Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/9-Bcs3kT8qfYhWu_XjhggyYxnTg.roa
File: 9-Bcs3kT8qfYhWu_XjhggyYxnTg.roa (raw, json)
Hash identifier: rAryfdZPVGQYdjbEADVbtYpWWSESypkksyoqQosOvU8=
Subject key identifier: F7:E0:5C:B3:79:13:F2:A7:D8:85:6B:BF:5E:38:60:83:26:31:9D:38
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF027597C0120746DCC6DE71DDA6B7
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/9-Bcs3kT8qfYhWu_XjhggyYxnTg.roa
Signing time: Tue 26 Nov 2024 13:35:19 +0000
ROA not before: Tue 26 Nov 2024 13:35:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396591
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:02:75:97:c0:12:07:46:dc:c6:de:71:dd:a6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7e05cb37913f2a7d8856bbf5e38608326319d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:95:f8:b9:cd:77:32:13:43:78:89:b8:c4:
bb:2e:e0:df:97:e0:48:53:b1:19:3b:2d:6c:52:e5:
3c:3c:e4:cb:06:34:1f:86:c1:89:83:c5:dd:2a:fe:
bd:7f:31:9a:f1:03:e1:21:e2:a6:e1:9a:fd:dc:fb:
5a:ad:b6:15:9b:1d:ce:32:52:6e:31:35:40:a0:63:
38:34:8b:b2:76:12:80:9d:a4:23:93:4e:b2:cd:2d:
d3:8b:6d:42:15:b7:d8:ad:b7:80:a6:07:33:d9:6c:
45:97:86:d1:f2:2a:83:24:fa:2b:14:b5:b6:03:2f:
68:50:df:35:45:f9:1d:a3:50:89:39:36:aa:b8:6e:
2c:d7:5a:b0:86:5f:05:80:51:4a:6d:38:94:b8:03:
8a:80:f6:88:8a:24:87:1a:d0:c9:d1:e5:42:e6:4d:
f4:13:c2:4d:1e:22:f7:95:82:9e:0f:03:4e:d8:e3:
00:40:b7:52:b1:01:48:8e:57:9f:c1:67:6f:9b:a3:
c7:7d:b2:c6:de:3a:e0:36:f4:4a:71:72:7d:8b:08:
3d:b7:f1:53:e1:5e:2f:02:1d:e0:0a:c9:bd:da:85:
9f:37:b5:64:e9:b9:1a:d6:7d:55:42:f4:e4:6d:76:
60:2b:7c:bd:7d:24:d8:3f:6b:16:0d:71:f8:7d:b7:
3c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E0:5C:B3:79:13:F2:A7:D8:85:6B:BF:5E:38:60:83:26:31:9D:38
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/9-Bcs3kT8qfYhWu_XjhggyYxnTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
39:44:5b:f8:8f:41:76:23:ea:45:b8:6c:f2:94:d6:9b:db:8a:
f6:be:ee:b0:fa:d4:ae:a5:b0:09:30:db:d7:41:a4:5f:74:df:
ca:df:34:e8:35:5e:58:b5:34:9d:79:ff:0e:d8:8b:5d:ca:7a:
05:bc:3b:33:32:2d:5b:16:25:c0:8b:0b:ef:3a:a0:11:da:e4:
dc:22:ae:f5:3f:cf:c0:90:e4:be:fa:d6:06:da:f6:8e:f4:d5:
12:c7:31:86:0b:21:52:47:80:57:82:ac:a0:ea:1e:93:c7:59:
27:04:2c:f9:e5:08:4d:47:a7:5c:7a:71:f9:48:e0:5c:ab:35:
8a:cc:5b:ac:a2:9d:65:fe:22:e7:d3:28:78:0d:d0:73:bc:f1:
fa:14:de:1b:5e:a7:01:dd:10:2e:14:2a:e3:98:9b:3e:05:13:
9d:82:61:74:23:07:e5:21:3e:2a:5e:5d:aa:7b:78:2f:31:86:
fb:65:18:55:2a:41:54:42:97:53:33:af:1d:5f:5d:fa:8b:3e:
0a:af:75:79:95:0b:88:f4:ab:d0:56:3c:f4:67:44:71:14:6c:
b7:39:34:63:d7:a8:86:d5:3a:18:68:e1:16:29:96:ab:d5:86:
fb:e3:4d:28:ec:78:b4:0b:95:d4:be:74:7a:3c:a7:3e:7f:78:
9d:c1:d7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:36 2025 by rpki-client