Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/izBm6RvDOIUKn-YgY2I4ZTzSXZg.roa
File: izBm6RvDOIUKn-YgY2I4ZTzSXZg.roa (raw, json)
Hash identifier: /b+Ecyr9IbULaXpna1QC4081XzF63mIibLynT8Amuck=
Subject key identifier: 8B:30:66:E9:1B:C3:38:85:0A:9F:E6:20:63:62:38:65:3C:D2:5D:98
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEDDDFB5BD27EFB0531AF5EF52DDF1
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/izBm6RvDOIUKn-YgY2I4ZTzSXZg.roa
Signing time: Tue 26 Nov 2024 13:35:10 +0000
ROA not before: Tue 26 Nov 2024 13:35:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20172
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:dd:df:b5:bd:27:ef:b0:53:1a:f5:ef:52:dd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b3066e91bc338850a9fe620636238653cd25d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:28:a7:6a:12:fa:e8:b0:4f:a8:ae:f4:98:74:
f0:92:e0:68:bb:eb:76:35:71:28:00:6f:d2:2f:61:
de:d2:bc:80:cc:24:0e:f2:33:f0:d6:74:8a:23:d2:
d9:e6:ae:36:76:2e:b3:2c:4b:67:f8:89:08:c6:ed:
41:8a:ed:32:16:eb:21:2b:24:b6:ec:d8:9b:72:91:
6a:a1:54:70:60:aa:82:01:f3:65:0d:3c:98:18:83:
27:e1:22:0f:de:ba:b3:ab:ff:d2:c3:b3:94:4b:30:
b2:cf:b4:ab:c1:ef:ce:21:77:82:5b:6e:16:4e:2c:
a7:84:e6:65:af:36:7b:2b:4d:87:dd:71:d1:d8:76:
8d:4a:24:a8:ab:c1:6a:e1:d9:90:40:eb:c5:e8:a4:
8d:e5:6e:6e:07:bd:2f:ee:04:b4:b6:82:1f:88:db:
0c:bf:dd:10:0b:00:49:c1:b8:10:dc:6b:a4:2e:1d:
3e:d8:b2:0b:94:0b:53:19:dc:53:2f:7a:06:ab:91:
64:67:90:53:47:67:f0:18:57:d3:1f:00:83:73:79:
62:3c:e2:12:2c:26:26:68:b7:34:d4:d4:94:18:9b:
9d:2a:59:1c:b2:ee:ad:ba:fd:5a:52:87:b8:f2:af:
b1:a3:40:7b:4f:ea:31:2f:d0:99:07:90:c5:60:92:
97:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:30:66:E9:1B:C3:38:85:0A:9F:E6:20:63:62:38:65:3C:D2:5D:98
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/izBm6RvDOIUKn-YgY2I4ZTzSXZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
bc:d6:76:ab:43:fa:50:e6:73:39:70:72:b6:d1:03:89:4e:89:
01:95:fc:16:46:c4:82:6e:e3:00:d2:2b:e6:b8:47:cc:63:7a:
ff:13:ea:be:92:fc:72:3a:45:2b:1c:31:d0:5c:55:0f:7c:13:
43:05:bd:e8:f3:95:b1:fe:c6:e2:01:29:52:ff:6e:f6:ac:9d:
08:e7:40:cd:94:4d:ec:6b:b6:6e:96:52:5b:e7:cc:00:fc:dc:
45:3c:40:28:18:fb:6e:9d:41:60:46:16:e4:36:bc:ad:ed:8f:
76:b3:b3:51:19:85:29:1c:6a:26:00:3f:54:20:83:cf:fb:e9:
be:99:e7:ad:d5:f1:08:18:a2:e5:db:f0:a2:56:b3:ad:ba:53:
a0:80:a3:9c:82:8c:70:e9:9b:0a:9d:41:98:d1:a6:6e:ac:0f:
39:45:24:d7:2f:1b:d7:44:3d:00:86:84:4a:ab:30:05:ad:c3:
40:dc:a2:1b:d4:e7:58:27:b6:34:55:07:d1:71:98:e6:1c:46:
dd:21:43:73:a0:12:e8:dc:30:78:ca:b6:4b:66:66:15:db:31:
d5:08:42:02:a4:57:1a:0f:8f:18:55:56:93:f2:d5:89:17:1e:
fb:d4:e8:75:17:7f:02:a4:97:e4:f2:4f:b0:62:2d:74:d1:57:
ca:3b:40:c5
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZNort3ftb0n77BTGvXvUt3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQxMTI2MTMzNTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjMwNjZlOTFiYzMzODg1MGE5ZmU2MjA2MzYyMzg2NTNjZDI1ZDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCinahL66LBPqK70mHTwkuBou+t2
NXEoAG/SL2He0ryAzCQO8jPw1nSKI9LZ5q42di6zLEtn+IkIxu1Biu0yFushKyS2
7NibcpFqoVRwYKqCAfNlDTyYGIMn4SIP3rqzq//Sw7OUSzCyz7Srwe/OIXeCW24W
TiynhOZlrzZ7K02H3XHR2HaNSiSoq8Fq4dmQQOvF6KSN5W5uB70v7gS0toIfiNsM
v90QCwBJwbgQ3GukLh0+2LILlAtTGdxTL3oGq5FkZ5BTR2fwGFfTHwCDc3liPOIS
LCYmaLc01NSUGJudKlkcsu6tuv1aUoe48q+xo0B7T+oxL9CZB5DFYJKXqQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIswZukbwziFCp/mIGNiOGU80l2YMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvaXpCbTZSdkRPSVVLbi1ZZ1kySTRaVHpTWFpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBALzWdqtD+lDmczlwcrbRA4lOiQGV/BZG
xIJu4wDSK+a4R8xjev8T6r6S/HI6RSscMdBcVQ98E0MFvejzlbH+xuIBKVL/bvas
nQjnQM2UTexrtm6WUlvnzAD83EU8QCgY+26dQWBGFuQ2vK3tj3azs1EZhSkcaiYA
P1Qgg8/76b6Z563V8QgYouXb8KJWs626U6CAo5yCjHDpmwqdQZjRpm6sDzlFJNcv
G9dEPQCGhEqrMAWtw0DcohvU51gntjRVB9FxmOYcRt0hQ3OgEujcMHjKtktmZhXb
MdUIQgKkVxoPjxhVVpPy1YkXHvvU6HUXfwKkl+TyT7BiLXTRV8o7QMU=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:40 2025 by rpki-client