Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/JiJHQ6fNcTb5cCLXoxfWK5-wrV8.roa
File: JiJHQ6fNcTb5cCLXoxfWK5-wrV8.roa (raw, json)
Hash identifier: 3w4ewQZaKxiN0FGzOt8S+EV9rCuuXXHPyP6vXcLpOI8=
Subject key identifier: 26:22:47:43:A7:CD:71:36:F9:70:22:D7:A3:17:D6:2B:9F:B0:AD:5F
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F6275DC81949A65A2D621156AD36876
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/JiJHQ6fNcTb5cCLXoxfWK5-wrV8.roa
Signing time: Tue 25 Jun 2024 12:32:51 +0000
ROA not before: Tue 25 Jun 2024 12:32:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397212
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:75:dc:81:94:9a:65:a2:d6:21:15:6a:d3:68:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26224743a7cd7136f97022d7a317d62b9fb0ad5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2e:66:b4:cf:fe:01:8b:b1:51:60:d2:54:90:
0f:e8:46:35:36:b4:f1:66:17:c4:c4:aa:1a:4c:ec:
db:89:c7:8b:b1:60:8d:5a:4c:da:a3:b7:de:af:a7:
07:41:84:78:37:62:56:f6:4b:e8:9e:4e:17:8f:ef:
a9:a6:fa:c3:ab:82:62:55:88:f3:8e:22:65:77:85:
0b:99:0e:81:bb:43:6e:90:f4:c9:6a:7c:fc:34:f4:
61:5f:73:ca:0b:9f:9f:54:1c:0c:82:55:fd:9f:7e:
0d:3d:8c:8c:47:d4:de:c1:53:c0:83:0b:0a:51:60:
0e:02:cd:ce:f0:f4:05:9c:f5:eb:b7:f4:ee:cb:cc:
50:e0:02:fc:5f:0e:57:4c:eb:54:ef:4d:c3:7a:e4:
06:11:c8:10:98:73:61:2c:dc:6b:0e:0f:1a:23:f4:
8d:27:9e:17:77:00:eb:49:66:ee:85:6c:55:2c:9d:
0a:8c:8d:f2:9e:7e:01:17:cc:c5:c6:81:ce:d3:d9:
58:98:23:69:6b:33:32:86:97:7b:d4:5c:83:47:14:
52:e8:45:08:c9:50:83:0b:f3:59:2d:53:55:6a:67:
b6:ea:96:52:d9:5e:de:36:08:a4:bd:3f:f8:91:46:
7b:ee:36:6a:08:b1:63:46:c9:53:a0:96:50:b8:a6:
e7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:22:47:43:A7:CD:71:36:F9:70:22:D7:A3:17:D6:2B:9F:B0:AD:5F
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/JiJHQ6fNcTb5cCLXoxfWK5-wrV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
8a:ab:12:f4:19:81:a5:d8:90:a8:94:6e:82:b1:18:61:07:fd:
4d:fe:fe:9f:d0:4e:f0:77:5f:58:81:5b:2f:82:05:0c:65:60:
73:23:4d:0b:9f:bb:80:71:73:f3:81:a1:6e:f9:5d:09:17:3c:
aa:a2:cf:b2:18:67:8b:a9:f3:88:40:27:fc:a7:b2:16:cc:df:
e4:25:bc:a7:23:53:fa:3a:e0:b9:a3:af:b7:d1:c3:c9:27:4c:
77:00:d4:1f:f6:d7:61:d2:4d:68:44:b7:28:dd:94:14:b5:a7:
43:d0:49:dd:0b:7e:90:bf:9e:e4:43:b0:1d:b7:6f:50:5e:ac:
c9:d4:08:df:c3:15:b0:bd:00:7c:1a:14:d4:2c:a1:d9:b0:59:
fb:5b:fc:f0:a2:47:ed:8a:7c:54:ca:de:1c:89:cf:79:d2:91:
2f:b4:66:85:4a:1a:8a:f5:ed:79:97:42:2c:1b:b1:f0:e8:50:
27:8a:b5:41:09:6f:29:3c:db:f8:b5:7b:8c:75:94:6c:ec:83:
a8:88:50:26:2b:41:c9:cf:a6:26:f9:24:97:4f:6f:43:81:32:
57:1c:31:bd:76:fd:26:50:80:56:fd:af:54:6f:af:d5:cb:cd:
06:27:14:5f:ac:c3:fa:4a:93:2b:31:99:83:3c:7b:9c:b0:80:
cb:f7:75:54
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZBPYnXcgZSaZaLWIRVq02h2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQwNjI1MTIzMjUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjIyNDc0M2E3Y2Q3MTM2Zjk3MDIyZDdhMzE3ZDYyYjlmYjBhZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2S5mtM/+AYuxUWDSVJAP6EY1NrTx
ZhfExKoaTOzbiceLsWCNWkzao7fer6cHQYR4N2JW9kvonk4Xj++ppvrDq4JiVYjz
jiJld4ULmQ6Bu0NukPTJanz8NPRhX3PKC5+fVBwMglX9n34NPYyMR9TewVPAgwsK
UWAOAs3O8PQFnPXrt/Tuy8xQ4AL8Xw5XTOtU703DeuQGEcgQmHNhLNxrDg8aI/SN
J54XdwDrSWbuhWxVLJ0KjI3ynn4BF8zFxoHO09lYmCNpazMyhpd71FyDRxRS6EUI
yVCDC/NZLVNVame26pZS2V7eNgikvT/4kUZ77jZqCLFjRslToJZQuKbnkwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCYiR0OnzXE2+XAi16MX1iufsK1fMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvSmlKSFE2Zk5jVGI1Y0NMWG94ZldLNS13clY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUBURPDHjAN
BgkqhkiG9w0BAQsFAAOCAQEAiqsS9BmBpdiQqJRugrEYYQf9Tf7+n9BO8HdfWIFb
L4IFDGVgcyNNC5+7gHFz84GhbvldCRc8qqLPshhni6nziEAn/KeyFszf5CW8pyNT
+jrguaOvt9HDySdMdwDUH/bXYdJNaES3KN2UFLWnQ9BJ3Qt+kL+e5EOwHbdvUF6s
ydQI38MVsL0AfBoU1Cyh2bBZ+1v88KJH7Yp8VMreHInPedKRL7RmhUoaivXteZdC
LBux8OhQJ4q1QQlvKTzb+LV7jHWUbOyDqIhQJitByc+mJvkkl09vQ4EyVxwxvXb9
JlCAVv2vVG+v1cvNBicUX6zD+kqTKzGZgzx7nLCAy/d1VA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:13 2025 by rpki-client