Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/sYITl7EEXd53QikQeqW2hA2DKRc.roa
File: sYITl7EEXd53QikQeqW2hA2DKRc.roa (raw, json)
Hash identifier: 4HICQv+GC4sydohOmqiTBVhZr7G8jkwpmerlb+B3NRk=
Subject key identifier: B1:82:13:97:B1:04:5D:DE:77:42:29:10:7A:A5:B6:84:0D:83:29:17
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F6257E3387EE536452B5D4B3C7B2916
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/sYITl7EEXd53QikQeqW2hA2DKRc.roa
Signing time: Tue 25 Jun 2024 12:32:43 +0000
ROA not before: Tue 25 Jun 2024 12:32:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396581
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:57:e3:38:7e:e5:36:45:2b:5d:4b:3c:7b:29:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1821397b1045dde774229107aa5b6840d832917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e7:d1:b0:43:ba:f1:a8:7a:bd:a9:79:22:00:
ae:df:45:86:83:27:59:12:d4:0d:c6:20:1b:ae:d1:
7f:24:49:6b:7d:b1:3e:94:b2:93:45:fd:6d:a7:aa:
10:9e:5f:fd:1d:25:c4:a4:48:99:53:3f:68:b2:44:
45:d8:6f:83:fb:9f:6f:1b:c2:2a:31:bd:e2:b0:d4:
0b:d2:f1:a6:52:a0:e3:ae:14:9e:6f:89:94:df:4c:
69:ed:a4:98:94:f1:cb:28:09:22:91:0f:bd:d2:be:
35:f4:23:6f:41:2e:73:db:1f:20:3b:17:14:be:ad:
5f:8d:15:80:16:ac:c6:74:a9:b7:22:0c:90:7e:13:
3d:84:a6:fa:91:62:b3:0a:ab:c4:1f:cb:f3:02:e7:
23:8b:f3:b0:70:9f:7d:21:d9:0e:43:64:c0:cc:e3:
51:0f:73:92:7c:cd:37:91:44:fb:69:f5:8a:f7:95:
8b:dd:92:2a:6b:68:6b:a3:13:52:1d:1d:c7:f7:d6:
97:fb:ab:ff:32:ee:02:ab:f3:1e:76:07:70:ec:e8:
13:01:07:b2:3a:cd:f7:a8:57:ab:a2:11:ba:0b:15:
5e:89:9c:f6:d1:ad:cb:ad:c7:02:45:a2:d2:8c:42:
98:f9:69:6d:6c:64:bf:f3:df:44:f5:61:db:e5:d5:
2c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:82:13:97:B1:04:5D:DE:77:42:29:10:7A:A5:B6:84:0D:83:29:17
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/sYITl7EEXd53QikQeqW2hA2DKRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
2d:df:bb:a3:bc:07:04:0e:ed:65:d7:b2:37:ee:b8:4c:02:69:
97:21:35:85:c0:c8:1b:f8:f8:06:97:c2:17:87:58:e8:a2:8f:
92:e8:2c:f0:38:79:63:a5:bd:45:44:56:09:e9:25:f9:3a:48:
22:f0:33:e0:4f:67:b5:a8:c6:f9:c5:7d:db:55:05:a7:7c:bb:
85:56:27:1e:3b:65:21:0c:0e:c0:f6:71:01:ac:09:68:72:13:
96:56:9c:37:b3:91:11:37:dc:c8:b5:12:59:36:fc:00:47:9f:
f5:53:3c:79:a8:b9:8f:03:ae:14:63:2a:f9:9d:40:03:58:e4:
41:e3:80:93:36:0d:e4:4d:62:1b:4a:49:cb:23:de:74:ed:b4:
5a:bc:c7:73:5f:e8:7e:06:f5:b5:14:71:d7:26:ca:4a:33:ac:
21:cb:ed:d6:58:61:f0:b2:39:2e:de:56:98:d7:d4:60:19:d1:
08:44:1e:02:be:19:38:2e:e2:f3:a2:04:64:0b:38:00:aa:7f:
a7:19:26:b7:4c:a7:7e:06:a8:75:33:2d:75:91:9e:e9:28:8d:
cd:5d:44:e7:56:5d:23:a7:78:9e:8c:ca:df:7d:5e:c7:44:6f:
0e:0f:47:8b:64:91:2c:3c:d1:e6:d0:c0:40:54:d8:f0:33:00:
4f:df:15:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:17 2025 by rpki-client