Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/pOidobn015GvZnzJ9dcgoR6BFlM.roa
File: pOidobn015GvZnzJ9dcgoR6BFlM.roa (raw, json)
Hash identifier: Qv1pVS7pja1ALNgrxFwakarm50L+/6UYQcndFPjxggM=
Subject key identifier: A4:E8:9D:A1:B9:F4:D7:91:AF:66:7C:C9:F5:D7:20:A1:1E:81:16:53
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 018E5BF98D8209CB9A80BF152AA0B690DFFF
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/pOidobn015GvZnzJ9dcgoR6BFlM.roa
Signing time: Wed 20 Mar 2024 13:07:45 +0000
ROA not before: Wed 20 Mar 2024 13:07:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7342
IP address blocks: 81.19.193.0/24 maxlen: 24
81.19.206.0/24 maxlen: 24
81.19.207.0/24 maxlen: 24
217.30.81.0/24 maxlen: 24
217.30.84.0/24 maxlen: 24
217.30.87.0/24 maxlen: 24
2a10:eec0:3::/48 maxlen: 48
2a10:eec0:7::/48 maxlen: 48
2a10:eec0:c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 12:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5b:f9:8d:82:09:cb:9a:80:bf:15:2a:a0:b6:90:df:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 20 13:07:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4e89da1b9f4d791af667cc9f5d720a11e811653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:80:69:98:9d:91:72:f1:9e:97:e2:27:0d:bf:
85:97:1c:10:c4:b1:3d:45:33:0c:dc:81:15:2e:53:
03:4e:10:c6:90:86:db:a5:e1:7f:96:02:35:88:0c:
72:23:c1:4b:d3:df:c8:05:d3:d1:c9:05:7e:05:32:
9b:1d:c4:41:61:67:e1:d5:97:b3:eb:92:32:60:a3:
7f:d3:af:11:36:0c:48:84:7b:63:06:56:c3:7f:96:
79:e6:76:8c:56:1b:45:18:05:88:76:18:6e:8d:11:
d5:5c:5e:24:3c:4d:13:6e:83:78:13:33:0d:10:b3:
47:b8:a8:b8:30:ed:e1:66:8a:5c:10:5b:13:7b:38:
08:96:9e:b1:d5:6f:3b:b4:19:b1:43:89:74:7e:de:
5e:fe:ab:11:b2:33:41:b3:6e:24:f8:e6:59:68:ae:
0b:08:00:52:a8:be:28:98:81:05:40:f7:63:2c:7f:
8a:c9:19:50:65:6c:64:4a:0b:85:bc:d6:83:f8:67:
0e:7d:c7:66:32:c7:83:96:90:1c:25:46:23:a6:f5:
25:2a:13:e3:4f:0d:39:fc:81:5d:65:eb:f4:72:ba:
f7:34:db:4e:49:be:39:59:6e:e3:2c:bb:a7:55:51:
98:12:ed:7f:0e:2d:d7:58:2c:89:da:b8:0a:b6:3d:
9c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E8:9D:A1:B9:F4:D7:91:AF:66:7C:C9:F5:D7:20:A1:1E:81:16:53
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/pOidobn015GvZnzJ9dcgoR6BFlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.193.0/24
81.19.206.0/23
217.30.81.0/24
217.30.84.0/24
217.30.87.0/24
IPv6:
2a10:eec0:3::/48
2a10:eec0:7::/48
2a10:eec0:c::/48
Signature Algorithm: sha256WithRSAEncryption
80:3c:5a:be:f2:22:2c:eb:0a:ed:2d:40:fe:bb:32:90:87:82:
94:23:53:e5:c5:59:c6:2e:20:72:08:ad:35:2b:7a:88:45:12:
83:ed:ef:94:8a:45:e6:df:37:6d:b2:b7:cd:c5:8d:06:d5:7c:
d0:e4:8f:38:e6:28:33:98:37:80:55:67:51:bf:0f:7c:9e:e1:
5d:dc:56:42:de:cf:01:fd:e4:4a:03:21:aa:28:ff:f4:6a:cb:
54:bd:e2:6e:df:ea:49:94:e3:41:f3:a1:cf:da:6b:a2:43:af:
f7:6a:16:fc:7d:a5:49:17:b9:bf:c7:c9:b3:7d:db:c7:06:e3:
73:19:a5:a1:34:78:0f:ee:63:bb:d8:f8:8a:3a:31:cc:ee:50:
09:48:c7:49:2a:1c:b6:d5:85:d7:61:37:18:91:a4:32:c9:f5:
3e:a7:92:ad:f1:d4:2b:6f:ef:6f:97:58:e1:cc:e7:b1:dc:c0:
a8:59:64:ee:26:a0:fb:d3:16:5b:78:bc:c3:dd:51:07:a1:f9:
5f:63:a5:11:aa:44:e1:6d:4d:0b:1d:1f:08:92:1f:6a:68:09:
c3:36:94:cc:9b:13:18:c4:3a:84:f3:7e:ac:29:be:1c:a8:a2:
d1:19:cd:55:24:c6:9b:ed:f0:2b:b1:ee:e3:34:47:f8:f8:e8:
60:4f:86:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:02 2025 by rpki-client