Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/uvOdLBEKoGZwQh6qXs2wB0-ZDTY.roa
File: uvOdLBEKoGZwQh6qXs2wB0-ZDTY.roa (raw, json)
Hash identifier: Mts5dEU28ThA5RohbmYKpIOx0L5Ut7BVV1D8P5DMhms=
Subject key identifier: BA:F3:9D:2C:11:0A:A0:66:70:42:1E:AA:5E:CD:B0:07:4F:99:0D:36
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF00D4044372EB02C68B925508786A
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/uvOdLBEKoGZwQh6qXs2wB0-ZDTY.roa
Signing time: Tue 26 Nov 2024 13:35:19 +0000
ROA not before: Tue 26 Nov 2024 13:35:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396589
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:00:d4:04:43:72:eb:02:c6:8b:92:55:08:78:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=baf39d2c110aa06670421eaa5ecdb0074f990d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:9f:2c:f8:5d:cb:12:66:5c:10:73:ff:f4:
b6:af:62:91:97:50:ce:4c:3e:43:9e:37:be:9b:66:
46:d1:c6:2f:1a:c2:db:57:88:7c:8b:62:0d:5a:00:
2d:3d:68:eb:5b:ba:c4:a4:c0:63:14:a6:9b:85:34:
81:7e:0b:76:b4:92:bc:34:93:4e:02:10:2e:63:06:
bd:c7:c6:50:9a:77:75:de:96:69:a7:aa:f2:bb:8d:
5b:67:2c:46:de:10:7e:74:33:46:ca:e6:8e:6c:2e:
be:f2:97:60:ab:f9:b6:fe:19:03:a5:c4:2a:35:77:
44:c0:de:93:85:eb:5e:08:99:3a:2d:c4:b0:ff:eb:
b4:97:2a:f3:65:1e:5e:c4:91:f1:50:7b:26:14:a6:
bd:2e:a3:30:c7:65:eb:8a:b5:9d:80:f4:06:83:a0:
70:9f:4a:93:5e:71:a3:64:d8:1d:7e:f1:f6:4c:bb:
70:81:28:95:77:0d:c4:03:9c:ac:f0:20:41:ff:8e:
8f:1a:ce:68:97:f2:6e:88:46:c2:49:e7:33:46:eb:
fe:ac:66:1a:a8:71:2c:2f:e0:3e:e0:c7:d7:4e:32:
f6:08:a5:5e:bc:7c:d1:0d:28:40:30:f4:ed:27:34:
cc:84:94:41:04:94:27:90:46:a1:72:79:34:0a:02:
e2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F3:9D:2C:11:0A:A0:66:70:42:1E:AA:5E:CD:B0:07:4F:99:0D:36
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/uvOdLBEKoGZwQh6qXs2wB0-ZDTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
82:d0:8b:c0:14:fb:a9:12:55:bd:08:2a:8d:b6:01:2c:1b:06:
70:7b:d2:67:54:75:1b:7b:4b:e2:97:33:d5:8d:19:bd:0a:27:
50:2d:b4:ab:f4:31:e6:b4:13:de:ea:6f:48:8c:f3:61:0c:c8:
43:ec:41:4e:b4:41:6d:5e:27:48:43:97:40:02:0f:54:fe:e1:
28:06:ac:85:94:98:3f:b2:d5:d4:1d:64:9f:3b:b7:e3:08:d5:
66:11:60:8f:ee:a3:ab:99:da:af:b5:0b:60:ab:55:04:9c:ab:
c3:a6:46:dd:66:a6:4a:eb:16:50:d9:74:66:79:aa:17:c8:c7:
c6:17:ca:1c:0f:e9:0c:6e:e9:55:54:cd:f0:57:36:cc:bd:00:
be:3e:2a:09:fe:14:11:ea:3b:45:f1:a6:a8:1d:11:f6:61:7d:
1b:26:74:26:9c:01:bc:00:ee:62:75:2c:1a:94:e7:8a:53:7a:
7d:85:86:9c:b7:12:b2:38:0a:15:20:33:79:f6:1a:45:f6:76:
8d:29:5a:4f:ef:64:21:74:e6:2b:5c:44:07:b2:2c:03:aa:4f:
9f:56:49:5f:11:0e:1b:aa:37:fd:05:ac:74:f9:cf:51:ce:e2:
61:d9:bd:6b:b8:2d:d7:00:5d:1d:e3:04:3e:01:7a:e9:d3:b1:
a6:ea:08:c3
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZNorwDUBENy6wLGi5JVCHhqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQxMTI2MTMzNTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWYzOWQyYzExMGFhMDY2NzA0MjFlYWE1ZWNkYjAwNzRmOTkwZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOifLPhdyxJmXBBz//S2r2KRl1DO
TD5Dnje+m2ZG0cYvGsLbV4h8i2INWgAtPWjrW7rEpMBjFKabhTSBfgt2tJK8NJNO
AhAuYwa9x8ZQmnd13pZpp6ryu41bZyxG3hB+dDNGyuaObC6+8pdgq/m2/hkDpcQq
NXdEwN6TheteCJk6LcSw/+u0lyrzZR5exJHxUHsmFKa9LqMwx2XrirWdgPQGg6Bw
n0qTXnGjZNgdfvH2TLtwgSiVdw3EA5ys8CBB/46PGs5ol/JuiEbCSeczRuv+rGYa
qHEsL+A+4MfXTjL2CKVevHzRDShAMPTtJzTMhJRBBJQnkEahcnk0CgLiMwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFLrznSwRCqBmcEIeql7NsAdPmQ02MB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvdXZPZExCRUtvR1p3UWg2cVhzMndCMC1aRFRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAILQi8AU+6kSVb0IKo22ASwbBnB70mdU
dRt7S+KXM9WNGb0KJ1AttKv0Mea0E97qb0iM82EMyEPsQU60QW1eJ0hDl0ACD1T+
4SgGrIWUmD+y1dQdZJ87t+MI1WYRYI/uo6uZ2q+1C2CrVQScq8OmRt1mpkrrFlDZ
dGZ5qhfIx8YXyhwP6Qxu6VVUzfBXNsy9AL4+Kgn+FBHqO0XxpqgdEfZhfRsmdCac
AbwA7mJ1LBqU54pTen2Fhpy3ErI4ChUgM3n2GkX2do0pWk/vZCF05itcRAeyLAOq
T59WSV8RDhuqN/0FrHT5z1HO4mHZvWu4LdcAXR3jBD4BeunTsabqCMM=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:58 2025 by rpki-client