Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/fhi89QA1xrXQ3ASVd7d2RToJBLs.roa
File: fhi89QA1xrXQ3ASVd7d2RToJBLs.roa (raw, json)
Hash identifier: E/RtuGm8yfaWD98+DuvUe0Vka30FFZI+k0oL52FF3pY=
Subject key identifier: 7E:18:BC:F5:00:35:C6:B5:D0:DC:04:95:77:B7:76:45:3A:09:04:BB
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F6262BEC83A7D4878C5EAA12C706A82
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/fhi89QA1xrXQ3ASVd7d2RToJBLs.roa
Signing time: Tue 25 Jun 2024 12:32:46 +0000
ROA not before: Tue 25 Jun 2024 12:32:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396604
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:62:be:c8:3a:7d:48:78:c5:ea:a1:2c:70:6a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e18bcf50035c6b5d0dc049577b776453a0904bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fe:68:58:5e:03:9b:3f:b2:f4:99:bf:6f:ad:
a6:94:bc:b8:9a:78:40:a5:74:a0:3c:e3:8a:50:7c:
04:52:8e:40:cd:cb:ee:dc:b2:6d:02:ce:6c:c5:64:
9f:d5:ad:7a:67:6d:15:90:51:56:42:87:c1:0a:5c:
76:0c:cc:4e:eb:5e:5f:97:7d:11:25:24:b4:df:3e:
31:92:c0:88:a1:1c:41:4e:78:00:3e:b6:b7:00:3f:
78:aa:8f:9f:fa:6e:6b:2c:cc:23:b1:f6:8a:09:f9:
f0:45:8e:12:bc:d9:84:a8:89:b0:35:0a:7b:dc:c5:
25:06:f0:b5:4e:27:8b:2d:57:08:5a:0a:b9:d7:e8:
01:b7:ac:1e:4f:2b:06:27:df:69:9b:e8:55:b7:00:
52:ef:fc:e7:52:71:62:fe:2b:ff:1d:68:da:d2:2c:
4b:a0:44:fc:e2:d5:64:06:df:ea:a7:85:9d:a0:2b:
af:d8:4f:12:57:d7:05:62:30:f7:e9:05:30:16:16:
37:05:57:49:5f:1f:27:59:6c:53:56:66:be:b5:79:
f2:75:43:2d:e4:c8:34:66:2b:00:82:a4:13:cd:16:
ec:df:11:fa:03:cd:73:b5:76:f9:92:1d:9a:c2:3f:
49:e6:c8:75:63:e9:aa:2a:e3:60:2e:a7:87:2d:1d:
c0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:18:BC:F5:00:35:C6:B5:D0:DC:04:95:77:B7:76:45:3A:09:04:BB
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/fhi89QA1xrXQ3ASVd7d2RToJBLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
9e:9e:0f:2e:68:12:5d:fb:e0:5a:da:72:73:20:da:78:9f:0f:
b9:db:6e:91:20:a8:26:c0:e3:d9:95:67:cd:7d:7a:49:67:03:
09:5f:33:2a:58:d7:5d:24:4c:b4:60:02:9a:6c:89:a5:5c:19:
5e:e8:cd:2d:a4:f0:4a:25:97:ec:e7:1a:70:11:5b:ec:71:cc:
e0:eb:3c:25:d5:46:67:38:24:28:6f:1d:07:b8:f4:7f:9a:10:
4b:4a:75:ea:d5:1a:d3:ee:a7:f4:bd:4f:83:c2:67:0f:a6:52:
91:3b:b3:8e:38:f6:2a:bf:3e:b4:ee:92:2f:b0:f3:bc:01:4d:
57:0a:67:d6:cf:7c:1c:ec:5e:52:a2:82:e3:1e:cd:da:83:65:
55:8b:76:8c:ac:40:93:91:6d:80:8a:6a:ca:9e:68:69:7a:62:
f8:80:c3:71:1f:64:04:97:88:95:bc:23:e1:f1:03:6b:20:2a:
63:53:6d:0c:cd:bd:ab:c5:4d:00:47:8a:08:bf:e8:6f:a1:6d:
d7:4e:4f:cf:51:c6:47:06:48:65:d3:ff:5c:e1:bb:09:20:34:
ce:95:e6:53:00:a0:46:ab:9a:9c:c1:71:2d:ee:d2:8f:26:4b:
ce:2a:30:c7:cb:f4:07:d1:e2:cc:14:68:cd:a0:dc:de:2c:53:
6d:b7:29:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:32 2025 by rpki-client