Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/9ZOCkjzUfx6mtQ1FztqUt0Bqt6Q.roa
File: 9ZOCkjzUfx6mtQ1FztqUt0Bqt6Q.roa (raw, json)
Hash identifier: tt5FPXgzuAxOAz5MCY7cPyclcAtG6kiy0nmhLsvkm48=
Subject key identifier: F5:93:82:92:3C:D4:7F:1E:A6:B5:0D:45:CE:DA:94:B7:40:6A:B7:A4
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F62449FD7525AA68E3D5E7970E606D6
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/9ZOCkjzUfx6mtQ1FztqUt0Bqt6Q.roa
Signing time: Tue 25 Jun 2024 12:32:38 +0000
ROA not before: Tue 25 Jun 2024 12:32:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396542
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:44:9f:d7:52:5a:a6:8e:3d:5e:79:70:e6:06:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f59382923cd47f1ea6b50d45ceda94b7406ab7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:85:a7:b8:a1:10:a8:ca:e9:a5:5c:31:0d:
e3:7f:9c:38:87:f5:c7:41:74:76:55:a7:90:29:68:
37:16:b7:4f:f3:eb:79:d1:8c:0f:27:96:96:5d:e3:
e5:29:99:07:e9:f2:a2:17:ce:2d:c9:af:33:e3:fd:
e0:4c:38:85:41:31:e2:18:11:a3:9a:0f:8e:62:e2:
f3:5a:e2:c1:90:98:54:16:d8:3d:c6:4b:24:60:d2:
62:3d:61:be:6c:7f:16:05:11:e4:92:2a:5a:fd:5b:
d5:d4:dd:ef:1a:9e:11:86:fa:de:06:bf:ff:65:02:
ed:f0:c6:d2:57:5d:f8:a2:3f:a4:95:47:d6:80:46:
c7:bc:32:78:1f:53:33:34:e6:be:0f:b1:bd:81:fb:
24:f3:d9:52:c8:88:d3:49:50:58:6b:d9:f3:68:bf:
5a:a4:c4:58:e6:8d:f7:80:fb:60:33:bb:0d:71:51:
f6:92:80:1f:1a:c3:32:77:29:57:b0:76:46:93:20:
6d:b5:6d:8b:92:0d:3b:78:e0:1a:24:cf:a9:0b:ea:
94:74:5a:6c:c3:a3:7d:fe:fc:1b:7d:7e:1b:79:ef:
8c:8f:fe:b2:5a:29:3f:e3:34:7e:0b:26:2d:3f:55:
cf:b5:68:49:59:2f:c1:f2:ce:8e:89:00:fc:18:07:
c0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:93:82:92:3C:D4:7F:1E:A6:B5:0D:45:CE:DA:94:B7:40:6A:B7:A4
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/9ZOCkjzUfx6mtQ1FztqUt0Bqt6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
27:c1:40:89:08:0d:ac:12:68:d0:95:30:da:62:8f:e1:e5:19:
29:8b:b4:b4:cb:58:52:34:1b:ea:b8:41:dc:3a:97:d0:b9:73:
02:cd:79:15:39:58:56:ee:10:2b:d5:7d:39:66:6a:63:0c:5d:
6d:c3:8e:55:ff:64:80:01:74:fe:f0:fa:12:f4:aa:21:11:a3:
83:48:13:cb:2f:4b:32:de:82:c6:c2:33:e0:2b:23:15:2d:27:
e4:ec:24:ce:43:d5:ff:d7:66:4f:32:55:77:1f:eb:d0:f0:3e:
ac:59:59:f2:2e:fd:7e:7c:a7:10:13:0a:a8:a5:9a:be:89:7d:
37:30:c1:93:c3:f4:9c:a5:4f:94:3f:ee:78:0f:d1:fb:5f:d8:
e6:93:51:c0:aa:e2:0e:f1:23:15:ee:70:bc:56:04:df:cf:92:
98:6a:61:8e:fe:5b:2e:79:a4:ee:e2:e9:73:82:3c:ee:4d:0b:
c5:47:45:fe:43:d9:49:0d:45:94:9e:2e:d1:94:83:d4:2f:3e:
b9:75:6f:a9:a3:ed:ac:26:0b:c3:56:8f:1b:38:21:41:e0:1c:
25:5c:65:3c:9f:df:31:62:13:1d:a2:48:64:ad:b1:93:5a:df:
82:80:19:fb:d1:b0:cd:d8:36:63:4d:ae:5c:cf:9e:96:46:30:
8d:a6:dc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:18 2025 by rpki-client