Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/uADPACl4c-3yYpySxAYR1L0TQFM.roa
File: uADPACl4c-3yYpySxAYR1L0TQFM.roa (raw, json)
Hash identifier: dPM2uKrswICpeJ9fyjjSPWX9nOaT5TpNaMLMt0lCDEc=
Subject key identifier: B8:00:CF:00:29:78:73:ED:F2:62:9C:92:C4:06:11:D4:BD:13:40:53
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEFF8488E6B998DB0316D622E69048
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/uADPACl4c-3yYpySxAYR1L0TQFM.roa
Signing time: Tue 26 Nov 2024 13:35:19 +0000
ROA not before: Tue 26 Nov 2024 13:35:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396586
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:ff:84:88:e6:b9:98:db:03:16:d6:22:e6:90:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b800cf00297873edf2629c92c40611d4bd134053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:47:d9:4e:82:7e:45:c4:7c:59:c1:40:c0:
36:f3:dd:85:9d:01:b3:b9:76:0b:aa:50:88:55:9b:
50:35:c2:eb:b7:60:4b:97:6c:07:78:b5:8c:61:20:
46:2e:0f:fa:b2:85:64:b4:ce:db:22:60:d1:c0:4a:
8d:75:3a:98:66:79:23:aa:ac:75:d0:d6:c8:54:8d:
1f:8f:a0:46:fe:24:48:e7:84:4c:26:d1:ef:1c:98:
ca:30:29:41:26:c5:2a:f4:51:72:2e:07:b1:d6:68:
9d:74:8f:4e:3c:70:f8:43:50:a9:7c:df:21:0a:02:
02:3e:34:76:a6:42:b4:b2:06:a5:a6:45:13:7f:57:
d9:44:7a:58:d3:fe:20:e9:d4:95:a5:a5:ee:bb:7e:
df:ca:e3:b3:d9:b7:c2:7f:94:3f:a6:0e:92:0e:ce:
26:a8:2e:71:3c:cb:94:9f:b2:f0:e6:66:c0:32:e1:
9c:13:59:db:2b:b4:c4:b8:6b:5e:26:c4:4a:4c:7c:
e9:7a:70:78:5c:19:02:f7:07:94:6f:74:90:ff:af:
0e:78:0c:1e:6f:1d:46:af:91:ea:53:e8:c6:46:e1:
c9:7f:0c:d4:ed:e6:b7:01:ef:33:56:6c:b5:5a:5a:
e3:0b:ff:a0:e4:17:04:0b:95:e7:1e:bb:b5:b1:ff:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:00:CF:00:29:78:73:ED:F2:62:9C:92:C4:06:11:D4:BD:13:40:53
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/uADPACl4c-3yYpySxAYR1L0TQFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
2c:ad:57:3f:44:b6:f3:42:0b:8e:27:89:dd:28:3f:8f:f9:11:
82:5e:ce:05:4f:df:38:91:80:e2:8d:e7:de:f1:28:4e:ae:40:
55:62:3b:a9:3f:b8:75:05:87:e2:e6:67:62:fd:f4:b7:79:d7:
d8:92:fa:a3:f0:a1:69:99:80:70:3c:a9:ce:95:05:ff:ee:e8:
2f:9c:e8:75:d8:cd:01:78:0d:20:cc:a6:1f:17:da:99:f5:74:
2b:a7:30:ac:88:93:13:95:f5:2f:f1:78:b7:4a:0b:ce:54:87:
c1:77:5c:80:0a:29:4a:16:a1:0f:02:69:16:8e:02:61:3c:3f:
68:dd:e3:89:75:6b:ad:cc:4f:e1:ec:02:ea:aa:62:93:df:03:
51:df:a9:7c:0c:37:6d:34:8a:42:6a:73:cc:61:60:c9:50:6b:
54:2a:a7:24:29:f4:77:d4:7e:a2:d8:1a:82:ae:c0:40:1a:90:
a0:f8:af:8c:ce:6c:79:cc:d6:03:8b:bb:f9:7d:61:02:9d:2b:
f6:ab:32:71:c1:f1:b6:3b:77:a4:03:0b:e4:69:60:4a:f7:bd:
95:54:cb:0d:5d:82:ff:93:7b:61:f6:5e:fc:97:7b:b1:1e:fb:
fc:c2:5a:2d:60:54:df:d4:d3:07:84:33:33:5b:2b:f8:0a:d5:
3a:15:10:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:51 2025 by rpki-client