Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WnVwRslyXaGsywzrL_i2HPDAm-8.roa
File: WnVwRslyXaGsywzrL_i2HPDAm-8.roa (raw, json)
Hash identifier: DyHVa2escsuZXP36/LK5BGXV5vPdU30yd0TqudIqI8I=
Subject key identifier: 5A:75:70:46:C9:72:5D:A1:AC:CB:0C:EB:2F:F8:B6:1C:F0:C0:9B:EF
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF0F610A6D11CC0730F00DD60F37A1
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WnVwRslyXaGsywzrL_i2HPDAm-8.roa
Signing time: Tue 26 Nov 2024 13:35:23 +0000
ROA not before: Tue 26 Nov 2024 13:35:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397195
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:0f:61:0a:6d:11:cc:07:30:f0:0d:d6:0f:37:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a757046c9725da1accb0ceb2ff8b61cf0c09bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:16:2d:a4:8d:4a:bd:89:ff:5f:ae:3f:4e:6f:
55:6d:df:96:a7:e4:c5:b4:e7:62:48:e4:8f:fe:6c:
04:55:8e:2f:ea:37:37:6f:cd:84:49:0f:35:69:8c:
f0:70:b4:3e:8d:c3:4e:a7:6a:0d:e2:d2:7d:c0:cf:
4e:8d:20:51:d8:f3:a6:38:fd:f0:22:47:5d:ff:52:
08:ae:b7:da:fd:18:12:68:92:6d:16:e9:d6:e5:58:
2a:47:a2:01:53:e6:ba:cf:85:23:92:df:04:5c:55:
2b:a6:fd:4d:49:9d:af:be:e7:2f:f0:2a:cf:2d:cf:
69:b8:74:28:e0:bc:0d:8f:6f:2e:1c:6f:9d:3c:be:
50:51:76:0b:dd:44:e6:8f:3b:f2:68:a1:09:5e:dd:
33:30:fa:02:d1:9f:65:7c:73:27:0d:b4:13:c3:a5:
d5:8e:31:43:26:aa:fb:c3:c2:c0:9c:6e:6e:4f:b2:
8b:18:f9:c9:d1:83:de:89:65:60:b6:11:eb:d9:47:
14:73:0a:15:9a:78:54:88:f4:48:ed:2e:92:15:45:
2f:a8:76:98:ce:ec:9f:35:3e:d1:41:c5:05:b8:f6:
54:ea:b6:b8:bb:28:8b:7b:2b:70:9d:99:22:23:27:
f9:d2:de:4e:49:67:c1:c8:b9:ec:ad:3c:72:da:e8:
38:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:75:70:46:C9:72:5D:A1:AC:CB:0C:EB:2F:F8:B6:1C:F0:C0:9B:EF
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WnVwRslyXaGsywzrL_i2HPDAm-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
5d:b3:e6:00:58:54:94:d2:1b:35:47:a9:b7:7d:36:4a:e4:2f:
71:ec:42:9b:8b:8b:9d:b0:7b:e9:bf:b2:b5:ad:67:32:a5:0b:
08:43:26:13:60:fb:3e:93:47:40:f6:18:1a:f7:66:f1:1a:aa:
4e:e0:13:4c:6d:1d:9e:bb:21:96:bb:76:55:f8:f0:3e:50:53:
65:f9:38:1d:7c:b2:e8:03:d0:0f:2f:ef:98:45:46:20:61:65:
d6:0f:11:0d:2f:c0:13:79:69:e8:ae:fb:cf:79:d2:99:8b:04:
4a:08:da:f4:56:fe:7d:ba:13:a0:78:4f:cb:59:81:44:fc:31:
44:2b:59:a1:f9:26:a2:4c:cf:8a:86:e0:25:a8:c2:0b:44:dd:
4d:3d:ab:08:58:46:e3:7a:3f:44:4c:59:ad:13:1b:4e:ad:a7:
c7:42:d4:3d:f7:32:d4:7d:53:3f:6c:b5:64:6c:c3:10:4c:f8:
e8:3b:fb:2e:b2:80:cf:8b:8f:0f:11:3b:74:7b:a1:1c:9e:04:
d6:90:98:a7:92:50:4c:3a:df:97:cb:2e:f7:e1:8a:81:5e:15:
37:be:7e:34:0d:19:14:0e:02:1a:12:dc:b9:48:d9:de:a0:f9:
ed:f1:5d:a0:39:98:3d:f5:05:93:49:6f:6b:b7:ec:e2:7c:33:
1d:0f:10:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:50 2025 by rpki-client