Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/cg5BwSWomXiuuVFblPnwzXwez5g.roa
File: cg5BwSWomXiuuVFblPnwzXwez5g.roa (raw, json)
Hash identifier: 1IJihUEL9g1kZ9mqwgrOYSZq4JJQ2FRQhE5LtIUnwTg=
Subject key identifier: 72:0E:41:C1:25:A8:99:78:AE:B9:51:5B:94:F9:F0:CD:7C:1E:CF:98
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF10587E5D43DB4F6FC5A843961142
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/cg5BwSWomXiuuVFblPnwzXwez5g.roa
Signing time: Tue 26 Nov 2024 13:35:23 +0000
ROA not before: Tue 26 Nov 2024 13:35:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397197
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:10:58:7e:5d:43:db:4f:6f:c5:a8:43:96:11:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=720e41c125a89978aeb9515b94f9f0cd7c1ecf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d0:86:b0:f8:5b:94:98:67:22:dc:2e:c1:1d:
b4:66:22:89:66:2c:7b:16:b4:80:f2:8b:c1:fb:27:
11:2d:d2:0f:5d:1d:f0:38:44:5b:17:b8:f1:26:30:
e0:00:3b:51:74:29:98:f8:5f:e5:70:44:b6:56:74:
b6:e4:53:50:ad:a1:cb:52:6d:ea:b4:1d:f2:99:66:
06:7f:bc:a9:a0:7a:dd:58:ab:9a:80:c4:6b:b0:fd:
c7:96:95:7d:d8:4f:d1:00:90:96:21:bd:71:60:87:
89:ff:22:2d:08:83:65:77:29:6a:3e:a9:00:1e:d5:
40:82:45:92:51:47:23:50:53:48:9d:7c:00:3b:fe:
f8:d6:e0:56:18:65:17:63:6d:7e:0f:77:41:88:56:
16:88:b4:31:7d:a9:c6:2a:4a:78:dc:96:27:64:3c:
a0:ed:03:55:a2:c3:c6:7c:51:74:88:d5:a6:4d:1d:
f2:b0:6b:e6:28:da:b2:70:d6:c6:ba:32:6d:50:23:
be:d9:37:6b:7e:a6:52:33:5c:98:70:37:ec:e6:0d:
01:b1:e1:ba:6f:1c:bf:a2:1a:f3:27:d2:89:dc:76:
5c:ac:9a:2c:eb:c4:80:88:3c:86:64:a8:24:83:32:
60:79:89:64:8d:0e:1b:5a:b6:6a:a1:d1:45:00:f6:
78:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0E:41:C1:25:A8:99:78:AE:B9:51:5B:94:F9:F0:CD:7C:1E:CF:98
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/cg5BwSWomXiuuVFblPnwzXwez5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
7d:0d:f3:8b:75:eb:18:b9:46:31:d5:33:1f:8a:8c:0e:40:61:
1a:8f:21:a4:8a:34:8a:cd:f5:d8:95:23:72:d7:b6:69:6f:93:
24:f3:a8:1b:63:87:9a:09:a3:96:b4:5b:f6:67:6a:99:43:75:
46:5c:8b:a5:3d:cf:f8:c7:ae:d4:35:7e:7d:f5:48:ab:d1:e4:
b2:88:06:01:ea:ea:ee:b4:28:59:9d:a7:78:39:9e:d5:cb:02:
2e:b8:49:4f:85:48:e2:36:a7:98:e7:b4:b5:81:85:0a:42:19:
db:21:ce:cb:c9:a7:ee:77:a2:27:6e:f7:cb:5d:5b:0d:01:09:
55:2c:f9:dd:e9:2a:2a:73:dc:22:e1:c5:59:a1:24:99:92:aa:
00:e3:2c:cb:83:07:1f:6c:2d:89:b9:0b:af:ae:90:fd:e1:49:
c8:a9:e0:12:27:07:f0:ec:89:ca:74:20:65:88:22:e1:e8:c2:
b7:31:0b:67:02:45:18:d1:96:6a:81:9f:6f:85:cc:e7:c5:12:
d1:3f:e2:50:f8:97:76:1f:35:5c:0d:0a:92:e1:60:fd:16:63:
4c:6a:38:50:d7:95:52:cf:9d:b0:24:19:39:26:b2:fa:3a:51:
41:76:c6:fb:9e:8d:ad:18:75:47:1f:d4:b8:09:c8:6f:a8:54:
71:86:42:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:31 2025 by rpki-client