Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/hCpnhARge3yX6nYOb7P7ax9KQrw.roa
File: hCpnhARge3yX6nYOb7P7ax9KQrw.roa (raw, json)
Hash identifier: dDjWaRVOHe+bjj2bR8/DNWfJxkS7lNYO/0DEkps5Y6M=
Subject key identifier: 84:2A:67:84:04:60:7B:7C:97:EA:76:0E:6F:B3:FB:6B:1F:4A:42:BC
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F6252E747AF2B88E7A5224D3717C92E
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/hCpnhARge3yX6nYOb7P7ax9KQrw.roa
Signing time: Tue 25 Jun 2024 12:32:42 +0000
ROA not before: Tue 25 Jun 2024 12:32:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396572
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:52:e7:47:af:2b:88:e7:a5:22:4d:37:17:c9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=842a678404607b7c97ea760e6fb3fb6b1f4a42bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:4a:6d:56:8f:f1:6b:bf:13:f6:8a:ae:f8:
75:ba:e4:4c:c5:bc:c5:91:7b:9f:34:df:c0:bf:53:
0c:5d:10:70:3a:aa:c1:be:50:a2:3a:57:81:36:93:
41:e3:2d:59:19:86:61:6c:ad:81:13:ba:69:15:a3:
08:08:dd:8e:f8:b2:58:3e:58:37:5d:f2:9a:40:4b:
f3:f9:94:be:45:33:3e:f4:df:da:07:f2:38:b6:54:
7c:ac:7a:c6:e1:fb:73:a0:29:7d:65:67:a9:bf:4f:
7b:1a:bc:c0:8d:3c:a3:4b:f7:5c:ec:23:39:97:39:
b4:5f:e9:02:89:09:00:1a:8a:30:15:be:0f:9c:22:
c1:22:54:d7:1c:76:e3:e5:9b:8b:e7:50:6b:74:09:
13:97:b9:06:59:ea:10:8d:fb:b5:e4:74:5b:39:95:
9a:14:a7:5f:ec:64:b6:e0:b7:51:8c:3d:32:c4:30:
28:f3:fc:e9:b2:91:40:bc:e8:14:97:d1:3a:05:eb:
20:e2:9d:e6:54:af:85:4e:04:91:21:d2:59:73:33:
01:b1:36:71:a5:7a:53:04:e3:1c:f3:3a:27:e8:90:
c3:d1:63:19:e3:a3:53:1a:58:7c:bc:a9:81:13:5f:
fb:97:42:cc:3b:7e:75:d0:b6:c9:c6:6a:e6:92:c9:
67:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2A:67:84:04:60:7B:7C:97:EA:76:0E:6F:B3:FB:6B:1F:4A:42:BC
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/hCpnhARge3yX6nYOb7P7ax9KQrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
b8:7c:4e:ed:d5:ee:72:c8:4f:5b:be:47:dc:02:b8:2d:e5:97:
75:78:f2:8b:61:48:3d:18:1f:dc:97:1a:0a:44:2f:02:c6:74:
98:30:92:cf:6e:f5:c5:28:55:f3:d2:21:df:9b:13:02:13:0f:
8a:b5:41:98:51:b6:70:bc:92:04:e7:b4:f4:8a:88:f7:9d:1b:
38:65:84:fc:e9:d8:a1:0d:50:f0:a3:67:de:76:c0:92:f7:3e:
0a:b4:7a:3d:b0:22:1d:70:ab:3e:53:35:ed:de:2e:7d:63:df:
32:f6:ed:99:31:88:9b:ad:d4:79:f8:9a:1f:d1:04:86:82:15:
36:3c:d2:48:84:b8:de:51:96:09:d8:27:f9:00:fc:db:bd:a7:
1e:2a:d3:77:0b:88:4b:5c:61:b2:79:91:86:14:a2:42:3d:2c:
fb:3f:75:6e:69:c8:ca:f0:b8:35:cf:9e:00:20:ee:03:99:63:
61:ba:86:22:ee:07:fc:00:29:d8:c4:0a:00:a4:d7:55:e8:de:
ba:b4:5f:82:90:ba:3b:c9:76:59:1f:05:c9:13:08:40:3e:10:
bc:e6:bc:ec:fb:2e:a8:8a:33:34:06:12:0d:aa:ec:34:20:15:
54:6f:96:ff:9c:40:f2:bb:7c:f2:e8:0f:68:16:bd:34:e2:a3:
98:8d:1a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:43:42 2025 by rpki-client