Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/cif8LQXxh5YIINvJL0rAWSYZkqc.roa
File: cif8LQXxh5YIINvJL0rAWSYZkqc.roa (raw, json)
Hash identifier: HkHJBLU5ixo7x0kFSEhLKm6N8BdJxBOxg46HS9N0BPw=
Subject key identifier: 72:27:FC:2D:05:F1:87:96:08:20:DB:C9:2F:4A:C0:59:26:19:92:A7
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEE8788BC7A480C5343C781BD0C171
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/cif8LQXxh5YIINvJL0rAWSYZkqc.roa
Signing time: Tue 26 Nov 2024 13:35:13 +0000
ROA not before: Tue 26 Nov 2024 13:35:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36628
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:e8:78:8b:c7:a4:80:c5:34:3c:78:1b:d0:c1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7227fc2d05f187960820dbc92f4ac059261992a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:a1:ed:00:21:fb:06:3d:9a:ea:41:63:6c:
a5:4d:48:c1:42:9f:65:1b:27:16:4c:ca:c9:d1:e7:
98:85:4e:0d:69:35:b5:28:98:8e:70:b3:21:4f:c2:
76:ff:cb:50:63:0a:26:fd:c7:bc:ea:88:e0:05:dc:
e6:6b:0b:94:26:32:1d:ef:02:ea:3f:33:79:2c:52:
e1:d7:d2:88:6b:96:0b:87:78:67:86:50:0b:de:67:
87:56:6e:1c:76:19:2c:9a:31:3b:20:49:a1:4a:5f:
44:b0:20:7e:a1:4f:7e:1e:45:7f:8e:6d:43:f4:cb:
b2:9f:c3:f9:93:56:51:2f:63:f8:3b:da:fd:3c:10:
a7:7f:47:30:e3:98:74:d5:08:2d:cf:90:51:f5:89:
46:99:da:bb:35:b6:09:8e:bf:4c:b6:17:ef:37:dc:
06:f3:a3:16:37:d5:2c:38:2f:82:64:52:7e:56:28:
a0:d0:7b:a4:20:c8:4a:34:76:d8:c0:a2:ad:bc:dc:
a7:64:51:65:f8:01:63:90:e0:9e:fe:18:ad:e0:1e:
3a:2f:20:d7:13:7d:ff:8a:ce:6d:cc:d0:29:21:c0:
2d:5d:99:be:f4:b3:8e:1b:82:79:da:82:95:01:34:
4f:a4:f2:5d:98:a3:ee:ad:0c:9b:68:92:55:e1:32:
81:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:27:FC:2D:05:F1:87:96:08:20:DB:C9:2F:4A:C0:59:26:19:92:A7
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/cif8LQXxh5YIINvJL0rAWSYZkqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
36:76:b0:9a:59:07:2b:dd:8a:76:04:d8:e0:28:8e:9d:0c:c0:
c8:b2:6b:ab:a6:86:8f:22:fd:07:b8:d1:4b:a0:eb:e7:2f:8b:
92:6d:97:94:c5:7d:74:08:eb:62:50:2c:44:14:46:33:e0:bf:
ab:a5:4b:f0:4d:12:ef:09:0d:8a:cb:08:77:31:8d:b0:1b:7b:
b6:a3:ef:3d:96:71:0f:91:5f:7a:31:58:f1:4c:7b:74:c7:82:
06:a2:99:68:2d:61:e3:6d:2f:d9:fe:1a:fd:d8:32:95:2d:37:
42:cc:aa:89:75:74:39:69:fc:8a:4e:ca:26:69:0c:b4:25:88:
4b:f6:02:94:c9:27:f1:57:5e:07:89:fe:13:93:26:1b:b2:e4:
78:01:2b:0d:55:e2:07:c7:2e:45:1b:d0:30:5e:95:1e:8a:9d:
3b:39:8e:f4:f6:1c:41:43:78:33:7b:65:d2:64:cf:32:fa:0c:
a8:b6:cf:f8:8b:c5:55:62:ec:81:1e:21:07:4a:88:16:51:e1:
f1:e5:2d:f5:83:26:63:3b:7b:23:74:2e:33:16:8a:95:2f:22:
24:39:d7:d5:d0:7d:39:03:58:a6:b5:17:6e:b1:a0:fa:29:76:
3a:ef:60:9c:44:5e:c2:b3:dd:a7:1c:b7:fb:fb:9c:ec:9b:11:
fd:1e:3d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:45 2025 by rpki-client