Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dtJ3TwkPhf8UPT94tAO628U_DM8.roa
File: dtJ3TwkPhf8UPT94tAO628U_DM8.roa (raw, json)
Hash identifier: H7PNRhofyTjyAE7S6kr3mVI9tWOIV+JC97DDY10BrEQ=
Subject key identifier: 76:D2:77:4F:09:0F:85:FF:14:3D:3F:78:B4:03:BA:DB:C5:3F:0C:CF
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F626A1E46D2CD836271ADFA49E2161E
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dtJ3TwkPhf8UPT94tAO628U_DM8.roa
Signing time: Tue 25 Jun 2024 12:32:48 +0000
ROA not before: Tue 25 Jun 2024 12:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396826
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:6a:1e:46:d2:cd:83:62:71:ad:fa:49:e2:16:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76d2774f090f85ff143d3f78b403badbc53f0ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:de:72:1a:57:65:cb:5c:de:92:a0:fc:91:ff:
ab:b7:c0:85:47:3d:8c:7b:2d:d6:e2:d3:da:37:7a:
b9:26:e1:be:77:05:94:e2:c7:13:11:0d:85:ce:1d:
1a:ce:95:aa:23:d4:fc:9c:0d:54:93:c2:6c:31:89:
d3:00:82:e6:99:33:2c:7e:71:4f:cb:30:31:66:21:
83:2a:69:59:8b:d7:c3:d9:2f:68:af:b9:f9:25:02:
ab:e7:41:58:e6:12:c6:12:9d:a5:d3:80:f1:45:83:
54:2c:ca:fc:2b:4e:83:0c:f2:31:7b:47:ff:e4:60:
52:cf:77:cb:02:1c:f3:e1:cf:22:b1:3d:72:47:ab:
14:c5:13:61:53:80:8c:80:da:27:72:ca:5e:03:00:
74:be:ca:ec:7c:e5:6d:71:13:80:1d:34:91:6f:ce:
f6:81:d3:2d:f3:79:b3:bb:42:01:84:8b:36:cd:d2:
47:11:e3:db:a3:b6:7b:1e:bc:de:47:60:0d:31:34:
ff:a7:2e:b7:a9:1d:1f:46:b5:11:09:a9:81:14:67:
f5:8e:e8:5a:55:c1:b7:a3:26:09:32:3c:ea:8b:5c:
8e:f9:e0:62:47:be:63:a2:49:54:86:89:4d:92:a9:
4d:3f:86:7c:6b:c4:6c:c9:37:8d:e1:df:74:19:10:
04:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D2:77:4F:09:0F:85:FF:14:3D:3F:78:B4:03:BA:DB:C5:3F:0C:CF
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dtJ3TwkPhf8UPT94tAO628U_DM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
14:76:32:e5:1c:ec:f6:04:19:a3:7b:ca:8a:20:14:e1:7f:06:
09:c7:cc:02:53:82:d9:82:ae:26:5a:9a:d4:5d:48:2b:ba:0d:
01:3b:50:ce:06:f5:09:4e:be:dd:cf:10:03:44:9d:4c:5c:59:
4b:62:ee:6c:97:d0:8a:4b:78:4d:c3:76:a6:af:cc:92:96:b5:
c4:32:81:41:40:36:b7:85:e9:51:22:ec:fa:68:4f:fe:7a:1d:
68:d8:64:3e:41:c3:88:29:1c:37:c8:4d:2b:82:ff:c1:94:2c:
e2:83:68:9f:c1:48:8a:fb:0f:6d:aa:6d:1f:97:a4:32:0c:0b:
84:ea:a4:c2:94:1e:f8:83:46:7a:6d:79:1b:b4:36:d9:da:e6:
2d:90:31:26:40:1c:bf:b6:7a:95:2e:23:de:d9:8e:12:eb:2d:
9b:7c:68:7a:b8:4a:a5:05:2c:2f:31:db:ce:c0:6e:c5:02:b4:
ca:e5:21:85:ac:ab:49:03:33:aa:bb:82:ae:60:a7:cc:03:8f:
15:e8:e2:3a:ff:a9:df:66:ba:9c:e9:e4:2e:68:dd:9a:4f:10:
dd:8b:05:d5:df:1f:18:51:cd:54:d1:be:82:ef:90:b3:9f:54:
73:15:e0:38:d9:e3:6b:ae:88:05:e3:0f:ac:1a:21:34:cc:43:
d7:24:09:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:00 2025 by rpki-client