Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ZNuGdYD-oCG9we6rT-3Mhyr0IyE.roa
File: ZNuGdYD-oCG9we6rT-3Mhyr0IyE.roa (raw, json)
Hash identifier: 6aIcALX+I41Os09N5ewn7Mr+RTaQr0LgLKpzALFKTj0=
Subject key identifier: 64:DB:86:75:80:FE:A0:21:BD:C1:EE:AB:4F:ED:CC:87:2A:F4:23:21
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEFFDF615C783239FA8E69A5806587
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ZNuGdYD-oCG9we6rT-3Mhyr0IyE.roa
Signing time: Tue 26 Nov 2024 13:35:19 +0000
ROA not before: Tue 26 Nov 2024 13:35:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396587
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:ff:df:61:5c:78:32:39:fa:8e:69:a5:80:65:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64db867580fea021bdc1eeab4fedcc872af42321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:18:cd:fe:1c:f7:e5:6f:4a:66:b0:c7:f3:
ab:1e:5e:fa:36:65:b4:70:53:05:ab:55:60:3b:b0:
7e:2d:ae:1e:15:c7:f4:7f:02:80:49:12:55:17:f7:
69:c3:e9:cc:ac:3e:a8:a0:85:ff:07:a7:d8:6d:47:
a1:18:58:ce:fa:3f:df:5c:c3:f9:46:40:09:6e:c2:
23:fb:11:26:63:78:b9:fd:4a:0b:0e:32:bc:67:29:
6b:c3:f9:a0:5f:3b:0f:5f:b9:44:d0:14:47:06:40:
cd:77:4c:d5:12:cf:6f:5c:af:6c:12:70:91:eb:4e:
f5:35:16:05:11:22:79:7f:32:5d:3f:6d:e7:32:fd:
6d:ed:1a:54:b1:d1:ea:b5:31:a9:46:ca:b1:f7:7e:
04:48:33:53:01:b2:a8:4d:4a:b7:16:35:4d:7e:02:
29:3c:44:ed:0d:a3:91:db:63:19:d5:7b:2f:80:5c:
ae:a9:90:a9:56:6e:ab:66:2f:eb:97:b9:2e:f1:e7:
44:eb:d1:9b:8a:fe:a3:f6:de:59:8f:11:4a:2d:14:
ad:05:03:f8:27:db:93:61:8b:f1:9a:d4:b8:1e:ce:
36:df:52:47:b4:a9:e1:b7:69:02:e6:aa:c7:47:c9:
a8:85:2c:8f:95:50:79:25:1b:a5:4a:ed:01:fc:95:
9f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DB:86:75:80:FE:A0:21:BD:C1:EE:AB:4F:ED:CC:87:2A:F4:23:21
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ZNuGdYD-oCG9we6rT-3Mhyr0IyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
0c:0f:fb:ae:13:9a:03:26:27:0f:62:cd:13:5b:07:a0:77:80:
fe:7a:49:a1:ca:4e:63:27:f4:47:b1:41:9e:5a:b5:37:8f:fc:
e8:17:db:d7:14:0c:e9:4e:e3:94:c4:df:39:33:60:d8:7a:42:
b7:f1:38:51:c2:a7:56:b4:49:6a:bb:65:6e:00:40:48:c6:a3:
62:36:3c:15:25:0a:2a:d9:39:ee:f9:94:75:7e:c8:7e:be:65:
9b:46:a3:c7:07:f3:2b:d6:f6:0b:f1:8b:27:3a:aa:17:21:b7:
35:f5:01:39:84:36:9a:3c:47:fa:49:cb:ae:96:54:e7:46:a1:
d0:38:7e:08:a4:34:2e:e9:55:42:7b:94:0b:e1:d2:6a:30:bd:
7f:a1:a9:e6:68:b1:bf:48:8d:69:2d:8f:56:de:e8:b7:26:7a:
29:f4:0c:9a:75:a2:37:75:8b:da:21:76:64:52:b3:09:79:7d:
bc:b7:50:4e:d6:74:cb:b3:e7:36:38:94:f3:73:a1:b1:a1:f0:
6d:69:64:95:e1:cf:43:b0:74:5d:1c:f1:d8:bd:c8:df:17:3b:
70:68:49:63:d0:60:86:d0:1a:04:11:36:53:ca:9a:82:aa:5f:
ca:e3:49:40:84:f8:76:56:9b:76:c3:ee:74:0a:43:55:58:6e:
f4:95:18:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:30 2025 by rpki-client