Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/d6Ak0z-fjhHI5j6rYSimgcuqXx8.roa
File: d6Ak0z-fjhHI5j6rYSimgcuqXx8.roa (raw, json)
Hash identifier: s7fX910zchYLl7B8Zp0Fc9eGKj4crQCzgnGGG7gXa88=
Subject key identifier: 77:A0:24:D3:3F:9F:8E:11:C8:E6:3E:AB:61:28:A6:81:CB:AA:5F:1F
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEF0CCBF506EB7FC5E9BD25AE9948A
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/d6Ak0z-fjhHI5j6rYSimgcuqXx8.roa
Signing time: Tue 26 Nov 2024 13:35:15 +0000
ROA not before: Tue 26 Nov 2024 13:35:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396552
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:f0:cc:bf:50:6e:b7:fc:5e:9b:d2:5a:e9:94:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77a024d33f9f8e11c8e63eab6128a681cbaa5f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:61:6f:03:fa:a8:6b:9d:e9:49:28:ac:bf:
a4:44:54:34:eb:82:6f:dd:c4:e2:c7:8f:78:81:f6:
66:52:90:45:3f:92:51:f0:f1:fd:36:8b:45:29:3b:
14:03:df:80:9c:f9:b2:01:46:c8:d9:ce:9c:19:d6:
c2:70:b4:d0:78:df:96:93:14:71:d5:41:ec:89:56:
5d:b9:2e:34:85:e3:85:63:0c:5f:3e:4f:53:63:ca:
fd:6a:8b:b1:a7:27:80:e4:0d:39:0f:eb:5b:52:af:
1d:7c:ba:8e:c6:89:eb:96:b4:35:a5:b9:10:dc:95:
ba:c1:69:1b:96:24:f3:45:a6:71:ae:c1:a3:57:12:
72:6f:81:96:77:1a:b0:29:51:a3:8a:10:60:f2:ee:
eb:4a:49:b2:d3:57:de:8d:54:b2:ad:f5:fb:c7:5d:
5d:d0:d1:97:31:82:11:08:61:7a:cf:72:67:15:f9:
a9:b3:9f:2a:4f:4d:91:4b:47:f9:d2:f7:7b:f8:f5:
c6:70:96:7e:7d:3c:d9:10:34:58:11:a8:f7:88:03:
27:2b:ad:7f:c1:5a:21:4a:67:5e:f1:76:76:d1:1e:
bf:7f:46:1c:75:7b:29:4b:29:f1:a9:3a:2e:0e:09:
a3:e1:36:4a:c5:d5:62:ea:bc:fd:1f:fa:a0:c9:70:
08:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A0:24:D3:3F:9F:8E:11:C8:E6:3E:AB:61:28:A6:81:CB:AA:5F:1F
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/d6Ak0z-fjhHI5j6rYSimgcuqXx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
68:2b:6a:10:aa:73:c3:84:8a:8d:97:58:07:5e:49:bc:b9:93:
02:9c:3c:b1:2d:eb:86:25:bd:d0:25:a3:fa:41:43:ec:41:e4:
48:8a:fe:ed:9b:32:1a:27:b8:e4:96:db:bb:8e:10:23:54:49:
0c:ee:7f:5b:34:46:6e:32:5e:24:e8:d0:99:8e:6a:a7:26:1d:
ce:ef:a2:36:80:a7:25:d5:85:a9:84:e6:54:27:89:03:22:f2:
85:30:28:72:73:2b:90:92:b6:73:cd:69:d8:cc:87:8e:41:b6:
0b:e8:e0:37:79:4e:e7:2f:6a:f2:0d:8e:ac:af:69:c3:35:8e:
19:97:3a:11:af:11:aa:51:65:5d:a6:fe:36:57:55:55:ca:6b:
8f:85:e9:35:44:05:77:09:06:bd:12:ee:b3:99:e7:4d:92:3f:
70:1d:7a:42:fd:ff:ed:ec:50:4b:90:16:f3:1c:ae:ed:e8:81:
4d:be:57:cf:ae:35:5f:9d:7e:e3:53:38:ea:27:1c:8f:08:63:
b0:f6:3c:f6:52:04:71:34:09:85:24:36:8a:a9:06:30:1a:3a:
31:b6:7e:29:09:4a:e7:63:d9:e3:de:2b:8f:d0:99:6f:1c:83:
78:0e:2c:a2:6d:76:d3:81:b7:7b:0a:5e:dd:22:6b:11:d9:a7:
f2:1d:34:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:10 2025 by rpki-client