Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/CSoS8M64ptIwwPs3bx6BTO4VqAw.roa
File: CSoS8M64ptIwwPs3bx6BTO4VqAw.roa (raw, json)
Hash identifier: cWZjHA9VjJ8plpjtGARw850oiT29VGR2P1Yj4VHaKwU=
Subject key identifier: 09:2A:12:F0:CE:B8:A6:D2:30:C0:FB:37:6F:1E:81:4C:EE:15:A8:0C
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEEDAE829828B8641975CF6868D2EE
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/CSoS8M64ptIwwPs3bx6BTO4VqAw.roa
Signing time: Tue 26 Nov 2024 13:35:14 +0000
ROA not before: Tue 26 Nov 2024 13:35:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396545
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:ed:ae:82:98:28:b8:64:19:75:cf:68:68:d2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=092a12f0ceb8a6d230c0fb376f1e814cee15a80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b0:02:ea:07:e6:22:94:df:eb:61:b8:4a:97:
5b:67:9f:5c:ed:49:c2:94:9d:8a:cc:1c:a7:df:30:
25:52:4d:c9:86:44:4b:69:08:1f:41:51:8c:22:7b:
6b:56:25:52:96:c5:9a:95:47:65:1f:bf:7d:f7:f6:
7e:14:8e:26:e9:89:0a:ab:6c:4c:ed:c8:87:20:66:
4c:ae:4d:4f:f7:a4:80:8d:c3:2e:ea:d5:e2:6c:8b:
0f:29:f8:74:04:3f:1e:fa:a0:da:41:71:e2:f1:11:
59:c1:6a:2e:bd:43:cc:28:8c:56:9c:1f:46:78:c1:
3e:d8:f5:59:f9:c9:e7:03:95:d1:a0:db:01:62:a5:
f5:e0:43:da:59:08:7f:99:8f:44:b3:2b:17:e6:27:
a9:0f:3e:ae:73:14:a2:9f:e0:fd:f8:03:cb:3e:1f:
62:40:9f:3d:60:f0:60:96:34:5a:fb:30:22:fc:fa:
4f:51:32:56:b9:b4:c5:6c:e5:18:e5:5f:70:a8:1a:
90:36:d9:d5:f0:34:6b:2d:ff:8a:93:ee:96:62:e0:
12:c9:bb:f2:a9:c7:39:f8:39:34:ed:c3:ec:ef:6c:
91:af:83:c2:13:f1:44:32:13:4c:2e:c8:c2:c9:86:
78:c6:32:b9:14:0c:90:5d:07:63:ba:3b:e2:a7:46:
79:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2A:12:F0:CE:B8:A6:D2:30:C0:FB:37:6F:1E:81:4C:EE:15:A8:0C
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/CSoS8M64ptIwwPs3bx6BTO4VqAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
07:8c:b6:fb:72:6e:46:45:f5:5a:35:7b:f5:99:92:aa:cd:6c:
b3:ba:48:82:31:57:f7:37:69:7a:0e:6d:e6:c2:ef:61:03:6b:
14:5e:a3:75:d2:c2:d3:54:9a:3b:f1:40:2b:f8:de:8e:ee:eb:
00:5e:d8:bf:e6:53:68:52:5f:a0:fc:03:06:2e:00:9f:4e:4d:
f2:87:b0:8c:dd:61:4e:fa:87:2b:95:f0:5d:3c:ca:a9:3b:e4:
9f:18:52:c5:60:d7:33:12:31:19:b1:c3:25:39:00:f5:2b:ba:
d4:66:fa:42:91:58:0f:0e:c2:a6:10:52:fb:c6:a0:74:0b:e4:
89:61:b3:4b:fc:d9:26:67:3c:94:52:70:a4:88:ee:52:a8:ca:
9a:86:75:b6:57:f2:40:0a:62:10:6d:f3:b9:a3:6c:47:f5:be:
02:48:5c:1e:b1:c3:12:53:09:81:5c:a4:5d:38:03:fd:ba:a3:
ca:92:00:bd:53:75:88:cd:93:8c:e1:49:60:63:45:d6:6b:c6:
47:0b:2b:c2:e0:5c:9e:98:56:b6:6c:51:6b:1a:14:c7:67:9e:
c4:d8:6a:8c:3a:c5:83:af:28:46:14:aa:07:a9:73:37:31:15:
4c:cf:e4:81:46:61:e5:d2:f3:08:b1:15:cb:b1:8e:12:b1:42:
40:ef:de:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:37 2025 by rpki-client