Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/p20ScA0qXjfO38RQSK5vbC28YSo.roa
File: p20ScA0qXjfO38RQSK5vbC28YSo.roa (raw, json)
Hash identifier: uCdWdyERSzbXmWYIlt8TDHSK3R7MOS1cIxUqv3C/6BA=
Subject key identifier: A7:6D:12:70:0D:2A:5E:37:CE:DF:C4:50:48:AE:6F:6C:2D:BC:61:2A
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F627163359DA07C4DB99D278ACB8C31
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/p20ScA0qXjfO38RQSK5vbC28YSo.roa
Signing time: Tue 25 Jun 2024 12:32:49 +0000
ROA not before: Tue 25 Jun 2024 12:32:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397202
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:71:63:35:9d:a0:7c:4d:b9:9d:27:8a:cb:8c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a76d12700d2a5e37cedfc45048ae6f6c2dbc612a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0e:0a:f4:58:cc:9d:18:d5:c6:cc:16:68:f9:
1f:73:49:2b:52:10:20:de:4c:e4:e6:58:6e:20:f2:
46:c9:1d:58:b8:6c:79:46:d5:b7:f8:bf:71:6a:8f:
ab:4f:52:3e:b5:d1:1d:79:c0:59:89:0b:4c:a4:e5:
6d:2a:09:fb:4a:a4:fd:b1:4a:e5:ca:4d:ec:c2:e1:
a0:4b:67:f7:30:d2:d8:8a:4b:39:63:20:93:6d:05:
91:af:d4:a3:b6:46:e7:92:92:99:74:e2:01:ec:b5:
38:80:c3:24:5a:b1:03:c6:b5:ad:84:cb:42:83:72:
d0:ca:0a:cb:e0:fe:f5:fa:0f:b8:5d:79:23:13:82:
e8:30:50:6c:b6:fe:8e:e5:c9:05:21:dd:97:d9:1f:
dd:0b:60:a7:a3:ad:c7:58:1b:06:13:af:a1:a3:9f:
5e:08:90:63:66:ed:ae:e8:31:e9:a4:9f:34:44:11:
0f:cd:52:85:cb:d0:9c:d7:ae:59:9b:3c:c2:53:db:
0b:a8:99:d5:fc:e0:8e:c4:f7:69:49:49:11:14:d9:
5f:15:c0:ed:88:fe:81:d2:93:a4:c0:46:dc:ca:f9:
9f:a2:24:a6:36:bc:3d:ea:e5:14:79:3e:1c:f7:df:
d0:20:af:bf:3f:bb:7e:95:5c:61:54:f4:be:36:80:
b8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6D:12:70:0D:2A:5E:37:CE:DF:C4:50:48:AE:6F:6C:2D:BC:61:2A
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/p20ScA0qXjfO38RQSK5vbC28YSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
90:a0:a7:8f:f2:02:4e:b3:de:d5:00:c5:1b:2a:0b:74:8c:63:
8b:da:46:19:52:e5:89:b1:5d:ed:d5:69:e7:43:73:ad:52:ab:
66:42:18:74:df:13:07:68:24:32:f2:86:c1:6e:fe:ea:71:19:
5f:26:66:dc:75:3e:6d:db:3c:e8:24:90:25:60:c9:d2:5e:7a:
d1:18:e4:a2:12:a2:2a:29:f5:1f:93:2b:ac:f9:68:a3:56:cf:
c6:70:e7:5d:46:4d:c5:17:d5:20:58:6c:37:c8:86:ed:31:be:
21:37:49:f0:d3:49:8e:45:ec:ae:89:cb:73:2f:10:fe:33:33:
e2:66:bc:7c:8b:82:58:31:06:bb:bd:c4:d9:c7:d5:89:67:00:
60:ff:a3:41:75:ad:b5:53:e6:c5:6f:d4:ac:c9:cf:24:ce:2a:
6a:01:c0:5b:9d:79:9b:e9:bf:23:b9:a0:27:0f:dd:0b:a5:8a:
e3:55:78:d5:08:00:74:25:58:f4:0f:cb:7a:c0:6b:d4:e7:9c:
76:6e:54:20:89:42:b8:6d:8f:4d:74:26:c4:9a:07:90:9d:b1:
bb:91:b0:c2:b0:60:ec:e8:44:e0:74:a5:56:54:f6:fd:b3:9c:
97:80:56:62:68:17:c9:d3:f9:ac:5c:61:fd:12:67:29:67:a1:
8f:ed:61:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:15:29 2025 by rpki-client