Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/XeTB37SY6m20YmKw-J_PsccHqiw.roa
File: XeTB37SY6m20YmKw-J_PsccHqiw.roa (raw, json)
Hash identifier: bhZW13n3aNkyFapC8IsGoJElHAWfpKh1oPqkfTXMW9s=
Subject key identifier: 5D:E4:C1:DF:B4:98:EA:6D:B4:62:62:B0:F8:9F:CF:B1:C7:07:AA:2C
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F625E3DC196506E1D2CE46A3D4E0194
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/XeTB37SY6m20YmKw-J_PsccHqiw.roa
Signing time: Tue 25 Jun 2024 12:32:45 +0000
ROA not before: Tue 25 Jun 2024 12:32:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396592
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:5e:3d:c1:96:50:6e:1d:2c:e4:6a:3d:4e:01:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5de4c1dfb498ea6db46262b0f89fcfb1c707aa2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:83:95:84:bb:74:37:08:ee:c2:00:f9:59:90:
c0:e7:55:55:96:af:f5:ef:b7:3b:d0:43:94:8c:b5:
38:fc:d0:83:cf:e8:3d:14:35:fd:15:1f:67:5f:71:
ca:f7:c4:b2:af:41:b9:cf:fc:fa:65:ae:d0:eb:34:
c6:30:c0:b4:e5:ca:29:67:54:e1:18:4b:24:01:70:
c3:e8:5f:29:3b:79:59:b4:49:6f:57:0b:af:48:91:
2d:5b:76:d4:d5:eb:30:1e:29:1e:f0:ea:76:77:b1:
f6:88:95:fa:0e:c5:56:b7:3a:26:b3:e9:d9:36:b1:
3a:af:bb:6b:c6:90:57:eb:23:1b:f9:2c:d5:8c:01:
89:76:a7:7b:af:e2:f1:25:56:70:24:2a:e7:c3:bd:
81:29:bf:de:a2:5a:3f:c3:7a:6a:2c:e0:f5:91:28:
38:ca:d1:85:3a:b2:43:f4:cf:b3:e9:5c:51:52:be:
63:1f:71:83:53:96:2c:2d:7c:30:21:ae:1a:74:de:
8e:da:f2:4a:d7:ce:14:81:4e:e7:37:40:92:8c:2e:
2b:4e:f3:98:4f:2d:d1:b1:4c:98:94:3b:85:54:84:
fc:86:ee:22:ce:08:67:14:2f:a5:02:ec:f5:5e:ed:
1b:cc:4a:80:3e:2d:77:21:7a:7f:6d:8c:f0:78:1a:
ac:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E4:C1:DF:B4:98:EA:6D:B4:62:62:B0:F8:9F:CF:B1:C7:07:AA:2C
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/XeTB37SY6m20YmKw-J_PsccHqiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
9f:d7:99:d9:cf:ad:c5:b9:4c:48:bc:4e:6e:e2:72:d8:25:19:
f0:af:8d:d6:af:97:5d:f7:fc:fc:2e:93:69:17:b9:00:6c:87:
4d:9f:49:6c:92:17:b7:18:bb:44:fc:56:37:b5:61:62:fa:5b:
13:9d:1f:39:69:51:9d:92:62:6b:7f:32:06:12:a9:c2:a0:18:
15:3f:ad:6d:ba:6c:cf:31:c6:bd:cb:ae:22:0b:72:74:73:f2:
92:3c:a8:7a:3f:b0:44:13:05:79:c2:47:ab:af:f3:b0:05:5f:
36:12:17:8b:d2:76:12:ac:fa:33:ab:f4:d6:4b:b2:e0:65:e6:
a8:4b:cd:bf:08:b8:5d:84:b6:1b:43:28:aa:7d:7d:fa:e1:3a:
7a:49:00:86:f7:dc:09:62:1d:79:22:0e:f6:bb:3e:7d:4c:7a:
05:c8:9a:6f:ee:67:f4:99:24:28:b1:08:4d:0c:a7:ad:37:2e:
8f:f4:a0:bc:0e:31:57:e6:a9:aa:4f:93:c9:3b:4c:ff:52:1c:
e8:0c:da:cf:51:fa:f3:d8:62:1c:b9:83:83:b3:79:3a:3d:77:
25:4a:0c:be:0e:33:ff:f7:c0:b1:83:c7:57:7b:fa:91:69:0f:
1a:2c:67:6b:aa:ac:fb:09:7b:d2:17:4e:bd:4b:3f:0c:ee:56:
4b:aa:ef:81
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZBPYl49wZZQbh0s5Go9TgGUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQwNjI1MTIzMjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGU0YzFkZmI0OThlYTZkYjQ2MjYyYjBmODlmY2ZiMWM3MDdhYTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4OVhLt0NwjuwgD5WZDA51VVlq/1
77c70EOUjLU4/NCDz+g9FDX9FR9nX3HK98Syr0G5z/z6Za7Q6zTGMMC05copZ1Th
GEskAXDD6F8pO3lZtElvVwuvSJEtW3bU1eswHike8Op2d7H2iJX6DsVWtzoms+nZ
NrE6r7trxpBX6yMb+SzVjAGJdqd7r+LxJVZwJCrnw72BKb/eolo/w3pqLOD1kSg4
ytGFOrJD9M+z6VxRUr5jH3GDU5YsLXwwIa4adN6O2vJK184UgU7nN0CSjC4rTvOY
Ty3RsUyYlDuFVIT8hu4izghnFC+lAuz1Xu0bzEqAPi13IXp/bYzweBqsnQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFF3kwd+0mOpttGJisPifz7HHB6osMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvWGVUQjM3U1k2bTIwWW1Ldy1KX1BzY2NIcWl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUBURPDHjAN
BgkqhkiG9w0BAQsFAAOCAQEAn9eZ2c+txblMSLxObuJy2CUZ8K+N1q+XXff8/C6T
aRe5AGyHTZ9JbJIXtxi7RPxWN7VhYvpbE50fOWlRnZJia38yBhKpwqAYFT+tbbps
zzHGvcuuIgtydHPykjyoej+wRBMFecJHq6/zsAVfNhIXi9J2Eqz6M6v01kuy4GXm
qEvNvwi4XYS2G0Moqn19+uE6ekkAhvfcCWIdeSIO9rs+fUx6Bciab+5n9JkkKLEI
TQynrTcuj/SgvA4xV+apqk+TyTtM/1Ic6Azaz1H689hiHLmDg7N5Oj13JUoMvg4z
//fAsYPHV3v6kWkPGixna6qs+wl70hdOvUs/DO5WS6rvgQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:32 2025 by rpki-client