Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/fMo0Mcn-YO7U4oIXQ0Fz2l0JNqk.roa
File: fMo0Mcn-YO7U4oIXQ0Fz2l0JNqk.roa (raw, json)
Hash identifier: P+eBcd0/7T56I/pD/YlnWGUXQBToXa4X/URvZ2dGzLE=
Subject key identifier: 7C:CA:34:31:C9:FE:60:EE:D4:E2:82:17:43:41:73:DA:5D:09:36:A9
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F62482D1568D6BDCD1B37C51B131541
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/fMo0Mcn-YO7U4oIXQ0Fz2l0JNqk.roa
Signing time: Tue 25 Jun 2024 12:32:39 +0000
ROA not before: Tue 25 Jun 2024 12:32:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396551
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:48:2d:15:68:d6:bd:cd:1b:37:c5:1b:13:15:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cca3431c9fe60eed4e28217434173da5d0936a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:62:ee:b2:20:f2:f7:a9:50:7d:83:6c:5b:77:
cb:68:44:22:8f:64:50:67:04:f6:b5:8e:70:eb:ec:
46:45:bd:13:2b:ab:b8:7d:12:f5:ab:26:d8:e1:14:
26:eb:a9:ce:fd:c1:6b:63:f8:33:9d:6a:72:ff:8a:
6b:7b:c4:34:be:9f:e8:47:bf:c7:36:2c:87:b7:e9:
2c:e1:41:44:0f:c2:60:4e:da:09:ac:55:71:52:3f:
fb:11:43:d9:b8:2e:28:5d:73:83:82:df:e1:8b:3c:
e0:dc:ac:41:c4:e4:7e:51:32:72:76:59:db:1f:58:
74:df:6f:52:bf:a2:17:8f:a6:07:ab:8a:30:6b:ca:
1e:d7:79:12:3a:cb:ce:a6:24:55:51:8d:69:49:bc:
0a:35:42:b1:7a:6f:6e:1a:b0:50:c9:9e:34:98:5d:
e9:57:85:13:ea:3e:5c:f5:8b:01:d4:d5:63:fc:af:
91:ee:3d:76:9f:08:93:13:71:40:74:43:de:61:2c:
50:0d:d6:e6:0d:11:1b:f4:95:52:96:75:bf:73:58:
4c:42:93:a7:22:c5:c6:28:b4:c5:58:98:cd:45:6a:
e8:af:dd:39:18:08:21:ac:d9:5d:97:b8:1e:22:a5:
e8:fc:a3:5a:b1:32:06:4d:5a:98:d5:02:b9:52:ea:
2b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CA:34:31:C9:FE:60:EE:D4:E2:82:17:43:41:73:DA:5D:09:36:A9
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/fMo0Mcn-YO7U4oIXQ0Fz2l0JNqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
24:4c:ed:75:e4:f9:e6:9e:13:49:bd:74:50:41:75:7e:fc:f7:
0f:3b:be:66:a8:3e:ac:eb:18:1d:4b:61:c0:14:5b:7f:56:2e:
d6:5b:75:be:51:25:92:81:c0:8e:7d:f7:54:4d:bc:ef:55:eb:
2d:5b:8c:c7:64:a0:4d:ee:14:fb:85:4b:92:e4:bd:91:ff:aa:
b4:9a:ab:61:44:52:b7:6f:83:f9:1b:f7:2c:34:75:46:8a:6a:
b3:ac:ca:06:bf:05:ad:55:34:fe:09:48:86:3f:ea:c1:d4:f3:
64:bc:82:f8:c6:fe:29:d7:bb:fd:f2:a5:4e:df:3e:70:18:03:
67:e8:52:e1:be:b6:c0:7e:45:c6:0d:5a:e9:1d:2d:6e:94:f1:
f0:13:84:3b:f7:50:00:c1:7e:66:c9:26:d5:c1:52:8b:4c:57:
87:b4:db:60:6e:a1:51:cd:be:1d:d3:6a:d0:ca:d8:c1:07:c4:
ee:95:ec:5e:e2:85:29:cd:3c:cc:76:97:1a:48:9a:7f:22:48:
6f:5a:34:96:56:8d:2e:7d:65:c3:59:a8:9d:a9:bc:8c:43:6b:
f9:3d:94:ff:a3:d3:29:5a:75:1e:ea:84:29:75:4a:39:f4:fa:
46:38:91:b7:be:6e:c3:4d:67:bd:ca:21:7f:7f:76:1a:31:66:
df:cc:f8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:22 2025 by rpki-client