Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/cIkGRwMOKZsRdVX_Qgfc93PhjfQ.roa
File: cIkGRwMOKZsRdVX_Qgfc93PhjfQ.roa (raw, json)
Hash identifier: D6a6pCCZrmx7+7aZGa1J9pqP6tAZslA9lOWXshBjLE0=
Subject key identifier: 70:89:06:47:03:0E:29:9B:11:75:55:FF:42:07:DC:F7:73:E1:8D:F4
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEDF6DA0DE2861E8BD34DB301E6CD1
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/cIkGRwMOKZsRdVX_Qgfc93PhjfQ.roa
Signing time: Tue 26 Nov 2024 13:35:11 +0000
ROA not before: Tue 26 Nov 2024 13:35:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22547
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:df:6d:a0:de:28:61:e8:bd:34:db:30:1e:6c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70890647030e299b117555ff4207dcf773e18df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c3:63:21:ae:7f:88:65:f6:cd:c9:92:1f:21:
8f:c3:d5:00:f9:55:cd:6d:14:7b:58:88:55:d6:0f:
b4:ca:bd:4b:d0:c8:75:88:b1:3c:1d:1a:fa:d7:cc:
8e:97:d5:d1:79:10:8a:c2:70:60:5a:af:d8:7b:e6:
97:6c:44:db:b1:66:78:21:17:ca:b8:90:09:30:b4:
7d:28:a9:b7:78:dd:df:cb:d4:42:e6:ca:ce:28:47:
e6:be:f3:54:70:8c:8b:1d:1b:3f:23:f0:40:35:3b:
4b:b9:5d:b3:ff:00:77:39:7b:28:37:0d:c8:b6:3b:
25:82:d6:80:89:d9:6a:94:0d:47:e7:a8:97:97:82:
d3:c4:be:c0:17:98:4b:07:b5:e6:56:cf:84:6a:a8:
e0:23:35:02:41:76:26:ae:e4:da:7b:f3:95:1c:47:
e5:50:44:f9:e9:6e:21:c3:d3:0b:ea:14:20:37:fb:
88:ac:44:9d:f2:3c:5f:96:b1:d2:43:d0:3f:f6:c7:
dc:25:71:c3:e4:85:3d:59:70:70:f2:be:4e:2b:d5:
4e:1e:71:1c:75:69:fa:1b:f1:cc:7e:6a:d5:18:96:
6b:e2:4f:82:75:8f:d1:b5:a2:81:ff:62:75:8e:50:
b2:39:5f:7d:00:90:27:7e:1d:38:51:1f:39:a6:45:
09:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:89:06:47:03:0E:29:9B:11:75:55:FF:42:07:DC:F7:73:E1:8D:F4
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/cIkGRwMOKZsRdVX_Qgfc93PhjfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
81:22:e8:6d:5a:17:cd:f4:16:d4:60:46:09:b1:b8:dc:a3:82:
c9:fb:20:dc:29:ab:3e:fe:03:41:1e:93:99:d0:2e:23:e6:55:
32:91:14:ab:ec:ca:09:dc:e8:c6:73:79:1c:88:af:c1:83:09:
c0:9c:5f:4d:54:cd:5f:2d:e0:e5:02:fc:c4:87:b4:50:b1:fa:
44:dd:83:9b:39:57:77:eb:25:ec:54:6f:5c:58:49:d7:24:ea:
64:79:bb:3a:16:4e:03:6f:83:b0:49:a9:eb:18:62:b8:3b:39:
fa:4b:d5:c2:dd:de:bb:dd:24:07:63:d9:f2:59:0d:d4:74:80:
77:92:27:e0:87:89:94:4e:8c:33:ec:c9:73:ae:d4:77:14:ab:
0c:02:5a:4b:15:34:6a:8c:da:71:ef:02:cf:0c:5b:4e:ed:6d:
b7:af:d8:68:4a:3c:97:50:a0:43:f2:27:e4:79:d4:0a:74:5a:
21:6e:f9:08:99:fb:91:97:b2:c8:f8:6a:19:bf:ec:f7:34:5c:
d4:4b:cb:f6:35:19:52:19:2c:1f:b2:93:57:c9:b3:06:5f:03:
f3:88:c6:7e:73:a7:80:23:43:0e:da:d7:16:12:52:62:c7:6b:
48:ac:f2:da:8b:ba:33:29:ec:df:1a:16:a9:88:d7:ee:4e:94:
eb:21:a4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:11 2025 by rpki-client