Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/BuXKlKnuVkLm18aO0hN5rlpE8pM.roa
File: BuXKlKnuVkLm18aO0hN5rlpE8pM.roa (raw, json)
Hash identifier: Y6+zSVsqiuRX16Pt3+Om8bbzvYHGbxinan7kDAl0kaM=
Subject key identifier: 06:E5:CA:94:A9:EE:56:42:E6:D7:C6:8E:D2:13:79:AE:5A:44:F2:93
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F6242E73F918469D5509EA20C790EA3
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/BuXKlKnuVkLm18aO0hN5rlpE8pM.roa
Signing time: Tue 25 Jun 2024 12:32:37 +0000
ROA not before: Tue 25 Jun 2024 12:32:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211369
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:42:e7:3f:91:84:69:d5:50:9e:a2:0c:79:0e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06e5ca94a9ee5642e6d7c68ed21379ae5a44f293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ab:5b:7e:8c:30:0b:97:92:f9:d9:73:22:dc:
04:3d:09:ef:eb:74:6c:4f:7d:9b:20:8d:6c:35:b3:
ba:3b:fb:ae:b7:87:6e:2e:d7:7d:51:04:ad:03:bd:
3e:30:13:f4:39:88:2f:a5:a9:9a:09:f0:26:b2:56:
56:e7:3d:73:be:ff:2f:d2:ac:82:7e:4b:6f:7e:6d:
b1:ec:c6:5a:73:b9:6e:27:2f:70:69:3b:02:46:98:
11:27:6b:21:3f:fb:8a:e9:eb:9e:b4:8e:f5:09:0c:
43:a2:cd:2f:99:6a:88:32:90:59:91:9b:12:3a:91:
d5:c6:48:56:70:88:1d:f4:09:4e:6a:b1:03:d6:48:
09:81:b4:e5:f4:35:44:c4:94:1b:e4:b5:51:8b:79:
de:cc:20:89:c3:6e:8c:79:fb:40:19:39:cf:02:ab:
55:0e:98:36:eb:d1:f0:8b:d4:fd:bf:f7:db:61:37:
f0:8f:b5:22:ca:f2:06:8e:c8:73:7b:54:10:a3:31:
43:1f:c5:30:df:bf:b4:06:29:9a:df:13:74:ff:84:
f0:80:a5:f4:05:68:44:d7:98:ce:d3:a7:ae:27:0f:
c7:b8:e2:aa:65:04:0d:0c:8f:79:e0:5a:5b:52:a0:
ff:5c:b0:76:df:fd:ef:7c:b2:81:e4:49:71:3b:ca:
35:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E5:CA:94:A9:EE:56:42:E6:D7:C6:8E:D2:13:79:AE:5A:44:F2:93
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/BuXKlKnuVkLm18aO0hN5rlpE8pM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
53:98:07:84:2b:38:37:5a:d5:c4:00:f8:6e:7d:58:02:e8:0c:
ef:77:c1:7b:bd:c8:33:17:3b:28:1b:b5:51:2d:8c:0a:5c:36:
43:be:02:0e:fa:e9:c6:7b:9e:98:dc:71:fb:90:95:24:1d:90:
19:8f:23:e3:97:34:31:c8:e5:84:bb:4b:51:66:ea:08:8d:4f:
52:2b:3a:ab:85:c0:84:af:fd:58:59:8a:f3:78:8f:38:c8:92:
19:e6:5d:fb:23:6d:da:39:0c:ae:8f:23:e6:62:43:50:46:5f:
48:2f:22:0b:7a:09:f8:c6:93:1d:d5:bc:a3:16:47:5a:42:15:
59:71:1d:83:25:3e:e6:43:6b:2f:11:c8:95:0e:ad:a0:03:bd:
22:3c:e8:70:fa:77:af:38:17:af:8e:c5:55:55:1f:07:ba:35:
59:08:51:9a:9b:08:9b:10:66:28:44:a9:56:bf:dd:14:8e:98:
b3:47:77:f8:f3:69:ad:a5:13:e2:ae:d1:e6:b1:35:ca:3e:57:
20:b5:c2:62:c0:7b:78:7b:b7:25:88:c3:fb:e3:2a:04:a4:43:
fa:fc:e6:7f:74:8b:82:db:dc:e0:53:c7:d6:c1:cb:40:54:dd:
4c:59:54:97:ff:9a:54:5d:33:3c:66:c9:97:11:0f:e1:5d:7f:
76:0a:cb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:11 2025 by rpki-client