Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/J179b2KA0i9BXJn8IQ5LZmoWHis.roa
File: J179b2KA0i9BXJn8IQ5LZmoWHis.roa (raw, json)
Hash identifier: eeQIYW3XDuvh/1i4PxHvUEP36dUj735nxpUGMYa3sWk=
Subject key identifier: 27:5E:FD:6F:62:80:D2:2F:41:5C:99:FC:21:0E:4B:66:6A:16:1E:2B
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF0AAD8398CB0D6625515B0C43B2AA
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/J179b2KA0i9BXJn8IQ5LZmoWHis.roa
Signing time: Tue 26 Nov 2024 13:35:21 +0000
ROA not before: Tue 26 Nov 2024 13:35:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396610
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:0a:ad:83:98:cb:0d:66:25:51:5b:0c:43:b2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=275efd6f6280d22f415c99fc210e4b666a161e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:c8:2c:35:2e:e4:ac:e5:d6:ff:e1:52:e6:
a5:ba:91:da:b5:94:37:53:29:5d:44:41:2c:3f:31:
03:36:df:99:14:b7:cd:de:14:f8:4e:26:13:0a:67:
52:5d:ba:f2:43:84:e1:2f:3f:1d:a5:48:d3:ca:d3:
8a:e8:fd:a2:42:e0:f5:cf:dd:0c:74:f7:7a:05:10:
54:d9:c4:fe:c4:49:d5:37:bd:dd:dc:d6:79:a3:88:
8d:0b:27:04:85:99:13:ce:4e:20:ae:0b:96:60:71:
a1:f6:f7:26:fc:4a:db:9b:26:a4:36:e1:b5:a7:c3:
48:bb:a3:ae:6c:42:64:d8:30:ac:75:b4:63:6b:b4:
e3:bc:bd:f6:52:c2:5e:50:4b:e9:ff:20:10:f1:b4:
57:02:20:5c:ab:aa:3c:d7:5e:e3:f3:bb:61:f5:0b:
ff:5e:c2:c0:43:09:18:a1:36:76:a7:99:ef:7f:44:
7a:b6:d5:b0:fb:6e:8a:41:5b:79:ce:87:6d:20:4c:
1e:9c:9d:76:e4:41:46:d1:2a:c6:86:cf:5b:7d:64:
40:9c:e0:b5:bd:0a:9a:b5:60:a9:c7:cb:40:4f:bd:
79:af:dd:97:9d:57:7c:da:21:f1:0d:f6:93:08:54:
d0:f6:e2:01:2e:97:fc:93:0a:dc:d8:23:72:fd:f5:
41:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5E:FD:6F:62:80:D2:2F:41:5C:99:FC:21:0E:4B:66:6A:16:1E:2B
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/J179b2KA0i9BXJn8IQ5LZmoWHis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
17:96:d1:81:3d:19:fb:c8:59:6e:50:25:2e:31:a4:59:ca:f0:
6e:a3:a9:84:d5:44:9f:75:35:f8:d6:53:bd:9b:a0:dd:f6:10:
95:04:42:93:1b:1b:f4:a5:20:f1:76:9a:b9:f6:6b:36:75:41:
d8:c3:52:37:a0:21:bc:68:e1:cf:bd:cd:41:23:8e:79:a0:eb:
3a:2b:0d:59:1e:5a:71:66:d2:cf:c5:20:9b:13:ad:4e:55:7c:
5d:76:d1:9c:cd:a7:22:a3:38:0f:e2:11:6e:6f:cc:32:6a:26:
96:d7:b5:be:e5:1a:ee:dd:85:d5:72:3f:68:46:1a:78:d0:a1:
76:c0:96:1b:6b:f6:b4:87:a1:e9:85:35:d7:32:aa:e5:ac:09:
cb:f5:8a:b1:10:e6:18:9a:de:e2:52:60:9a:1a:3d:7a:25:39:
62:3a:e7:43:83:15:45:d7:26:ff:f1:61:d7:c7:94:20:4e:d5:
f9:d6:55:c1:06:82:cb:f6:eb:66:de:6d:2c:9d:82:2a:16:7c:
d9:2e:30:a5:2d:e7:86:bc:40:bb:91:88:09:58:f4:49:1e:c0:
13:66:8e:27:f9:3b:3d:1f:69:ee:d4:ab:fe:62:fd:f3:6f:05:
bf:e0:8e:7b:f2:db:0b:4d:c1:a5:16:cb:ad:68:88:36:27:74:
86:0e:de:a5
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZNorwqtg5jLDWYlUVsMQ7KqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQxMTI2MTMzNTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzVlZmQ2ZjYyODBkMjJmNDE1Yzk5ZmMyMTBlNGI2NjZhMTYxZTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptrILDUu5Kzl1v/hUualupHatZQ3
UyldREEsPzEDNt+ZFLfN3hT4TiYTCmdSXbryQ4ThLz8dpUjTytOK6P2iQuD1z90M
dPd6BRBU2cT+xEnVN73d3NZ5o4iNCycEhZkTzk4grguWYHGh9vcm/ErbmyakNuG1
p8NIu6OubEJk2DCsdbRja7TjvL32UsJeUEvp/yAQ8bRXAiBcq6o8117j87th9Qv/
XsLAQwkYoTZ2p5nvf0R6ttWw+26KQVt5zodtIEwenJ125EFG0SrGhs9bfWRAnOC1
vQqatWCpx8tAT715r92XnVd82iHxDfaTCFTQ9uIBLpf8kwrc2CNy/fVByQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFCde/W9igNIvQVyZ/CEOS2ZqFh4rMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvSjE3OWIyS0EwaTlCWEpuOElRNUxabW9XSGlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBABeW0YE9GfvIWW5QJS4xpFnK8G6jqYTV
RJ91NfjWU72boN32EJUEQpMbG/SlIPF2mrn2azZ1QdjDUjegIbxo4c+9zUEjjnmg
6zorDVkeWnFm0s/FIJsTrU5VfF120ZzNpyKjOA/iEW5vzDJqJpbXtb7lGu7dhdVy
P2hGGnjQoXbAlhtr9rSHoemFNdcyquWsCcv1irEQ5hia3uJSYJoaPXolOWI650OD
FUXXJv/xYdfHlCBO1fnWVcEGgsv262bebSydgioWfNkuMKUt54a8QLuRiAlY9Eke
wBNmjif5Oz0fae7Uq/5i/fNvBb/gjnvy2wtNwaUWy61oiDYndIYO3qU=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:07 2025 by rpki-client