Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/p0QPgOFcMqvJnU2_KpNIufIHv6Y.roa
File: p0QPgOFcMqvJnU2_KpNIufIHv6Y.roa (raw, json)
Hash identifier: pH24t9VTOznSFie6RiDC7R2/xgm+I80HZlG3c/SjwlA=
Subject key identifier: A7:44:0F:80:E1:5C:32:AB:C9:9D:4D:BF:2A:93:48:B9:F2:07:BF:A6
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F626878D501A938AE4347EF4D954B6A
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/p0QPgOFcMqvJnU2_KpNIufIHv6Y.roa
Signing time: Tue 25 Jun 2024 12:32:47 +0000
ROA not before: Tue 25 Jun 2024 12:32:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396616
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:68:78:d5:01:a9:38:ae:43:47:ef:4d:95:4b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7440f80e15c32abc99d4dbf2a9348b9f207bfa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:0e:3e:49:ad:93:9e:67:3a:cb:85:bc:08:
40:89:af:49:97:f2:15:53:00:d7:45:cb:42:21:40:
9b:5f:74:37:75:f1:5a:43:5d:a3:18:7d:f5:cf:96:
d7:ad:4d:23:f5:26:1c:20:b6:08:c3:dc:08:53:c8:
a4:fe:be:f1:6a:e9:6f:21:02:63:86:f4:41:71:bd:
a7:fb:24:4c:81:8a:37:23:c5:d6:94:9d:23:72:97:
d2:b8:b6:6e:f3:42:01:34:7a:99:ea:fb:79:cd:a9:
6b:8e:90:16:6e:25:3e:a1:4a:c1:dc:cd:97:18:42:
f2:d7:cd:95:de:9c:37:33:0e:8e:66:cd:d0:94:7e:
0e:cb:66:e2:c2:62:2f:a8:e6:54:23:ed:4a:69:ca:
28:87:ef:00:52:96:65:8a:8e:24:44:f8:51:b5:3e:
53:1e:a5:3c:ab:55:b8:36:e3:e5:c9:e9:b8:3c:42:
10:e0:69:f7:f2:63:7b:d7:51:e8:c0:5c:d2:00:b1:
5c:3a:ff:44:11:85:e3:dc:1c:74:2e:bf:87:bb:d8:
d5:3f:c3:54:07:2b:c3:d0:f8:a4:7a:bd:82:8d:63:
8a:ff:dd:f9:f7:96:9d:9e:7b:c4:fa:02:63:6e:be:
c4:c8:07:e6:dd:fe:33:13:ed:23:3e:76:7b:34:92:
89:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:44:0F:80:E1:5C:32:AB:C9:9D:4D:BF:2A:93:48:B9:F2:07:BF:A6
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/p0QPgOFcMqvJnU2_KpNIufIHv6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
6f:ab:0d:5f:ac:41:13:bc:76:37:9a:9c:92:3f:2a:63:52:cf:
ff:98:03:5b:62:c0:97:5d:ee:9c:44:78:a5:5c:cc:c2:73:9f:
b3:4c:cd:0e:3b:d3:a7:bb:23:e0:53:77:bb:e4:39:0b:d5:a1:
de:32:c1:a3:c5:3e:52:49:77:8b:f1:c1:64:a8:b5:18:1a:40:
08:72:84:f5:48:5e:ad:5b:9b:cf:d7:60:f6:6b:7b:74:5d:7f:
fb:f9:d8:2f:f6:75:08:5f:9d:71:30:51:f6:6b:a2:5c:1e:3b:
4c:1f:65:86:c3:ef:42:20:c1:ba:c9:38:9d:23:12:ea:fe:70:
86:42:75:61:74:ba:89:5c:34:5c:1f:52:79:da:94:cf:2d:0c:
e4:63:a2:f7:27:f7:1a:93:61:8b:1e:bc:45:02:3d:d5:40:e7:
d4:e6:44:4d:9d:53:d6:64:68:d7:d1:d1:11:2f:4d:66:c7:97:
1b:23:d9:fc:ea:05:d3:c0:78:2f:81:a8:ff:32:8b:d3:cc:c3:
c9:fc:70:e4:68:a5:97:e8:2e:ff:c3:5a:c2:d8:08:81:3a:10:
f2:6e:fa:ce:d2:14:ab:ca:73:18:7e:42:62:af:90:b3:a8:05:
35:34:9d:bf:56:60:b7:e6:4d:a6:12:97:f5:0d:15:52:41:66:
15:92:1a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:26 2025 by rpki-client