Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gQyv5mi_W6a0zOl2b6Pz-PJHHw4.roa
File: gQyv5mi_W6a0zOl2b6Pz-PJHHw4.roa (raw, json)
Hash identifier: N+7TNkhVb65tWJmf243UeG61FmCi6N8vTwXh10QiwS8=
Subject key identifier: 81:0C:AF:E6:68:BF:5B:A6:B4:CC:E9:76:6F:A3:F3:F8:F2:47:1F:0E
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F625D8B619F20E09EAE6D9ACEEFB49C
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gQyv5mi_W6a0zOl2b6Pz-PJHHw4.roa
Signing time: Tue 25 Jun 2024 12:32:44 +0000
ROA not before: Tue 25 Jun 2024 12:32:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396590
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:5d:8b:61:9f:20:e0:9e:ae:6d:9a:ce:ef:b4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=810cafe668bf5ba6b4cce9766fa3f3f8f2471f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1e:64:94:3d:6e:47:31:57:3a:13:e5:bb:85:
21:9e:97:b4:68:f3:72:08:27:8b:77:9a:96:d4:25:
0a:ed:b8:10:21:b7:f9:b6:bc:99:d1:34:f5:98:f6:
7e:53:17:e6:93:2d:b5:d4:9d:72:9b:04:03:b6:29:
00:d6:4b:51:25:33:6c:3f:76:3a:81:d4:da:17:e3:
f3:4a:04:32:f7:59:13:51:13:7f:ac:f4:f9:15:cc:
ed:fe:75:43:e3:3d:c4:ee:da:a0:58:5f:45:cd:21:
6c:b4:29:8b:51:82:5b:53:3d:2e:93:e8:37:5b:dd:
e4:7d:92:23:0e:31:ea:7f:80:5a:b2:25:4c:df:06:
d5:af:6b:e8:18:5f:77:fa:7d:19:df:1d:45:d5:23:
20:3e:14:ea:d7:f0:fb:8b:e4:4e:b4:56:c2:99:23:
59:e3:c5:b8:68:d3:d9:12:f2:7f:3f:f2:5e:a1:fe:
2a:84:72:43:a2:5d:4c:e4:6c:85:6b:f2:47:2e:99:
92:dc:37:52:e1:b2:8a:b9:44:c8:cc:34:05:93:1a:
cb:94:95:7e:09:0f:12:ad:28:9b:a7:88:25:89:52:
76:77:d7:39:73:41:84:70:c8:08:62:85:5e:0f:31:
2a:c5:c8:15:76:6d:d2:67:1c:2a:e5:73:0b:c1:39:
e8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0C:AF:E6:68:BF:5B:A6:B4:CC:E9:76:6F:A3:F3:F8:F2:47:1F:0E
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gQyv5mi_W6a0zOl2b6Pz-PJHHw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
44:4c:b6:81:01:e5:ef:d7:8d:9b:6f:8b:c3:09:66:16:e8:32:
d3:8d:37:b3:08:3f:8e:59:3d:26:34:25:dc:2e:53:a2:5f:0f:
1a:4b:3d:4c:0d:b3:63:8a:43:1c:eb:85:d7:0a:51:a0:e9:aa:
93:c6:41:80:a8:df:08:a7:b2:fd:c1:87:05:bc:57:f7:4f:d8:
97:4d:ec:2a:ae:82:ed:46:73:be:ba:9c:d0:07:b8:7c:be:6d:
ee:80:a4:36:23:6d:2e:7a:06:8b:c9:2b:a8:eb:3c:a7:07:fe:
a0:6e:a7:23:b4:81:a4:15:64:b8:2a:1d:b4:33:ac:30:8b:9a:
0f:ca:a4:90:6a:9a:bd:c2:44:02:69:f4:70:6c:18:1b:ee:10:
41:6d:05:62:3d:08:12:8f:c7:d4:0e:5c:f4:63:54:31:a7:0c:
43:d3:41:e0:78:e6:b6:97:a5:03:32:88:fb:6c:38:63:af:be:
5b:cb:7f:5d:e7:b9:97:63:f2:f3:fa:3f:11:e7:77:d4:1f:11:
0d:96:b8:88:17:31:fe:45:a7:87:14:29:95:aa:d3:78:3a:cf:
91:9c:ff:78:cb:e8:71:a6:3b:5b:30:ef:0c:be:13:9b:5e:cc:
c1:6e:b2:33:fa:6d:5d:93:a8:bd:c0:e8:8b:dc:b0:75:8b:b8:
cf:6a:80:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:13 2025 by rpki-client