Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/nUoD2gxDrXQyeaPfQHpQfJ8VCVQ.roa
File: nUoD2gxDrXQyeaPfQHpQfJ8VCVQ.roa (raw, json)
Hash identifier: /EtRi98zfBRPFa9xEzEyukSRXitlYRN6eQqLZ3ubQ9Q=
Subject key identifier: 9D:4A:03:DA:0C:43:AD:74:32:79:A3:DF:40:7A:50:7C:9F:15:09:54
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEE9D4CEAF21A724AE564F17BCB60A
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/nUoD2gxDrXQyeaPfQHpQfJ8VCVQ.roa
Signing time: Tue 26 Nov 2024 13:35:13 +0000
ROA not before: Tue 26 Nov 2024 13:35:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36632
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:e9:d4:ce:af:21:a7:24:ae:56:4f:17:bc:b6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d4a03da0c43ad743279a3df407a507c9f150954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b2:aa:c1:9d:08:bc:ee:84:1d:6b:db:28:ac:
f2:bf:bb:8a:11:12:2e:d9:5a:fb:9e:66:ab:c9:dc:
4f:9b:66:79:8a:f2:0f:80:4e:56:23:03:30:aa:0b:
4b:0d:81:e6:ff:bc:74:b3:f9:9d:67:23:e1:d0:62:
05:f9:76:39:1f:72:b5:b4:31:a6:b6:83:6d:37:c1:
b3:05:cf:d2:c7:0e:c9:e4:b8:38:dd:b7:4c:53:af:
12:de:22:b0:1b:92:91:b9:eb:cd:e8:db:aa:da:5d:
50:3f:5e:8c:f7:fc:2a:37:06:d3:ab:ac:5c:b2:3a:
a8:0e:f9:ff:59:db:9d:5e:28:c3:d8:7c:e4:13:07:
00:91:23:3f:67:09:07:08:a7:1b:da:9c:84:06:b2:
4d:d2:d2:25:92:ef:79:ef:ab:12:83:a2:e4:b3:7b:
50:e0:a7:ff:10:a8:b8:11:ae:7b:87:3f:57:df:91:
be:32:68:a9:ed:99:2d:97:7b:0d:6d:01:f8:86:93:
fa:a5:b4:8b:77:12:12:e1:fa:ef:b4:0d:bb:27:4f:
06:05:a3:80:be:f5:6b:bc:5b:69:23:d9:e3:a2:3b:
a1:69:fa:51:b4:bb:01:5a:90:45:84:ba:0d:6b:db:
f1:13:ae:8a:bf:d4:48:ca:0a:35:2e:3c:bd:f4:c8:
44:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4A:03:DA:0C:43:AD:74:32:79:A3:DF:40:7A:50:7C:9F:15:09:54
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/nUoD2gxDrXQyeaPfQHpQfJ8VCVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
1b:93:76:9a:98:9e:8e:5b:39:4e:3b:5d:a4:0c:ae:2d:5c:10:
55:ad:a8:04:b8:0c:25:77:91:c3:40:5d:ab:26:6b:9e:8c:88:
aa:10:b2:1a:07:8e:29:c4:70:db:2d:75:73:77:d7:f1:ef:b5:
98:a5:b5:e9:64:02:65:41:62:e4:e1:a4:c0:ea:70:3c:16:6b:
8e:8c:18:1c:1b:ec:e4:91:5e:8d:75:76:e7:73:1f:32:b4:3a:
1f:35:4f:c2:08:24:d4:02:36:5f:99:7a:f9:c6:b3:2c:1f:f1:
6b:cc:1e:9e:84:e3:fe:91:8e:da:ae:68:7a:d6:f2:cd:d2:c0:
a7:a3:64:61:16:a7:db:8e:81:7c:95:09:5f:b9:8e:2b:78:3b:
e1:28:fb:0a:b5:e5:48:74:25:c2:71:0c:41:85:36:c7:08:30:
33:c9:96:52:49:38:ba:42:0e:26:dc:a4:3e:ad:e4:db:fb:ba:
bb:b0:b7:52:c1:8a:43:92:37:58:03:d5:05:5b:27:3d:7e:a0:
8b:b0:50:5c:f2:cd:98:ae:e1:3f:85:c9:89:3c:94:e4:63:55:
f5:87:fe:0b:e0:41:a0:7e:30:ef:ac:1a:8b:44:bf:88:e9:a9:
74:82:25:25:1a:54:16:e6:be:1d:04:10:33:72:e1:7b:c6:d8:
87:66:28:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:05 2025 by rpki-client