Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gwpWNHI9c3LpwqXPN3nl2pERYYs.roa
File: gwpWNHI9c3LpwqXPN3nl2pERYYs.roa (raw, json)
Hash identifier: 1aFw5/sRASwqJbUHM4Xhnz5R42cuS6yjrGYFFXx/0RU=
Subject key identifier: 83:0A:56:34:72:3D:73:72:E9:C2:A5:CF:37:79:E5:DA:91:11:61:8B
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEFDEFEB49D4C563404BAB05012985
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gwpWNHI9c3LpwqXPN3nl2pERYYs.roa
Signing time: Tue 26 Nov 2024 13:35:18 +0000
ROA not before: Tue 26 Nov 2024 13:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396582
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:fd:ef:eb:49:d4:c5:63:40:4b:ab:05:01:29:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=830a5634723d7372e9c2a5cf3779e5da9111618b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6d:de:4f:7c:0f:ef:11:a0:13:3e:80:8f:9b:
bc:d9:71:11:f8:6b:d2:a3:b6:5c:70:2f:b1:a2:9f:
ae:1d:0e:40:31:0a:fe:15:a9:a6:40:b8:c8:89:52:
6e:e0:92:76:b0:81:f1:cd:99:a4:ec:94:6b:62:c0:
17:1b:a8:c2:bc:9a:38:c3:41:cf:5e:6a:0c:b2:de:
07:45:b1:9a:8b:16:6a:99:ac:9f:c8:1f:d1:9b:fb:
50:b1:2e:f9:7b:ae:ef:59:b9:f0:d6:05:49:30:e3:
15:1f:e0:c8:22:5d:6a:f3:2e:bd:27:9c:24:0f:04:
bf:e3:a2:66:96:0c:72:a6:05:fd:fa:5e:d5:8b:49:
70:3a:05:bf:e4:28:36:8a:3b:83:db:0a:e8:c9:fc:
49:7f:be:64:81:ec:18:36:74:50:3e:bd:46:02:97:
15:73:e2:6a:1f:f8:1a:be:07:e4:45:29:5e:ee:8b:
50:d2:71:9d:9f:81:72:c4:2e:1e:13:fe:7d:33:53:
6f:e9:d6:bc:73:54:9d:05:53:2f:57:b2:6a:27:90:
f3:9c:e3:7d:86:97:03:19:74:71:69:ae:a9:c5:60:
b4:59:d7:ce:1c:89:ba:18:9d:12:ba:33:a5:4f:66:
9f:f3:5a:43:f6:9d:1e:4e:bb:59:1a:21:5a:52:7c:
7a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0A:56:34:72:3D:73:72:E9:C2:A5:CF:37:79:E5:DA:91:11:61:8B
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gwpWNHI9c3LpwqXPN3nl2pERYYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
c6:ed:ad:ec:5d:51:46:d6:49:34:86:f7:81:61:e4:40:ed:03:
8d:3a:af:17:6b:4b:38:70:27:e4:d1:bd:5a:59:8e:66:4d:97:
89:e5:f5:2b:ba:07:03:6d:c1:06:de:ec:c1:6a:99:82:40:99:
53:6d:fc:f4:4b:b2:0f:7f:e1:73:82:b9:63:27:11:a4:b6:27:
77:e9:fe:43:bd:e7:18:9e:77:5c:24:b1:a4:d3:4e:b5:77:4a:
fb:92:d3:9a:5d:25:d4:ab:cc:92:d3:77:c1:93:6c:59:f6:75:
26:10:74:4e:a5:96:0e:7b:fc:27:1a:5c:ad:c9:5a:65:9e:c1:
47:e7:1c:10:b4:08:0b:f4:74:65:78:45:e4:1a:15:a9:78:11:
fb:d0:db:a3:d8:87:6f:b3:3e:7a:04:cc:94:a0:c7:99:0e:b5:
f2:85:f5:0a:31:7c:68:9a:8c:72:00:15:e1:7a:0a:96:f9:54:
09:ec:ec:7b:be:a4:a8:99:aa:13:ff:6a:a0:66:f8:29:d0:80:
69:8d:da:1e:5e:77:ef:8e:06:2a:47:ba:06:d6:d3:9e:73:e3:
b5:be:59:d7:40:0e:f5:75:fc:53:7d:cb:fa:cd:19:32:5c:50:
84:cb:54:69:ff:30:06:db:b0:62:fa:09:f4:54:e7:32:7f:09:
28:2c:2a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:16 2025 by rpki-client