Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/DL7rw-1aiXJitG3PpGZseW8HkgY.roa
File: DL7rw-1aiXJitG3PpGZseW8HkgY.roa (raw, json)
Hash identifier: s54SeAABhemO/ZeJeUkUpODWNoPAmvgaSFd/NgClBdk=
Subject key identifier: 0C:BE:EB:C3:ED:5A:89:72:62:B4:6D:CF:A4:66:6C:79:6F:07:92:06
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F623B2A91F1E26A3020D7AB40D15DDF
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/DL7rw-1aiXJitG3PpGZseW8HkgY.roa
Signing time: Tue 25 Jun 2024 12:32:36 +0000
ROA not before: Tue 25 Jun 2024 12:32:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36621
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:3b:2a:91:f1:e2:6a:30:20:d7:ab:40:d1:5d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cbeebc3ed5a897262b46dcfa4666c796f079206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:20:c2:a8:25:b7:3f:32:ad:b1:76:8d:85:6f:
7e:5c:c1:2c:7f:82:97:df:17:e6:de:8c:2f:07:14:
fb:79:c2:99:45:38:5d:73:c9:f8:a1:34:55:4f:20:
a5:e4:3c:d3:cc:20:72:4a:53:01:be:51:3b:65:e7:
03:42:91:ff:df:14:6c:c2:cf:47:58:fd:04:b8:1b:
50:27:f0:f1:40:77:0d:fc:5f:16:56:dd:b8:ab:f2:
1b:14:8f:94:14:11:09:a9:c9:76:e3:60:67:02:c3:
d5:93:fe:54:1b:6c:5c:fe:b4:f8:5e:70:24:e8:6d:
b7:52:b9:bd:93:2f:3e:c1:b0:9d:27:51:3c:fc:87:
de:f1:92:cd:4a:f1:18:86:eb:56:b9:e1:93:c7:5e:
ba:ed:24:41:ed:a9:a7:70:01:d3:90:62:09:49:b6:
4f:6b:df:25:7a:5c:4f:a0:2d:7c:10:7c:ee:12:41:
ae:f0:2c:80:cb:45:10:50:b7:81:f2:4f:83:5a:33:
56:51:5c:8f:93:40:47:27:35:c8:a5:59:1e:7f:b6:
22:45:94:0b:72:e3:f8:c6:18:dd:50:24:dd:40:d4:
fb:df:57:8d:03:df:2a:f9:34:42:29:4c:6c:e0:9a:
3f:bf:e7:fc:56:37:da:59:10:85:84:61:fe:8a:08:
a9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BE:EB:C3:ED:5A:89:72:62:B4:6D:CF:A4:66:6C:79:6F:07:92:06
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/DL7rw-1aiXJitG3PpGZseW8HkgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
90:bb:ad:6d:55:bc:99:91:33:2c:eb:3c:66:98:33:9c:e7:dc:
57:ce:75:21:40:bb:ea:eb:2d:98:62:a7:00:40:e2:90:7d:59:
4e:9c:15:7d:a0:fd:74:c0:98:01:cf:ab:be:85:ea:3c:d9:b0:
32:30:16:47:9b:b5:39:54:6c:33:1f:66:f4:ae:64:6a:98:ae:
47:c7:03:e1:3f:7c:04:d8:57:e4:3f:78:66:68:29:85:48:4c:
00:3a:08:bd:c9:5a:4c:14:8c:c5:e8:d3:65:4f:bc:07:dd:d5:
04:e6:13:73:61:ca:f6:25:36:b2:1c:ca:0c:84:20:4f:fc:4e:
33:03:4c:8c:c7:ce:f5:fa:ab:24:78:5a:84:82:ef:cc:8c:34:
3b:1a:25:03:05:46:e1:37:d6:e6:63:d1:e0:6b:91:1d:82:a4:
14:3d:0b:9b:64:11:44:65:63:57:8f:5c:9e:7d:d1:8e:d9:1b:
89:b7:79:44:92:ed:f8:e3:e1:32:f6:e7:5e:5f:9a:53:1f:1f:
76:70:4c:00:3c:31:9a:91:21:de:dd:fc:9d:4c:2e:61:50:04:
87:2f:9f:f9:9c:03:32:ba:d8:fa:40:8c:ba:c2:71:10:88:20:
65:47:6f:83:8a:d6:6f:d9:61:b5:a5:c2:84:03:f4:5a:0e:eb:
5b:5e:f7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:24 2025 by rpki-client