Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/90FqLX2PaVpXVa9hACyCLW3kveY.roa
File: 90FqLX2PaVpXVa9hACyCLW3kveY.roa (raw, json)
Hash identifier: UPRRY2b1zLlO+tPcOZ77JGWE4ovturo0PBs7KnZXrvk=
Subject key identifier: F7:41:6A:2D:7D:8F:69:5A:57:55:AF:61:00:2C:82:2D:6D:E4:BD:E6
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEF12E6979B745E1FC145CBB890D90
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/90FqLX2PaVpXVa9hACyCLW3kveY.roa
Signing time: Tue 26 Nov 2024 13:35:15 +0000
ROA not before: Tue 26 Nov 2024 13:35:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396553
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:f1:2e:69:79:b7:45:e1:fc:14:5c:bb:89:0d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7416a2d7d8f695a5755af61002c822d6de4bde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:45:f5:9b:1b:78:d5:c3:c2:bc:d7:38:fb:
a8:16:51:5c:24:4d:2b:c1:64:5a:72:6e:98:13:1d:
59:34:e8:13:9a:6b:2f:8b:29:e3:71:f9:2d:9d:f0:
8c:47:1d:43:d8:d1:e0:eb:3f:8f:a3:5e:d7:14:fa:
f2:7d:ad:72:bf:c8:a2:96:95:6c:82:8b:ed:51:ce:
ba:ec:64:29:ed:8f:99:19:40:4c:4f:40:df:6e:56:
34:1e:ce:60:13:09:17:0a:40:9d:5b:be:07:6c:4d:
ec:5d:b8:02:67:c4:77:8f:3b:f2:1f:84:db:23:d1:
f6:de:a5:f7:84:ca:dc:d4:b2:fa:39:d5:ab:e6:19:
87:32:e0:ac:34:4b:01:bd:0b:95:8e:9a:b5:0a:92:
2e:52:73:9f:7b:b5:4d:aa:18:85:f5:ca:58:4f:8a:
de:88:30:e3:4a:db:21:65:16:fc:3d:db:e9:e9:b4:
d9:ec:80:2a:5b:7e:fb:ae:14:c3:eb:73:5e:d7:e6:
1c:52:40:39:06:a8:d8:ce:07:26:14:4b:c8:02:16:
a3:62:8b:d4:4e:fe:f0:d4:30:62:4e:d5:c5:27:53:
19:e3:7e:a3:42:6c:75:6d:a6:a0:d8:e1:6b:fc:cb:
73:22:cf:4d:4f:d7:d5:9e:3f:60:03:45:11:87:fb:
6a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:41:6A:2D:7D:8F:69:5A:57:55:AF:61:00:2C:82:2D:6D:E4:BD:E6
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/90FqLX2PaVpXVa9hACyCLW3kveY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
94:b3:87:1e:81:0e:f8:33:b4:e7:16:c4:08:cf:8d:eb:d5:19:
47:bb:ce:70:97:68:a4:a0:ee:13:79:3b:5d:14:bb:74:ee:97:
5f:dd:8c:e6:2d:4d:dd:89:37:05:fe:3e:2e:ad:e9:21:df:14:
bd:fa:02:fe:35:a4:0c:cc:9b:9c:89:f6:3d:58:cf:d8:b4:a3:
06:24:c1:56:bc:3f:37:2c:a5:6a:e1:f7:1c:ac:73:5f:c8:1f:
41:b7:0a:d0:e9:a2:50:75:74:0b:17:19:a6:8b:f6:34:95:aa:
45:65:c0:0c:26:27:3f:8c:0e:02:9d:57:79:d4:68:a8:cf:23:
2e:cc:83:e2:6d:1b:e4:20:7b:44:46:9a:36:b8:54:14:66:2f:
50:4b:cb:63:c2:91:77:9b:b8:84:33:9c:4e:11:40:71:86:d8:
98:ca:8c:80:ed:2f:0b:c8:05:88:34:7f:c2:8e:92:8b:65:cf:
fe:0f:e8:4f:ae:9c:d9:1d:c0:8c:ec:7a:80:48:9a:f8:29:ef:
e4:45:5e:78:79:d5:a5:ea:af:7b:d0:d9:22:97:0d:69:03:2d:
7b:fc:75:16:d4:12:f8:21:cc:33:e1:23:fd:ed:3a:e4:db:b6:
ee:88:54:1e:72:17:80:93:8b:63:7a:dd:78:0b:56:9c:2e:85:
2f:db:96:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:19 2025 by rpki-client