Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/a6ZsJ-HvEyNYYlhcogxEjmFNMBQ.roa
File: a6ZsJ-HvEyNYYlhcogxEjmFNMBQ.roa (raw, json)
Hash identifier: Xk7FSAJWnmu7xA4YBesLmX+MbhPAj7WT02Vr+fg7WDc=
Subject key identifier: 6B:A6:6C:27:E1:EF:13:23:58:62:58:5C:A2:0C:44:8E:61:4D:30:14
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEF842AB1FC6C857AE751E6952E389
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/a6ZsJ-HvEyNYYlhcogxEjmFNMBQ.roa
Signing time: Tue 26 Nov 2024 13:35:17 +0000
ROA not before: Tue 26 Nov 2024 13:35:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396572
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:f8:42:ab:1f:c6:c8:57:ae:75:1e:69:52:e3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ba66c27e1ef13235862585ca20c448e614d3014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:eb:75:00:64:57:65:35:b4:ff:d9:89:0c:d2:
4e:8b:a7:3a:04:a3:66:85:de:87:5a:8f:4f:5e:72:
2d:70:82:19:af:b3:65:da:dc:e5:b1:a9:19:4d:43:
38:6f:53:16:82:3c:17:a2:d8:2c:58:ac:90:6c:03:
95:a9:b7:d5:4a:be:bd:e5:32:6e:8c:8a:99:13:85:
9f:ff:45:44:27:d3:e2:70:b9:17:79:b4:85:43:2b:
7a:df:21:4f:f5:3c:68:ee:41:b7:a9:32:f5:f3:a6:
bc:45:a8:84:69:42:c6:be:05:dc:aa:0a:18:b9:ab:
02:bf:a3:c6:bd:39:3f:da:79:ff:bf:3d:04:0e:81:
a4:7b:c0:90:ce:d1:c0:b3:eb:cf:b8:b6:34:2a:97:
a1:6a:aa:6e:cf:b2:42:b0:ae:e2:ab:7a:80:30:58:
ba:f9:5b:41:fe:fd:4e:74:2d:cc:d1:65:79:86:db:
71:96:74:61:3c:4d:81:95:51:4f:ed:ed:62:55:2e:
05:31:9e:11:91:e0:cf:9e:e7:15:28:1d:74:91:d8:
e3:e9:d9:e4:56:12:03:f1:44:f8:f6:2d:75:21:c1:
01:38:35:ff:0d:63:77:2f:19:1a:d8:0a:57:40:fe:
ba:1b:12:26:6e:11:bd:90:cb:8a:d8:f4:ee:96:91:
97:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A6:6C:27:E1:EF:13:23:58:62:58:5C:A2:0C:44:8E:61:4D:30:14
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/a6ZsJ-HvEyNYYlhcogxEjmFNMBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
28:74:c6:a7:67:ac:0f:f8:5f:dd:95:98:59:03:b2:cc:02:4d:
ea:a0:35:9f:76:66:3f:42:0a:e6:9d:27:23:b0:77:f4:7e:0f:
b8:fd:b8:43:a6:1b:01:fc:9d:8b:81:b3:32:89:51:e7:26:fc:
a0:6e:5c:c6:db:e9:4d:42:b5:54:74:e3:73:ef:fd:05:d6:0a:
c9:db:66:d1:fa:f1:15:c5:84:49:9e:80:b9:85:35:d4:51:d6:
71:b5:37:ac:22:ba:fc:ae:95:a3:6d:ba:d7:6c:7c:0e:dd:f7:
cd:c2:a5:e1:f7:2e:c7:69:b4:ce:9f:80:eb:48:99:f7:cf:ec:
00:64:04:8a:ac:44:15:c4:fa:e8:d3:9d:9d:0b:79:94:30:f2:
3a:e9:75:76:fb:e9:90:8c:68:33:e2:a6:1e:ed:e7:43:4e:21:
2e:9c:9a:27:a5:a2:77:a7:65:ef:56:b7:15:4c:47:0c:ef:cf:
e5:ea:a9:96:7a:16:d8:81:ce:e3:8c:f0:1e:13:85:63:59:e9:
7f:46:d5:d0:3e:01:ec:c6:dd:0b:e2:72:92:8d:00:88:01:be:
36:4c:0c:d2:0f:4f:c9:4c:2c:4c:a1:30:0b:f4:e0:45:14:1b:
74:5f:e6:74:f6:1f:5d:c9:99:2c:ec:3d:cb:f3:41:ac:29:cf:
3b:ae:08:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:53 2025 by rpki-client