Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/mfTBnaRgPUOgyIFiCXQyd7JK2TA.roa
File: mfTBnaRgPUOgyIFiCXQyd7JK2TA.roa (raw, json)
Hash identifier: B0xCkoCWhwnqQhPZhv7LDeqezWA4H/VI7LsGQmpu6hM=
Subject key identifier: 99:F4:C1:9D:A4:60:3D:43:A0:C8:81:62:09:74:32:77:B2:4A:D9:30
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF03416CAA6DCAC9F24CDE3BF74412
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/mfTBnaRgPUOgyIFiCXQyd7JK2TA.roa
Signing time: Tue 26 Nov 2024 13:35:20 +0000
ROA not before: Tue 26 Nov 2024 13:35:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396593
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:03:41:6c:aa:6d:ca:c9:f2:4c:de:3b:f7:44:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99f4c19da4603d43a0c8816209743277b24ad930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:dd:63:b1:36:13:c7:a8:d3:f2:40:3f:12:
08:62:f5:52:55:0f:81:82:87:9b:38:ae:7b:0b:62:
48:7a:5c:25:35:60:aa:f3:c8:e0:a8:ee:56:4a:ca:
39:ad:d4:9d:8e:35:b0:a4:5b:a8:da:2e:fd:44:4e:
02:f9:03:39:56:5c:df:17:81:95:c6:14:2e:ad:10:
8e:71:8b:01:cb:d2:0d:0f:2f:d8:8f:ac:f5:68:c4:
59:10:4d:b2:5e:f1:59:5d:b2:45:cc:4e:d4:8f:a8:
77:ed:a3:1a:9e:aa:4f:fd:58:2d:23:55:05:a0:1f:
f3:af:74:e0:b9:89:01:8b:a6:70:ef:7b:bb:c9:1a:
85:b6:f7:6b:b8:7f:fc:02:9d:e0:dd:90:da:db:53:
ad:13:20:78:4a:e0:8c:9a:58:fc:ca:ac:ab:0b:d8:
6a:88:66:91:c3:d5:a4:8b:da:2d:12:0f:ce:b5:a9:
6e:dd:a2:88:89:0f:67:23:81:99:73:ae:54:ac:c8:
63:05:2e:ce:0e:11:5f:bf:a6:2e:68:3f:ff:b8:89:
59:bc:c1:33:6b:2b:c6:f6:a0:9d:29:92:7d:dc:8d:
32:e2:c3:f2:a9:72:8f:b2:10:f1:24:0d:f3:67:24:
3c:ae:b4:57:02:5c:a2:89:b7:5e:84:d1:0e:f3:48:
90:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F4:C1:9D:A4:60:3D:43:A0:C8:81:62:09:74:32:77:B2:4A:D9:30
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/mfTBnaRgPUOgyIFiCXQyd7JK2TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
76:5f:66:65:0d:54:c8:20:75:0b:a3:11:aa:1b:9f:35:56:56:
cf:66:44:95:77:be:d1:8a:45:16:77:cc:59:14:83:45:51:f8:
04:e0:28:cb:9a:c1:70:c0:d2:4f:17:94:7d:59:0d:20:c6:2c:
63:b3:93:9d:ac:a1:13:1a:ee:b8:e1:4a:02:5b:0c:89:d3:bd:
51:a2:c6:50:44:fb:71:a7:83:59:ac:ad:a2:de:44:4e:99:f3:
13:29:0d:ea:d6:a3:74:d2:75:70:15:73:27:1a:44:05:7c:69:
75:3a:10:1a:7f:17:21:e5:1a:b7:fb:de:f3:04:05:51:46:32:
7b:ef:c8:cb:33:ad:b9:31:6b:74:de:c8:91:08:3f:55:eb:a3:
b2:bd:26:01:de:78:0b:6d:19:b7:4f:bf:3c:e8:8f:c8:1f:93:
86:d0:fe:44:97:8a:9f:5b:81:7c:68:83:2f:47:69:71:e9:ed:
a6:e5:bd:0e:d7:e2:57:80:38:5e:d0:ca:b7:9d:92:40:b8:04:
78:41:2e:c4:9d:b1:ea:d4:83:cc:2c:23:8c:06:9f:3b:88:b3:
7d:13:9c:05:c2:5e:c4:8f:6a:66:93:65:7d:c8:38:62:3f:5c:
d5:82:6c:2e:1c:40:b8:98:1b:8a:20:a0:66:56:a4:18:50:4b:
1b:62:ee:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:01 2025 by rpki-client