Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/jG0wbp67tK2JW2OC9gCKA1E6Ufg.roa
File: jG0wbp67tK2JW2OC9gCKA1E6Ufg.roa (raw, json)
Hash identifier: x2qJFXv64C26I4UI2D/bp1TxA5WB/YVW9BiM7l8/TwY=
Subject key identifier: 8C:6D:30:6E:9E:BB:B4:AD:89:5B:63:82:F6:00:8A:03:51:3A:51:F8
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEFA7D0F34457B0334607EF9313D0E
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/jG0wbp67tK2JW2OC9gCKA1E6Ufg.roa
Signing time: Tue 26 Nov 2024 13:35:18 +0000
ROA not before: Tue 26 Nov 2024 13:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396577
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:fa:7d:0f:34:45:7b:03:34:60:7e:f9:31:3d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c6d306e9ebbb4ad895b6382f6008a03513a51f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:cc:18:6b:eb:70:f1:28:82:b1:c9:43:4e:
cf:f4:0d:c3:96:f9:a1:9c:4d:66:c3:2c:91:80:80:
6f:90:23:9d:a3:35:15:b1:5a:92:7a:53:06:09:34:
36:ec:96:0b:ae:95:5f:90:9b:66:a8:d8:d9:ac:ee:
dc:63:fe:df:1c:0b:19:bc:4c:5b:58:c2:9b:c4:be:
2d:73:48:62:af:2d:55:ed:c8:e6:6a:a7:c5:5c:1a:
45:74:f8:01:cd:6a:c8:18:c5:93:fe:85:cc:e0:71:
52:33:1f:9b:c4:4b:1e:9c:09:14:fa:bb:f8:e9:56:
b9:b8:62:a0:7b:26:89:e1:cd:2b:c6:88:fe:89:92:
d1:79:14:49:7d:6c:75:f6:10:6f:2d:a8:5d:5a:47:
ef:3f:18:37:98:b3:70:15:59:05:c6:3f:bb:71:18:
07:d8:a0:c5:1d:94:63:6c:18:36:73:a8:85:e9:17:
7f:61:6d:2f:db:b6:63:d1:1d:8f:ce:bd:12:af:90:
bb:35:2e:ad:2a:5c:8e:06:ad:97:c9:96:2b:d8:a7:
ab:17:b0:1a:40:7e:29:76:a5:a8:20:62:80:f9:c4:
36:69:52:c6:23:36:c5:16:13:e3:da:a5:02:11:aa:
37:eb:44:0f:89:0f:a9:57:b1:ba:3b:11:9c:ef:a9:
dd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6D:30:6E:9E:BB:B4:AD:89:5B:63:82:F6:00:8A:03:51:3A:51:F8
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/jG0wbp67tK2JW2OC9gCKA1E6Ufg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
95:73:d0:cb:54:8f:b3:89:d6:ec:35:93:00:e8:45:f2:47:ff:
8d:8e:e8:07:15:52:69:44:0f:a3:23:75:20:37:a5:65:75:2c:
2f:28:1e:cf:52:90:c7:d9:17:cd:33:f3:05:e0:e2:15:ae:d6:
6e:87:65:62:35:a6:65:c9:68:58:03:9b:25:80:b9:78:6e:40:
0b:2f:67:9a:c4:67:71:5c:b6:f6:0c:53:82:03:75:69:5f:a6:
cd:87:59:b7:7a:20:23:31:f8:b3:9b:28:89:15:e6:eb:ed:68:
46:f7:25:02:9c:63:54:db:7b:85:e2:fc:4d:8f:f9:bb:6e:12:
d0:6a:cf:77:10:6e:a5:3c:02:e9:8a:40:3e:a5:4c:84:f8:8f:
8f:77:42:e1:51:9a:4b:0d:6b:b9:9b:39:5a:20:28:b9:75:e4:
2f:e5:7b:a8:54:a9:01:c3:b3:b9:33:80:e8:f7:14:a0:4f:f5:
fe:14:59:04:f4:1d:bd:fd:f7:0e:b8:55:16:32:05:bd:4d:cc:
66:dc:9f:4d:73:61:84:ea:c8:52:9c:65:c6:fa:1b:6b:3f:2f:
72:94:83:72:e7:dd:05:81:2a:1c:1b:63:20:cc:69:9b:09:e2:
a4:6c:3f:6b:32:5b:18:a4:a4:39:23:e4:79:f0:6d:e2:d1:84:
12:ca:fd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:03 2025 by rpki-client