Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Z7zApO6ltB4JIWqNLMa0SUMlOAg.roa
File: Z7zApO6ltB4JIWqNLMa0SUMlOAg.roa (raw, json)
Hash identifier: lCAluURowCmMbOwP9jlDXmDaPu1n+9L68VSGiSmbq3o=
Subject key identifier: 67:BC:C0:A4:EE:A5:B4:1E:09:21:6A:8D:2C:C6:B4:49:43:25:38:08
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F6237DF7ECC79A6532AD79F63CBDBF8
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Z7zApO6ltB4JIWqNLMa0SUMlOAg.roa
Signing time: Tue 25 Jun 2024 12:32:35 +0000
ROA not before: Tue 25 Jun 2024 12:32:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 27544
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:37:df:7e:cc:79:a6:53:2a:d7:9f:63:cb:db:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67bcc0a4eea5b41e09216a8d2cc6b44943253808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:1f:34:e6:f6:de:d9:67:a5:99:86:9b:09:
fc:aa:c8:4b:db:f0:72:d5:c5:97:06:54:db:63:6b:
99:0b:85:7e:5f:43:0b:ee:48:3f:29:c6:d9:95:ca:
c0:fb:c1:00:ee:5e:76:78:3a:e8:64:9d:d7:1d:c6:
e8:2a:b3:34:4a:2a:df:fc:41:6a:40:5a:e5:0d:30:
42:31:61:51:42:8a:a0:da:1c:6f:d7:a3:8b:0d:45:
43:27:36:cb:02:18:59:52:3b:73:e7:dd:f8:15:bd:
bd:09:b5:fd:b2:c8:61:21:65:82:e6:30:70:c2:ee:
bd:4c:87:2d:8f:17:f4:16:d4:d5:81:b7:a6:49:a6:
39:e0:e4:4a:f8:b1:1d:73:3b:c5:b3:fa:80:46:eb:
48:f5:d4:05:73:dd:6c:7d:7e:81:06:3d:d3:e9:25:
e6:6d:60:f8:13:03:a1:32:43:ef:34:e1:be:bf:33:
26:71:68:9f:32:14:18:6d:62:9e:1e:e5:c4:a6:f7:
59:aa:6d:0d:da:0c:41:4a:15:2c:22:b1:4a:a1:9b:
16:8a:2e:c1:39:80:54:6d:b7:d6:01:f9:95:2c:2e:
5a:00:ff:4b:d6:8f:1c:7d:92:d0:8b:05:bb:27:74:
aa:60:f0:66:3b:66:fd:2b:a9:32:84:3d:70:f9:16:
4f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BC:C0:A4:EE:A5:B4:1E:09:21:6A:8D:2C:C6:B4:49:43:25:38:08
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Z7zApO6ltB4JIWqNLMa0SUMlOAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
3d:60:55:8c:7d:d6:2e:70:c4:0b:fd:5b:98:2c:07:37:2b:07:
3a:c7:de:3f:c7:5b:f7:4d:32:fe:e5:02:04:54:76:99:43:5e:
f3:6b:bf:c1:1c:61:28:a2:a1:c7:30:3c:42:77:85:01:93:7c:
a8:25:ce:3b:e0:d6:99:77:f3:48:b2:00:fd:b3:15:9b:83:ba:
71:ae:65:6d:c4:62:10:7d:5f:05:73:5a:f0:ca:91:01:75:34:
28:53:94:2c:7b:04:61:90:41:be:ab:ac:fc:23:ea:99:e8:5c:
40:7c:e7:de:89:b8:92:7b:50:d8:a5:15:7a:d3:e6:92:78:ec:
36:73:e6:57:ff:70:05:f6:54:fd:5d:ba:a6:05:b8:67:1d:6e:
c1:da:66:de:e4:44:ad:4e:09:5f:59:7e:f4:22:b5:b7:85:20:
24:7d:96:5e:d5:f7:3a:9f:3e:19:5f:c9:39:f1:10:ca:7e:34:
4f:27:15:aa:06:79:8d:cd:8a:08:7c:89:34:5f:8a:f3:22:0b:
29:dd:48:ff:69:d9:de:cc:c6:2e:27:5d:9e:16:db:fd:d9:9a:
ac:c3:ea:29:33:08:2d:7f:0a:05:70:93:22:de:59:77:c0:bd:
ea:d6:39:ef:28:6f:fd:4e:86:65:e3:fb:27:87:d6:a7:71:66:
f5:f3:72:1d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZBPYjfffsx5plMq159jy9v4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQwNjI1MTIzMjM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2JjYzBhNGVlYTViNDFlMDkyMTZhOGQyY2M2YjQ0OTQzMjUzODA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsEfNOb23tlnpZmGmwn8qshL2/By
1cWXBlTbY2uZC4V+X0ML7kg/KcbZlcrA+8EA7l52eDroZJ3XHcboKrM0Sirf/EFq
QFrlDTBCMWFRQoqg2hxv16OLDUVDJzbLAhhZUjtz5934Fb29CbX9sshhIWWC5jBw
wu69TIctjxf0FtTVgbemSaY54ORK+LEdczvFs/qARutI9dQFc91sfX6BBj3T6SXm
bWD4EwOhMkPvNOG+vzMmcWifMhQYbWKeHuXEpvdZqm0N2gxBShUsIrFKoZsWii7B
OYBUbbfWAfmVLC5aAP9L1o8cfZLQiwW7J3SqYPBmO2b9K6kyhD1w+RZPyQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGe8wKTupbQeCSFqjSzGtElDJTgIMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvWjd6QXBPNmx0QjRKSVdxTkxNYTBTVU1sT0FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUBURPDHjAN
BgkqhkiG9w0BAQsFAAOCAQEAPWBVjH3WLnDEC/1bmCwHNysHOsfeP8db900y/uUC
BFR2mUNe82u/wRxhKKKhxzA8QneFAZN8qCXOO+DWmXfzSLIA/bMVm4O6ca5lbcRi
EH1fBXNa8MqRAXU0KFOULHsEYZBBvqus/CPqmehcQHzn3om4kntQ2KUVetPmknjs
NnPmV/9wBfZU/V26pgW4Zx1uwdpm3uRErU4JX1l+9CK1t4UgJH2WXtX3Op8+GV/J
OfEQyn40TycVqgZ5jc2KCHyJNF+K8yILKd1I/2nZ3szGLiddnhbb/dmarMPqKTMI
LX8KBXCTIt5Zd8C96tY57yhv/U6GZeP7J4fWp3Fm9fNyHQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:15 2025 by rpki-client