Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/kAgAERNAqc_I2PsGwFbbmBJoG2U.roa
File: kAgAERNAqc_I2PsGwFbbmBJoG2U.roa (raw, json)
Hash identifier: AvbsoZ5g4YaHWZzG0CfsF3OPrEh30wy1de/yZbWo6Sk=
Subject key identifier: 90:08:00:11:13:40:A9:CF:C8:D8:FB:06:C0:56:DB:98:12:68:1B:65
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEF99D4B9995EEE32952CC28D3798E
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/kAgAERNAqc_I2PsGwFbbmBJoG2U.roa
Signing time: Tue 26 Nov 2024 13:35:17 +0000
ROA not before: Tue 26 Nov 2024 13:35:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396575
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:f9:9d:4b:99:95:ee:e3:29:52:cc:28:d3:79:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=900800111340a9cfc8d8fb06c056db9812681b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:91:da:2f:36:fa:6e:9c:6b:18:69:46:29:a8:
d3:1d:6f:44:80:6a:98:b0:24:75:1a:fc:0f:2b:ce:
80:23:4b:45:8c:10:1d:94:8c:58:eb:21:b5:81:9d:
ed:e7:30:67:9f:0e:27:57:4d:78:c4:b9:c7:fc:f7:
4b:9a:bd:75:46:bf:4f:58:fa:69:9d:3b:60:b7:de:
d1:be:4b:5d:d9:74:3a:41:5d:55:8e:62:33:13:92:
59:a6:67:de:91:48:e6:0c:44:cf:19:c3:a0:90:bc:
dd:94:b2:14:18:88:e7:7f:4c:14:d5:7c:ed:e6:ab:
e0:90:8a:a6:e0:0a:cc:78:6c:3a:a5:77:02:61:13:
45:25:a9:ee:71:1c:b8:d3:c8:21:d6:5c:0a:5c:77:
ec:f3:f7:e7:de:49:0a:ba:ba:60:da:6f:5e:b5:4f:
26:bf:b5:f5:2b:2f:e6:10:d5:0b:f0:1a:21:32:69:
e0:ee:82:f3:47:97:04:11:f7:bb:b8:01:78:e0:9c:
f8:8d:4e:ca:1d:2b:1d:17:05:08:ec:19:41:90:52:
d1:c4:0e:1d:b1:90:d3:3f:64:d0:ef:2a:01:52:3e:
57:ed:be:78:44:0a:f1:a5:44:63:16:07:ee:5e:d3:
77:2c:0c:72:21:6a:a4:c1:5b:3d:fa:2b:3e:c7:23:
e7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:08:00:11:13:40:A9:CF:C8:D8:FB:06:C0:56:DB:98:12:68:1B:65
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/kAgAERNAqc_I2PsGwFbbmBJoG2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
b9:9b:23:23:4b:4f:f9:44:76:ee:af:7c:e7:a2:d2:7c:72:f4:
c5:7c:44:79:aa:e0:cf:63:13:81:bc:0e:52:64:7f:6c:3a:9a:
34:94:3e:9c:81:51:d4:a8:38:a2:f8:12:5f:a5:41:b9:78:99:
03:2c:00:44:9e:6c:d2:2d:05:5e:17:8c:0a:e5:ea:c7:2d:ec:
b3:93:4d:1a:83:b2:32:0a:a3:f7:07:68:d2:cb:a2:90:ce:ad:
2c:17:4b:4e:d2:3b:6f:13:a2:9b:5b:18:97:85:07:e3:ca:0d:
06:79:54:6a:6d:fc:f6:31:e8:7b:d9:93:73:98:63:0f:79:f1:
a8:33:6a:6d:c7:45:e3:0e:5f:78:34:f6:69:8a:bf:f1:65:a7:
c5:6d:a9:39:83:5f:21:71:d3:18:98:cd:17:b1:85:cf:08:83:
53:b4:2f:4e:d3:7e:bf:88:95:3e:b7:4d:8a:66:12:9d:1c:a5:
51:79:a1:fe:32:36:f3:9e:a6:64:55:d3:c6:45:20:82:ca:b1:
cb:42:50:e3:0b:9d:5e:cf:d3:96:02:78:d9:38:90:5b:9b:4d:
2c:06:9d:1c:95:cc:8f:9d:b9:3c:74:7c:4c:2a:e1:4e:18:b2:
ce:89:63:6e:24:66:10:39:30:ea:76:a2:16:fc:90:9a:e8:2a:
66:31:13:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:12 2025 by rpki-client