Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/MBbcGCXq52HyLyr9o8w_be3sJJE.roa
File: MBbcGCXq52HyLyr9o8w_be3sJJE.roa (raw, json)
Hash identifier: TI+15L4Fy10UgajRfaGrbp23RZlUaY+SE7zToc0dPKs=
Subject key identifier: 30:16:DC:18:25:EA:E7:61:F2:2F:2A:FD:A3:CC:3F:6D:ED:EC:24:91
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF10BEF69A06B72C9FE5BD44EBB58F
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/MBbcGCXq52HyLyr9o8w_be3sJJE.roa
Signing time: Tue 26 Nov 2024 13:35:23 +0000
ROA not before: Tue 26 Nov 2024 13:35:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397198
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:10:be:f6:9a:06:b7:2c:9f:e5:bd:44:eb:b5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3016dc1825eae761f22f2afda3cc3f6dedec2491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:61:47:1a:05:56:cf:80:b8:76:ab:92:73:47:
e1:fd:a9:71:f6:02:02:e6:a8:ce:20:c5:83:9c:bf:
88:0c:a7:38:85:d2:b8:09:30:80:87:14:f1:ff:a6:
98:67:a4:38:bc:3a:b9:dc:2b:d6:ea:61:ec:4a:a2:
2d:4d:61:c2:a1:95:db:b9:26:71:f5:f5:8b:f9:37:
0d:1a:23:bb:4b:2b:97:27:9c:be:aa:de:ed:57:41:
09:e5:e2:ad:30:cd:0f:1c:d6:ef:2c:72:36:0a:db:
4e:c0:02:72:53:58:89:9c:0a:5d:f9:2e:cb:52:dd:
a6:3a:26:36:1d:c9:c4:60:57:a9:e8:70:68:8c:c8:
66:07:35:e0:22:da:4d:1a:83:fe:9b:e5:fa:3b:10:
4c:d6:ee:5d:89:a6:a2:7d:8c:9d:49:8f:a0:fa:40:
a6:d4:be:8e:a2:d3:78:bc:0d:b6:7b:01:0c:63:09:
ee:78:34:41:1f:aa:93:c5:20:5c:91:85:58:17:ae:
f2:05:75:65:5b:b7:ff:05:02:38:d5:6c:db:d6:6a:
28:03:58:88:28:0e:13:89:3a:36:84:18:8d:39:56:
7b:31:08:0e:4c:32:de:87:05:5c:91:cc:8e:49:d7:
c4:0d:69:6a:b4:32:22:c9:1e:b1:00:69:f4:f3:57:
85:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:16:DC:18:25:EA:E7:61:F2:2F:2A:FD:A3:CC:3F:6D:ED:EC:24:91
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/MBbcGCXq52HyLyr9o8w_be3sJJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
12:3d:dd:87:19:39:30:3e:fe:0c:76:6d:86:f0:db:e5:1e:22:
3c:a2:49:e0:63:b2:4f:00:6f:66:d1:e6:aa:db:8d:76:a3:e6:
1e:c1:a1:2c:4a:e5:15:b6:6b:b0:ae:10:e7:d3:ff:0b:f3:cb:
0e:b1:66:b1:ca:fd:bd:f0:5d:94:4f:69:40:49:c9:94:87:ce:
49:10:4d:7b:e1:d8:79:31:a9:47:0b:df:58:8f:40:ad:40:b5:
c0:75:ea:68:58:8d:56:a1:87:a6:fb:9a:5c:39:aa:3e:de:97:
77:08:02:57:f0:87:89:f9:6c:3b:c6:54:17:43:76:8c:de:18:
f5:7a:5c:6c:ed:6d:02:3f:11:02:29:06:92:fe:f0:a5:cd:df:
cb:da:dc:1e:14:d2:2c:f1:15:c7:2d:d7:ec:a7:a8:fe:33:a2:
98:6a:6e:f3:04:6b:4d:c5:ad:2d:e5:6e:5d:4c:96:8c:fc:d7:
f2:9a:0b:3c:97:23:ff:05:a6:b6:6b:3d:b5:ec:d5:f0:2f:44:
0e:ec:0d:43:57:22:18:88:ce:28:9e:33:c6:de:b3:bd:42:c9:
f8:99:5e:a3:6a:e3:49:5b:43:58:25:39:82:29:73:71:16:e0:
43:4e:d2:64:41:1e:d4:83:15:38:4f:9b:a0:79:39:aa:a2:fa:
8b:de:8a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:42 2025 by rpki-client