d6:ce:ea:92:fa:3c:a4:
2d:aa:92:88:19:08:17:02:a4:0c:27:75:f4:8d:d4:cb:56:72:
3d:f0:65:03:76:c8:6c:3f:46:f1:d1:19:e3:9c:f9:1d:2d:1d:
97:b1:a6:0f:63:3e:4d:7f:42:fc:7d:69:68:92:18:aa:87:2b:
72:e2:1c:bb:25:b3:81:be:93:f9:9d:0e:f6:17:48:c0:cc:59:
5f:54:83:0e:a7:f8:bb:3e:52:66:34:88:64:8f:66:99:1f:46:
b8:33:9e:a5:d1:76:08:b4:56:7b:b3:cc:b5:5b:5d:3b:a4:27:
a6:3e:b4:08:8f:28:f4:54:48:b2:87:0c:fa:89:92:d0:32:13:
45:96:b2:ae:d0:ac:db:ab:61:12:3e:72:a0:de:c7:ab:b1:8c:
bd:fe:88:6a:1c:b1:dc:83:23:4d:69:35:5d:28:fa:3f:26:da:
7f:2f:a9:80:33:09:ba:87:40:1a:71:6d:bd:a3:cf:c5:f3:96:
12:dc:54:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:15:03 2025 by rpki-client