Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WWfxAUwdR6hvUPf9i258PPGj7rI.roa
File: WWfxAUwdR6hvUPf9i258PPGj7rI.roa (raw, json)
Hash identifier: DqQv25aMuioZOe9gPmf0TbZeJrzup6Trte5o5H7Yot0=
Subject key identifier: 59:67:F1:01:4C:1D:47:A8:6F:50:F7:FD:8B:6E:7C:3C:F1:A3:EE:B2
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEE11E59AA1EC857133F41559A951C
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WWfxAUwdR6hvUPf9i258PPGj7rI.roa
Signing time: Tue 26 Nov 2024 13:35:11 +0000
ROA not before: Tue 26 Nov 2024 13:35:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 27544
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:e1:1e:59:aa:1e:c8:57:13:3f:41:55:9a:95:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5967f1014c1d47a86f50f7fd8b6e7c3cf1a3eeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ca:75:ba:fc:f6:d8:0a:63:f4:22:69:c2:24:
78:5e:e0:34:78:b7:bb:3a:77:15:d1:99:90:f3:6d:
92:99:fc:46:2f:83:30:ea:44:44:79:6d:81:bb:fb:
b0:0e:eb:7f:a9:62:d1:c8:13:3e:e2:42:07:70:0d:
f4:5f:d9:8b:9d:fa:f1:c6:0c:b4:e0:bc:85:02:b6:
e7:53:a1:c9:a6:93:06:75:25:8b:98:0e:29:de:be:
e5:ea:2e:2c:b6:ee:3f:a9:a5:28:4d:59:3c:73:34:
c9:63:52:ab:08:7a:74:ee:ad:c8:61:7e:fd:61:d0:
2d:14:31:5a:56:5d:0a:7b:31:78:82:92:92:25:02:
e3:8b:30:54:3d:39:69:8c:42:0c:ed:3b:71:8b:f8:
40:1f:da:aa:87:dc:89:53:78:bf:88:8b:5d:60:3f:
e8:55:8f:f2:5c:03:de:f1:93:e1:65:e1:94:b0:ff:
49:14:fa:b2:05:16:ee:91:3e:c3:f1:7b:18:7c:80:
82:c3:12:79:9b:df:38:8e:88:98:38:c0:52:48:30:
ba:a0:3f:1e:0b:00:9d:1f:7e:d2:21:e7:50:d5:00:
34:8e:19:74:ca:6a:2e:90:ef:00:44:72:14:c6:82:
2a:82:df:cf:e5:c1:44:88:9b:d7:63:ad:e7:b4:c7:
61:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:67:F1:01:4C:1D:47:A8:6F:50:F7:FD:8B:6E:7C:3C:F1:A3:EE:B2
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WWfxAUwdR6hvUPf9i258PPGj7rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
33:83:f9:07:b5:1a:be:a8:72:cb:b6:bc:aa:80:3e:61:02:83:
a1:a4:cf:35:e0:6c:3b:02:d7:c2:f6:d7:3a:73:6b:88:0b:d2:
31:8d:0f:7e:a9:a7:2a:11:80:96:1d:29:e5:25:55:aa:08:81:
0e:0e:94:cf:f9:af:69:7d:57:fd:07:8f:bf:01:b7:cf:0d:a4:
e5:ff:c8:74:34:93:1c:95:52:ce:a4:d0:6a:f0:bc:da:21:11:
b5:24:3a:59:de:87:cf:87:41:c8:e8:5c:79:77:be:cb:d7:98:
66:83:ac:37:a0:50:36:d7:bc:4b:1e:07:a0:ee:3c:20:d6:bf:
25:3b:1b:b6:00:90:60:f3:72:0d:09:2a:d6:82:06:42:30:bf:
bb:ea:af:7c:f9:66:31:3a:4f:b9:72:f9:34:34:f3:d0:bd:b1:
95:b8:94:99:d2:b9:83:d7:b6:18:31:67:80:59:bd:b3:34:ac:
69:dc:c4:f6:17:11:b0:31:4e:19:ae:6d:40:14:c7:46:98:20:
ed:8f:17:45:72:46:92:9d:a6:9b:38:0b:25:e1:a6:30:40:fc:
92:3b:e8:9b:fd:8a:c9:55:fd:06:a8:54:5e:e0:ad:5a:be:dc:
61:d6:ab:e8:40:da:5c:72:33:55:65:c4:15:4d:55:96:89:f6:
4d:af:98:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:54 2025 by rpki-client