Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/N5eeRlMOTz_WbFZwPWKS6NuEB-I.roa
File: N5eeRlMOTz_WbFZwPWKS6NuEB-I.roa (raw, json)
Hash identifier: VERrLtOddu5ofVwZZEZHQoltoPqXP7i+uz8+B+MkEsw=
Subject key identifier: 37:97:9E:46:53:0E:4F:3F:D6:6C:56:70:3D:62:92:E8:DB:84:07:E2
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F625E1775790A5A4F44605AB595D7C0
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/N5eeRlMOTz_WbFZwPWKS6NuEB-I.roa
Signing time: Tue 25 Jun 2024 12:32:44 +0000
ROA not before: Tue 25 Jun 2024 12:32:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396591
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:5e:17:75:79:0a:5a:4f:44:60:5a:b5:95:d7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37979e46530e4f3fd66c56703d6292e8db8407e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2a:1d:7a:40:69:ce:37:33:54:1a:fc:82:da:
2c:84:8d:e3:2a:4f:ad:00:9a:77:5d:17:83:61:de:
88:c9:89:c8:b9:08:97:a3:9b:5e:e5:47:58:5b:51:
72:d2:1a:d3:98:30:c1:8e:7d:65:b9:e6:0c:9a:af:
2b:44:91:ab:38:9b:76:5a:d1:8e:6e:cc:9a:d6:7f:
48:95:3f:fe:f1:81:b9:e7:a4:09:1b:03:c3:ac:40:
1d:47:cc:e6:af:1f:a6:83:93:03:d0:45:f8:5e:92:
4d:27:f4:f8:de:c3:60:0b:39:c6:7d:dc:85:11:3b:
4b:8f:56:f4:d9:f3:af:35:29:8a:54:6c:9f:37:49:
53:d0:3c:9c:87:2e:33:76:c7:75:9f:a8:d3:2f:c6:
67:22:4d:73:50:6b:ce:c7:6c:b2:86:fa:fc:20:75:
0f:55:d6:1d:4a:ff:a5:ad:c8:e2:9b:3e:11:36:cb:
de:ec:ff:93:ca:d5:1c:17:6a:1e:b4:45:49:30:18:
e5:97:56:a6:ca:02:a7:3a:82:7b:26:54:fb:1d:39:
49:25:c1:f5:90:77:17:e7:08:9e:4e:c5:3a:d7:c7:
32:33:d7:0c:45:7b:66:a9:9c:f5:c5:2c:24:6e:ac:
f3:79:15:13:0e:40:75:5a:f8:79:2d:7b:9a:bf:44:
3a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:97:9E:46:53:0E:4F:3F:D6:6C:56:70:3D:62:92:E8:DB:84:07:E2
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/N5eeRlMOTz_WbFZwPWKS6NuEB-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
45:f6:d9:a1:64:78:77:c6:07:75:c3:60:18:88:2c:94:12:11:
6d:bc:ae:af:55:30:cf:6e:89:cc:e3:8f:72:50:21:70:e2:e9:
42:c2:bf:c9:40:50:da:88:63:3d:b2:b9:34:15:11:cc:47:4c:
3e:eb:2e:e4:cd:a8:82:f0:13:69:f5:8f:ad:c7:84:14:1e:14:
c7:95:46:c4:cc:0c:cc:dd:21:33:25:49:ac:41:52:1b:cc:d9:
21:6e:cd:93:4f:c1:31:e0:2b:c7:96:dd:43:fc:b0:42:44:93:
88:db:52:0f:c4:c5:e2:80:ac:34:35:b1:ac:c2:84:43:a7:a4:
ac:a1:38:6f:2b:b9:83:e5:a8:31:69:cb:74:95:57:18:82:b8:
b9:c6:a3:99:0a:b2:7b:98:31:18:29:d9:a5:9c:be:b5:05:97:
92:ed:40:a9:99:c9:e1:f1:dd:6b:a4:ad:9a:5c:48:71:96:e1:
9f:81:3a:91:61:18:4f:3b:2a:06:28:1e:6c:14:d7:d8:1d:e8:
c3:41:9d:45:27:db:dd:0f:44:4c:c8:ad:1d:34:a7:c2:e4:bd:
ed:87:fb:34:3c:d1:d1:2f:99:0a:a9:1c:cb:1a:c3:3d:f8:28:
2d:02:e4:40:e5:61:b2:08:4a:d4:bc:e6:57:b0:29:89:cc:ef:
d7:d0:7a:82
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZBPYl4XdXkKWk9EYFq1ldfAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQwNjI1MTIzMjQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzk3OWU0NjUzMGU0ZjNmZDY2YzU2NzAzZDYyOTJlOGRiODQwN2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCodekBpzjczVBr8gtoshI3jKk+t
AJp3XReDYd6IyYnIuQiXo5te5UdYW1Fy0hrTmDDBjn1lueYMmq8rRJGrOJt2WtGO
bsya1n9IlT/+8YG556QJGwPDrEAdR8zmrx+mg5MD0EX4XpJNJ/T43sNgCznGfdyF
ETtLj1b02fOvNSmKVGyfN0lT0Dychy4zdsd1n6jTL8ZnIk1zUGvOx2yyhvr8IHUP
VdYdSv+lrcjimz4RNsve7P+TytUcF2oetEVJMBjll1amygKnOoJ7JlT7HTlJJcH1
kHcX5wieTsU618cyM9cMRXtmqZz1xSwkbqzzeRUTDkB1Wvh5LXuav0Q6rQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFDeXnkZTDk8/1mxWcD1ikujbhAfiMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvTjVlZVJsTU9Uel9XYkZad1BXS1M2TnVFQi1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUBURPDHjAN
BgkqhkiG9w0BAQsFAAOCAQEARfbZoWR4d8YHdcNgGIgslBIRbbyur1Uwz26JzOOP
clAhcOLpQsK/yUBQ2ohjPbK5NBURzEdMPusu5M2ogvATafWPrceEFB4Ux5VGxMwM
zN0hMyVJrEFSG8zZIW7Nk0/BMeArx5bdQ/ywQkSTiNtSD8TF4oCsNDWxrMKEQ6ek
rKE4byu5g+WoMWnLdJVXGIK4ucajmQqye5gxGCnZpZy+tQWXku1AqZnJ4fHda6St
mlxIcZbhn4E6kWEYTzsqBigebBTX2B3ow0GdRSfb3Q9ETMitHTSnwuS97Yf7NDzR
0S+ZCqkcyxrDPfgoLQLkQOVhsghK1LzmV7Apiczv19B6gg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:27 2025 by rpki-client