Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/TqYob2e8soLRxbN4G5404h04w70.roa
File: TqYob2e8soLRxbN4G5404h04w70.roa (raw, json)
Hash identifier: F7vrxYP6uHxc1tsrN9PkH7gKporo1dWM78flHPrmVoc=
Subject key identifier: 4E:A6:28:6F:67:BC:B2:82:D1:C5:B3:78:1B:9E:34:E2:1D:38:C3:BD
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F6253361C8DB0172D040EA0F25E1BA7
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/TqYob2e8soLRxbN4G5404h04w70.roa
Signing time: Tue 25 Jun 2024 12:32:42 +0000
ROA not before: Tue 25 Jun 2024 12:32:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396573
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:53:36:1c:8d:b0:17:2d:04:0e:a0:f2:5e:1b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ea6286f67bcb282d1c5b3781b9e34e21d38c3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:48:17:fc:f7:d2:3f:fa:1f:dd:02:d3:6d:
09:e1:ee:f5:df:a4:e3:df:77:ab:0c:ed:cd:de:98:
5d:ba:dd:a1:c5:67:db:d3:64:e6:0b:80:b7:80:e1:
f2:f6:46:fe:2c:64:f1:33:5f:93:7c:18:52:13:ca:
08:89:98:89:f9:24:18:ec:f2:5c:92:63:b9:bf:d9:
8f:17:37:36:17:0b:15:45:46:dc:9c:19:e1:05:54:
66:76:8d:63:75:a9:0c:4e:a0:56:82:48:c1:f6:2f:
e1:ff:c5:a5:9e:f0:d8:a7:5f:94:d2:67:e1:bd:65:
59:fb:1b:d4:e7:60:85:d8:a3:49:d9:de:cd:fd:40:
b5:3e:1b:75:25:68:a2:90:1c:80:80:46:ea:cc:ab:
b7:15:e4:25:92:94:eb:c1:f8:b1:84:5f:60:fa:45:
b7:b4:7b:d6:da:2d:2f:8d:69:31:e5:7c:5b:39:7d:
58:7a:0f:4d:ed:2b:78:e9:04:d9:7f:83:e0:37:4e:
a4:46:14:61:47:88:6a:bf:09:5d:53:0b:a5:02:e4:
7e:e0:e6:da:ea:02:00:8f:45:09:41:e1:57:c0:55:
34:30:fd:69:88:e7:0b:49:37:fe:bf:82:c4:bc:c1:
0c:1a:a9:90:c9:19:5b:a2:d3:9b:b1:bf:82:c4:e5:
71:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A6:28:6F:67:BC:B2:82:D1:C5:B3:78:1B:9E:34:E2:1D:38:C3:BD
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/TqYob2e8soLRxbN4G5404h04w70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
7a:f5:a0:7d:3f:8d:3a:a2:60:05:1f:1d:47:b8:55:fc:5b:fa:
db:0c:6b:3c:bb:af:6a:5f:e7:2d:62:79:13:43:85:5c:f5:29:
f1:88:f6:6b:9a:f2:3b:9a:3c:60:07:e7:57:c8:c3:4e:2f:17:
4e:05:8d:36:a2:d5:ac:8d:95:b2:76:1b:19:08:16:2e:22:97:
6f:f4:f5:de:89:17:35:c7:89:56:4a:63:9e:b0:71:87:f9:dc:
81:16:03:a8:37:d5:19:d7:4d:f9:28:a6:29:4f:5f:28:c1:05:
99:a2:e9:8b:6a:4e:2c:49:6d:50:84:13:87:f7:b7:fa:9f:02:
24:1b:b5:8e:80:36:71:3c:ad:d9:2d:9c:84:0f:97:7a:ca:fb:
0c:ba:d9:11:2c:f3:45:80:bf:23:3e:4e:42:f9:b8:99:48:59:
1c:e5:d0:05:ec:77:cf:73:95:2d:44:36:bc:23:35:7e:85:5b:
3a:39:0a:25:c6:f3:44:73:07:c5:ff:de:e3:b7:8e:4e:4e:3f:
c5:9f:4d:96:90:f1:d8:91:63:30:87:e4:d5:66:ae:46:a9:11:
41:bf:ef:47:1d:2b:b0:e4:c0:d3:b5:06:0c:54:b2:5d:e1:aa:
a1:86:ff:a3:6c:d9:35:bd:ae:5b:15:73:df:31:92:d5:21:b5:
80:63:ab:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:16 2025 by rpki-client