Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/R2D43UUz8RDtkzJpAH3wxC4a9oY.roa
File: R2D43UUz8RDtkzJpAH3wxC4a9oY.roa (raw, json)
Hash identifier: FJaSXy3P/L1KMBEkAL4OrMyZ55Wu9tC8mGb6JNV+IYw=
Subject key identifier: 47:60:F8:DD:45:33:F1:10:ED:93:32:69:00:7D:F0:C4:2E:1A:F6:86
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF0EF037CEC06B19847CDB6677C6C8
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/R2D43UUz8RDtkzJpAH3wxC4a9oY.roa
Signing time: Tue 26 Nov 2024 13:35:23 +0000
ROA not before: Tue 26 Nov 2024 13:35:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397194
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:0e:f0:37:ce:c0:6b:19:84:7c:db:66:77:c6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4760f8dd4533f110ed933269007df0c42e1af686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:69:99:11:74:ab:95:73:9e:16:a7:ec:f8:99:
b2:83:87:6b:d9:31:bc:e5:3a:0a:68:db:23:27:2d:
e5:08:3f:f3:80:f7:ea:76:6a:ba:af:06:79:88:01:
20:f9:c3:46:a7:cc:81:fd:29:11:4d:cd:70:6d:10:
2a:ba:d6:4a:87:a8:d4:16:ce:1e:eb:06:72:5a:de:
0b:fe:8e:f9:6e:d8:b6:8f:7d:4f:77:e5:7f:f4:63:
bc:fa:32:7b:fa:d2:e6:07:1b:a5:4b:1a:46:94:cf:
36:f6:57:0e:9f:b0:69:60:7d:9f:0d:44:78:3d:4e:
1b:2f:47:3e:51:2f:a1:62:2f:1a:8e:8f:d8:8e:38:
e7:7a:07:c6:96:7f:b9:e6:14:32:f7:a0:ba:ab:66:
0f:cc:cf:2d:57:f5:71:85:f1:f8:fc:6e:25:2f:0e:
ef:52:ce:33:89:19:87:dd:0a:b1:f0:c1:57:35:75:
23:7b:e3:db:7f:50:87:5c:f0:94:17:fe:0a:24:6d:
59:07:24:05:fe:87:f5:12:c5:4c:df:53:06:a3:89:
72:99:0d:71:61:c1:f7:1d:63:85:c2:ec:e0:37:d6:
a6:f5:c5:20:10:b9:74:73:23:83:de:24:25:f4:5d:
41:5a:45:12:b4:a6:f2:1c:fe:2e:ae:94:f2:ce:97:
b5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:60:F8:DD:45:33:F1:10:ED:93:32:69:00:7D:F0:C4:2E:1A:F6:86
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/R2D43UUz8RDtkzJpAH3wxC4a9oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
6b:bb:6e:ee:63:ea:10:25:3a:89:4f:bb:2c:6b:e5:d7:21:9c:
6b:76:92:29:b1:f2:7e:a0:b2:a2:ee:ff:28:bd:5e:7d:db:75:
2c:3b:0c:ea:0d:25:95:48:40:4e:7b:a3:66:b3:0b:28:77:08:
b4:43:10:fc:4c:05:f5:13:18:04:46:a1:98:03:cb:5c:5d:8b:
15:25:80:95:26:9a:e4:5c:d2:62:81:25:81:c6:54:b2:f0:3f:
82:49:25:4e:9d:1b:68:5d:a1:83:c7:1f:19:d1:2e:0a:ea:82:
f2:2e:eb:1a:35:31:8a:4c:72:ca:51:fc:fb:37:b3:bd:1c:a3:
54:c1:1f:30:8f:d6:ac:1a:86:bf:6e:c9:42:3c:5b:41:d9:a9:
0c:31:18:51:a2:4f:da:f2:df:e1:20:54:80:db:6b:fa:ca:2c:
42:4d:78:26:91:10:76:38:9a:24:ad:2e:95:75:e5:8b:ca:08:
5a:40:e8:f8:8e:0e:07:3a:26:1c:4a:29:34:ca:b7:53:8a:34:
23:da:73:c8:9b:22:d9:c0:5f:41:46:85:b5:19:ab:23:a1:a0:
ba:71:00:95:ec:0e:e9:ba:b9:04:b7:9c:a4:e1:72:23:16:e2:
09:16:bf:c2:da:00:6d:1e:d2:71:7a:b2:34:a1:60:a2:02:35:
6d:74:ac:a7
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZNorw7wN87AaxmEfNtmd8bIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQxMTI2MTMzNTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzYwZjhkZDQ1MzNmMTEwZWQ5MzMyNjkwMDdkZjBjNDJlMWFmNjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmmZEXSrlXOeFqfs+Jmyg4dr2TG8
5ToKaNsjJy3lCD/zgPfqdmq6rwZ5iAEg+cNGp8yB/SkRTc1wbRAqutZKh6jUFs4e
6wZyWt4L/o75bti2j31Pd+V/9GO8+jJ7+tLmBxulSxpGlM829lcOn7BpYH2fDUR4
PU4bL0c+US+hYi8ajo/YjjjnegfGln+55hQy96C6q2YPzM8tV/VxhfH4/G4lLw7v
Us4ziRmH3Qqx8MFXNXUje+Pbf1CHXPCUF/4KJG1ZByQF/of1EsVM31MGo4lymQ1x
YcH3HWOFwuzgN9am9cUgELl0cyOD3iQl9F1BWkUStKbyHP4urpTyzpe1FwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEdg+N1FM/EQ7ZMyaQB98MQuGvaGMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvUjJENDNVVXo4UkR0a3pKcEFIM3d4QzRhOW9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAGu7bu5j6hAlOolPuyxr5dchnGt2kimx
8n6gsqLu/yi9Xn3bdSw7DOoNJZVIQE57o2azCyh3CLRDEPxMBfUTGARGoZgDy1xd
ixUlgJUmmuRc0mKBJYHGVLLwP4JJJU6dG2hdoYPHHxnRLgrqgvIu6xo1MYpMcspR
/Ps3s70co1TBHzCP1qwahr9uyUI8W0HZqQwxGFGiT9ry3+EgVIDba/rKLEJNeCaR
EHY4miStLpV15YvKCFpA6PiODgc6JhxKKTTKt1OKNCPac8ibItnAX0FGhbUZqyOh
oLpxAJXsDum6uQS3nKThciMW4gkWv8LaAG0e0nF6sjShYKICNW10rKc=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:12 2025 by rpki-client