Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IAnYPd-iQnrWLKXLdjp_5Aox2O8.roa
File: IAnYPd-iQnrWLKXLdjp_5Aox2O8.roa (raw, json)
Hash identifier: A0uW84zIoicwpmOBmzkPmVgTEhRaG0csmKKtnYmE+Wc=
Subject key identifier: 20:09:D8:3D:DF:A2:42:7A:D6:2C:A5:CB:76:3A:7F:E4:0A:31:D8:EF
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F625B66C9EB2C6A39923B3D53ED7275
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IAnYPd-iQnrWLKXLdjp_5Aox2O8.roa
Signing time: Tue 25 Jun 2024 12:32:44 +0000
ROA not before: Tue 25 Jun 2024 12:32:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396587
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:5b:66:c9:eb:2c:6a:39:92:3b:3d:53:ed:72:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2009d83ddfa2427ad62ca5cb763a7fe40a31d8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:7a:2f:eb:71:e8:28:69:26:17:03:4c:83:
3e:06:aa:a2:72:79:18:4b:4f:97:e6:4c:e5:92:5f:
c7:35:f3:a0:b8:12:3c:a9:83:47:8d:d4:48:d6:ce:
fc:25:43:00:f9:2f:09:70:cf:e6:c0:ae:bc:4a:4d:
d6:0e:98:02:91:31:19:f8:0c:b5:5d:2e:0b:18:55:
6f:24:ba:5f:71:c2:a3:e0:91:b0:ef:dc:de:9f:8a:
3b:df:72:36:14:14:a9:dd:df:e8:87:21:ca:45:09:
73:7f:34:d6:92:4d:06:b4:b1:09:cc:e0:dc:6a:b1:
2b:b5:42:fc:99:da:00:d9:d3:6a:7c:ac:07:c4:33:
e8:52:78:fb:bd:1e:21:0a:eb:cf:02:61:b1:81:d7:
f6:d8:dc:be:de:b2:6b:77:e9:29:71:9d:13:0d:40:
79:55:6b:2d:d7:d3:ec:15:be:d0:29:7c:45:45:72:
2e:76:71:76:88:c8:9e:8d:ea:1a:6b:f6:63:64:c1:
eb:69:a2:95:ee:5c:8a:c5:cd:c4:56:2d:16:14:33:
89:85:84:80:f3:3f:0b:ae:3a:29:b4:f1:1d:78:ae:
2a:24:d9:a8:b7:6a:11:46:f6:44:db:62:80:29:b2:
32:ea:fd:2b:6e:4d:29:cb:aa:b2:df:2c:76:e3:6a:
c9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:09:D8:3D:DF:A2:42:7A:D6:2C:A5:CB:76:3A:7F:E4:0A:31:D8:EF
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IAnYPd-iQnrWLKXLdjp_5Aox2O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
3a:25:ec:c1:2d:2e:e0:0b:87:cc:e9:8e:b7:5c:ca:43:97:ca:
6d:5f:0c:57:f9:37:dc:20:70:7a:1d:a0:05:eb:55:4c:b9:8d:
81:94:21:9b:5c:c2:04:cf:87:0b:aa:6c:12:27:cf:7f:1e:29:
64:a2:90:53:c9:8c:66:4a:c2:0a:b4:50:16:ca:08:20:23:90:
cd:c7:45:34:f0:fe:e4:00:79:72:aa:10:59:a0:77:44:50:45:
2a:3a:63:5b:ab:11:36:f5:97:9f:37:40:3b:a1:9b:25:43:27:
7d:23:d5:c8:ef:4b:57:04:74:06:6e:e1:15:8b:a5:64:63:0e:
fc:48:d0:55:52:f2:d7:95:27:51:a1:81:74:52:17:9a:e1:c8:
91:52:2d:41:4f:e0:e7:6c:ed:a8:0e:23:b7:75:64:d0:5b:c9:
b7:8a:37:56:4b:9e:85:e5:4b:81:5a:bb:e8:0c:c6:c0:5a:02:
ca:99:40:b9:34:c0:e0:49:7c:ac:9d:dd:eb:11:65:4a:69:a5:
58:2d:50:c2:26:08:93:68:5d:ce:66:6a:99:e6:dd:73:9e:d6:
39:e8:60:73:ef:91:fd:8a:1d:b4:49:35:07:39:d1:6a:58:ca:
51:0e:9b:e3:da:c7:b7:10:d5:56:31:41:03:33:32:03:da:3c:
b5:ac:fb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:00:25 2025 by rpki-client