Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/KEc-LamjVnTEPp4XB38EKhERQEc.roa
File: KEc-LamjVnTEPp4XB38EKhERQEc.roa (raw, json)
Hash identifier: f7hP0N1nMDcJdwG7N74d1fiPc8MJXCIjDFD8wmgEgyk=
Subject key identifier: 28:47:3E:2D:A9:A3:56:74:C4:3E:9E:17:07:7F:04:2A:11:11:40:47
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F6251D47E680D081987EFCBA6CEAF13
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/KEc-LamjVnTEPp4XB38EKhERQEc.roa
Signing time: Tue 25 Jun 2024 12:32:41 +0000
ROA not before: Tue 25 Jun 2024 12:32:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396570
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:51:d4:7e:68:0d:08:19:87:ef:cb:a6:ce:af:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28473e2da9a35674c43e9e17077f042a11114047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e4:52:b0:bc:b6:c5:3f:01:28:a1:ab:4e:68:
8c:11:2d:1e:5f:5e:65:1f:ab:ae:9c:0e:25:c5:c7:
01:e3:96:f3:14:c7:1d:0c:31:f8:b9:12:db:c5:02:
6e:f6:a2:59:ce:e0:cd:6a:3d:5c:88:2e:7e:fd:74:
20:27:dc:5f:df:16:a0:42:54:9a:e9:b5:60:f1:0c:
60:cc:18:40:f6:d9:e7:9b:c2:58:08:a1:35:9e:08:
df:a0:f8:3b:c9:6d:7b:32:a7:63:7f:f6:43:8e:04:
b9:31:a0:17:5c:c0:fd:ae:d8:5f:f6:98:0a:d5:60:
2b:72:ca:87:5b:00:1e:60:b6:4d:c2:ef:a6:1d:13:
fd:c5:a7:f2:d8:23:46:6e:a6:54:9d:44:56:23:96:
30:42:05:f5:72:25:23:23:a8:49:31:ab:e6:a4:b3:
a2:ae:2e:69:e2:d8:e8:2f:3b:2c:d6:c4:a9:e4:a8:
5d:93:17:00:d4:e5:cb:ea:18:d5:5a:89:c8:f0:0f:
37:f4:dd:14:db:8a:2d:6e:46:42:c0:76:d1:1e:33:
9c:6f:e7:78:f1:07:a3:06:8a:11:3a:ac:e1:5e:9d:
6b:65:33:d3:37:62:c0:bd:b5:f5:fe:d3:c3:cb:34:
c4:16:0e:56:a7:b5:ca:bb:91:ef:9d:f3:22:71:ee:
0b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:47:3E:2D:A9:A3:56:74:C4:3E:9E:17:07:7F:04:2A:11:11:40:47
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/KEc-LamjVnTEPp4XB38EKhERQEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
be:5f:95:70:0c:c5:9e:d7:0f:79:4c:8b:d6:0d:75:4c:8f:fb:
77:a9:40:d0:b0:33:74:27:6e:b0:2c:9d:f9:1b:45:05:94:2a:
a5:6e:c5:07:99:f4:61:47:1f:cf:13:6d:9e:1c:51:de:63:55:
2e:26:81:42:9c:ed:59:f5:d5:c4:9d:bf:24:43:35:ac:2c:db:
c3:d7:97:bf:5b:2e:e5:91:fe:3c:d9:78:9b:ec:ee:3b:7d:b6:
76:35:e0:7d:7a:6f:05:de:f7:4e:67:fb:f9:49:21:31:2a:93:
52:37:31:53:85:81:ed:df:b1:8f:d4:71:80:2b:7a:49:bf:4c:
88:4f:02:73:e6:44:40:ca:05:59:2e:1d:e5:64:10:aa:93:d4:
91:e2:21:da:5b:4d:3a:13:7d:18:79:10:bd:06:80:fa:e4:37:
f9:16:95:f5:42:bd:df:93:6a:74:5b:11:0e:2f:c9:5f:95:34:
06:96:15:14:db:93:3b:10:24:16:71:44:97:6f:c8:79:7a:23:
bc:e1:d0:58:b0:62:57:43:4b:93:15:c5:21:27:1e:11:97:e5:
4a:bb:54:9b:74:be:bb:c4:a6:a1:ef:6d:cc:68:10:31:87:66:
94:54:11:d6:ef:35:da:c5:a6:41:d0:9d:4b:60:73:e4:60:c1:
d2:c8:b8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:24 2025 by rpki-client