Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IbpkmnYp58RkjlflD8OzxIqzCqo.roa
File: IbpkmnYp58RkjlflD8OzxIqzCqo.roa (raw, json)
Hash identifier: 7HkoGttPP2CuDEM4+JiZwA3ir9jDLvpIX47M+WWBDL0=
Subject key identifier: 21:BA:64:9A:76:29:E7:C4:64:8E:57:E5:0F:C3:B3:C4:8A:B3:0A:AA
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F624F0F43FD9C16BEFB211A8643924A
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IbpkmnYp58RkjlflD8OzxIqzCqo.roa
Signing time: Tue 25 Jun 2024 12:32:41 +0000
ROA not before: Tue 25 Jun 2024 12:32:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396565
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:4f:0f:43:fd:9c:16:be:fb:21:1a:86:43:92:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21ba649a7629e7c4648e57e50fc3b3c48ab30aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c6:03:60:8e:48:34:52:f6:82:53:30:80:ad:
cd:56:c6:a7:4c:ee:3e:44:43:1b:2d:07:fa:10:ce:
8a:b9:6c:4c:d0:80:dc:7d:af:53:23:94:71:ce:c0:
2c:34:f1:22:c0:97:56:9b:f3:3a:f6:dd:bc:d9:c0:
88:0e:b2:da:0f:dc:2c:64:c2:4a:b4:61:f0:1e:53:
3a:d4:a4:16:32:1e:52:26:6c:38:dd:9b:17:06:ad:
14:99:38:5e:b9:18:a1:7c:62:5c:97:d9:1e:88:b4:
fc:53:8b:5c:43:e4:1a:50:06:dd:e8:eb:e2:b5:2f:
25:01:6f:35:58:9e:cd:dc:fd:b3:dd:3b:8c:72:aa:
1e:25:18:8e:a2:52:59:ea:a8:e9:95:9d:0d:3c:0c:
73:2d:3e:cc:a5:86:da:16:a4:28:03:1a:02:b3:e3:
0c:31:49:3e:e2:95:70:7b:44:e3:bf:0a:f0:70:99:
8b:43:5a:10:2e:db:cf:4a:ef:33:f0:60:ae:f1:b6:
b9:3b:9e:e0:d3:8d:65:16:30:52:1f:a3:6f:80:b1:
e4:c7:d7:40:41:c3:eb:83:b8:b8:fe:10:19:bf:b9:
11:f4:22:b1:bd:08:f1:22:1e:73:a1:94:f0:bb:ac:
59:8c:e6:df:f0:95:ad:0e:ef:2b:02:05:e3:3d:d1:
f4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BA:64:9A:76:29:E7:C4:64:8E:57:E5:0F:C3:B3:C4:8A:B3:0A:AA
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IbpkmnYp58RkjlflD8OzxIqzCqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
53:1a:7d:00:aa:18:66:14:3f:07:95:19:f9:04:42:de:c1:aa:
cb:30:fc:06:71:59:fd:cd:77:e8:8a:9f:33:59:7a:c7:e1:e0:
4f:67:32:4d:40:d7:f0:1d:4a:9b:86:4a:32:84:ca:d2:56:55:
d0:6f:41:68:1b:1b:d6:10:f5:97:a9:47:aa:89:9f:67:75:1b:
c1:26:b2:53:e4:11:c7:ce:10:a2:0f:d3:e9:66:e0:c7:c0:27:
ac:2a:5a:a4:1c:b2:be:a4:e7:62:a7:be:97:df:bf:79:fd:ab:
e5:76:1c:5d:ec:7d:17:6d:ab:05:59:26:2b:fe:98:49:79:d0:
0a:e6:33:24:b9:2e:ab:ac:ec:55:90:1e:8d:b8:37:6d:e1:7e:
4f:5c:61:90:4a:72:27:fe:c9:18:ca:0a:bc:66:81:aa:cf:18:
6f:99:f7:0a:2b:4a:80:0f:43:75:25:82:ee:67:96:32:86:aa:
24:de:42:30:cc:37:55:01:0d:69:39:c9:b8:8d:5a:ab:66:60:
dc:75:0d:dc:6b:1b:37:0d:4a:4e:da:f3:a9:35:f6:c7:a4:34:
bd:59:7a:53:81:f4:b5:90:6f:50:f3:86:69:35:d1:bd:67:c6:
e4:8f:dc:60:67:a7:40:52:b4:43:c9:e6:8b:c7:e7:dc:ea:42:
78:74:b3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:20 2025 by rpki-client