Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/_enKQMKoFee5O2fg152djzTjnGY.roa
File: _enKQMKoFee5O2fg152djzTjnGY.roa (raw, json)
Hash identifier: 44a8ORprrvgYG+LH7wgGs0dAzvsuIrQWXemQZ9UM/TQ=
Subject key identifier: FD:E9:CA:40:C2:A8:15:E7:B9:3B:67:E0:D7:9D:9D:8F:34:E3:9C:66
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEEFA4A9CF01C21CAE97A01BC67159
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/_enKQMKoFee5O2fg152djzTjnGY.roa
Signing time: Tue 26 Nov 2024 13:35:14 +0000
ROA not before: Tue 26 Nov 2024 13:35:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396547
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:ef:a4:a9:cf:01:c2:1c:ae:97:a0:1b:c6:71:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fde9ca40c2a815e7b93b67e0d79d9d8f34e39c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:70:f8:df:8c:0b:40:04:b2:47:c4:de:f2:b8:
e8:45:28:6d:09:99:94:38:b8:70:a1:83:b8:1a:c5:
a0:6a:ce:90:60:94:b6:4c:05:23:31:3f:30:f5:c6:
50:84:6a:db:69:e2:77:12:d3:37:c1:2c:48:27:9e:
4f:60:00:f4:c9:56:1b:47:a0:15:68:d6:65:1d:51:
ff:0b:6b:23:e6:31:21:c2:d5:6e:98:1b:b1:fd:64:
2c:2a:1f:fc:a0:4a:d2:ac:c3:ad:07:18:36:35:1a:
28:db:76:f7:44:d5:15:51:aa:5f:f8:c6:68:e6:9e:
22:bb:57:8a:46:5b:25:fc:a1:26:8d:64:b5:94:94:
03:a3:d6:5e:14:9c:46:9b:30:63:94:57:e8:a6:bd:
29:d9:a3:09:12:ae:1a:f4:f8:8c:bd:ee:39:e1:18:
cd:2d:af:65:dc:79:0a:21:0e:7f:fa:a1:e2:b6:f8:
c8:d8:91:e3:50:6c:fc:4f:ed:ca:32:64:07:77:f9:
82:ba:ef:3e:f7:74:48:4e:b4:d3:84:08:46:a0:1c:
14:02:ba:7c:a4:30:41:6c:53:37:c4:b3:81:71:d5:
5a:3e:e2:7b:ba:de:b3:ac:e9:e0:23:8c:25:da:ba:
da:1c:fe:42:2c:80:d8:5c:08:74:77:ee:4a:98:6b:
f3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E9:CA:40:C2:A8:15:E7:B9:3B:67:E0:D7:9D:9D:8F:34:E3:9C:66
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/_enKQMKoFee5O2fg152djzTjnGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
1e:58:de:7d:18:94:44:c8:82:ee:be:78:ad:58:de:2a:5d:48:
92:88:49:b3:8d:fa:c5:8b:b6:1f:67:61:7f:4a:1c:ce:4b:5f:
e2:34:1d:6b:f5:d6:1a:8a:fe:48:1d:08:bd:91:af:03:bf:5a:
10:f2:d6:3d:83:ec:c6:7f:a9:c9:35:5a:fc:7a:e3:c7:1b:6b:
84:17:1c:dc:0f:85:4d:7e:95:b9:32:9a:16:42:c5:73:90:bc:
36:2e:f0:3e:16:54:28:61:e6:dc:ea:c6:42:12:f9:fe:ea:81:
44:73:9d:10:c0:12:c4:17:27:29:8d:14:6a:e7:97:b2:9e:cb:
f4:4a:bd:39:8d:fa:54:20:4f:5c:05:a0:6c:43:cf:36:af:f2:
52:06:dc:8f:27:0c:5c:ff:3b:81:82:d9:bc:f0:6f:71:4b:4c:
2e:12:80:1e:52:df:f7:60:0f:ab:0b:58:a7:44:47:28:22:47:
9d:57:dd:52:cb:ca:12:43:52:56:ce:aa:2b:a6:42:14:5b:fb:
75:a7:87:c6:47:f1:81:01:0d:37:14:cc:56:a1:7a:69:db:71:
ab:7c:3c:25:cb:b8:0b:45:b8:12:20:2f:5d:7e:2c:03:c7:b4:
bb:8c:7e:1c:5a:4b:1b:c7:16:bf:ce:60:65:db:65:23:6a:60:
69:55:3c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:06 2025 by rpki-client