Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/L9QjvscR3nfNs5I0Rc3pCE9DdVc.roa
File: L9QjvscR3nfNs5I0Rc3pCE9DdVc.roa (raw, json)
Hash identifier: db8w5HEQS8Z5Ks3Qz3QrlT4z+MuduLqciit8sahmMlk=
Subject key identifier: 2F:D4:23:BE:C7:11:DE:77:CD:B3:92:34:45:CD:E9:08:4F:43:75:57
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF06C0E47181AE191EE6F733992B66
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/L9QjvscR3nfNs5I0Rc3pCE9DdVc.roa
Signing time: Tue 26 Nov 2024 13:35:21 +0000
ROA not before: Tue 26 Nov 2024 13:35:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396603
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:06:c0:e4:71:81:ae:19:1e:e6:f7:33:99:2b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fd423bec711de77cdb3923445cde9084f437557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b5:08:72:bb:bf:cf:77:9d:20:b7:a2:a5:2b:
56:1b:0d:7d:4d:14:d4:d6:5d:ad:74:a1:cb:6e:73:
89:92:cc:c7:28:18:49:35:cd:0d:c3:fc:cc:e1:8f:
d0:e3:c1:ba:33:13:45:89:0e:d3:06:bd:5b:95:75:
b2:32:b6:69:e3:4f:1c:ae:32:db:31:28:e1:b9:d9:
80:10:e4:89:7e:73:60:db:4e:a6:eb:db:dd:50:4e:
d8:9a:11:85:20:01:31:c3:69:56:b4:d3:0a:6b:e1:
d4:1a:79:43:00:e3:24:ea:a4:c8:a1:da:e0:72:6b:
a7:3f:b0:85:7e:3e:09:5f:23:b8:b6:04:fa:ce:e1:
e0:e7:94:d6:49:5a:3b:6c:85:2d:5c:c0:e3:a2:21:
3c:00:09:c8:51:e2:a0:d8:44:6b:39:f7:ca:28:3b:
6c:10:d4:bd:98:42:aa:53:1f:31:77:95:5d:e9:ed:
d2:48:b4:87:3d:15:a0:9b:54:7e:b5:9f:73:bf:07:
69:ae:87:90:63:ab:75:16:70:48:c8:0d:f1:dd:e9:
7b:a4:ae:7a:ce:d1:c1:47:48:6d:67:e2:75:38:4a:
38:b2:8c:62:73:a6:ff:b0:eb:b9:a8:d7:7e:cc:30:
b0:1a:df:0b:77:ef:dc:a3:04:ab:79:4e:3a:af:9c:
29:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D4:23:BE:C7:11:DE:77:CD:B3:92:34:45:CD:E9:08:4F:43:75:57
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/L9QjvscR3nfNs5I0Rc3pCE9DdVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
9f:03:85:cc:b0:96:80:51:44:f0:09:89:49:79:2e:44:ff:c6:
50:2f:4c:f2:9e:52:ac:8b:c7:c2:60:2e:05:0d:bd:d8:88:e0:
69:0e:59:d9:d8:8e:29:ec:59:66:44:5f:38:52:8e:b9:34:4e:
be:7a:40:f3:59:5c:cf:57:a3:ce:cc:c5:37:34:5a:e9:5c:f4:
e2:c5:72:19:78:71:d8:17:ca:59:ec:13:97:8d:85:dc:8c:d6:
ea:14:2d:15:01:97:b2:d2:82:35:e5:8d:18:1b:38:aa:63:22:
40:b2:f3:c6:0d:12:ce:b3:31:ef:5f:e7:2e:dc:2e:86:a2:4c:
33:20:4f:82:5b:99:5d:1f:49:02:54:68:5b:2e:00:50:2b:73:
52:b8:bf:8e:74:ea:89:d5:c2:a5:ea:e4:ce:c9:35:c9:1b:34:
16:f8:be:9a:07:a0:99:fc:34:87:09:ea:0f:71:31:ec:ca:01:
30:03:61:68:b0:28:ae:a1:77:f4:49:5a:f8:f3:f5:fc:e2:2e:
9b:57:82:69:e8:a9:59:33:a1:91:d0:cc:23:03:74:51:29:fb:
0b:d9:c3:33:06:f4:ba:d9:7b:2f:6a:f6:26:58:03:ec:16:10:
a4:3b:be:aa:cb:8f:17:53:9b:45:00:a5:12:90:eb:fb:e2:e1:
9d:5d:2f:90
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZNorwbA5HGBrhke5vczmStmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQxMTI2MTMzNTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmQ0MjNiZWM3MTFkZTc3Y2RiMzkyMzQ0NWNkZTkwODRmNDM3NTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27UIcru/z3edILeipStWGw19TRTU
1l2tdKHLbnOJkszHKBhJNc0Nw/zM4Y/Q48G6MxNFiQ7TBr1blXWyMrZp408crjLb
MSjhudmAEOSJfnNg206m69vdUE7YmhGFIAExw2lWtNMKa+HUGnlDAOMk6qTIodrg
cmunP7CFfj4JXyO4tgT6zuHg55TWSVo7bIUtXMDjoiE8AAnIUeKg2ERrOffKKDts
ENS9mEKqUx8xd5Vd6e3SSLSHPRWgm1R+tZ9zvwdproeQY6t1FnBIyA3x3el7pK56
ztHBR0htZ+J1OEo4soxic6b/sOu5qNd+zDCwGt8Ld+/cowSreU46r5wpbQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFC/UI77HEd53zbOSNEXN6QhPQ3VXMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvTDlRanZzY1IzbmZOczVJMFJjM3BDRTlEZFZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAJ8DhcywloBRRPAJiUl5LkT/xlAvTPKe
UqyLx8JgLgUNvdiI4GkOWdnYjinsWWZEXzhSjrk0Tr56QPNZXM9Xo87MxTc0Wulc
9OLFchl4cdgXylnsE5eNhdyM1uoULRUBl7LSgjXljRgbOKpjIkCy88YNEs6zMe9f
5y7cLoaiTDMgT4JbmV0fSQJUaFsuAFArc1K4v4506onVwqXq5M7JNckbNBb4vpoH
oJn8NIcJ6g9xMezKATADYWiwKK6hd/RJWvjz9fziLptXgmnoqVkzoZHQzCMDdFEp
+wvZwzMG9LrZey9q9iZYA+wWEKQ7vqrLjxdTm0UApRKQ6/vi4Z1dL5A=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:11 2025 by rpki-client