Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/vVl4iS9KU7_RTRU7XBL0DqRN1rM.roa
File: vVl4iS9KU7_RTRU7XBL0DqRN1rM.roa (raw, json)
Hash identifier: vCFTksku8UiaqjcZLt6VjCg5/ZXoK39257QaP42EjZU=
Subject key identifier: BD:59:78:89:2F:4A:53:BF:D1:4D:15:3B:5C:12:F4:0E:A4:4D:D6:B3
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F6266F17FF91E23E6CF1484DA52CC78
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/vVl4iS9KU7_RTRU7XBL0DqRN1rM.roa
Signing time: Tue 25 Jun 2024 12:32:47 +0000
ROA not before: Tue 25 Jun 2024 12:32:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396613
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:66:f1:7f:f9:1e:23:e6:cf:14:84:da:52:cc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd5978892f4a53bfd14d153b5c12f40ea44dd6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ad:5a:17:7f:be:24:50:cd:f4:fd:91:b5:da:
03:07:eb:c8:68:d0:bb:ae:b8:27:0a:d0:8b:8e:0e:
75:3d:25:06:cd:10:37:e0:4b:71:8e:ee:df:e0:6f:
0b:1c:b3:d1:af:1f:8a:22:65:b3:8d:93:6c:9b:36:
33:0a:eb:db:1f:79:98:b0:81:62:e8:83:dc:91:32:
d4:b8:1f:5d:54:ec:75:6d:33:fc:75:0f:7a:3d:6b:
b3:2e:99:d9:db:3f:97:16:cd:9a:25:f6:6e:29:cb:
92:5f:9d:e5:e0:91:4d:d1:bd:90:c4:bf:1d:99:0b:
41:cd:6a:41:e1:0b:0c:8c:d7:74:4b:9d:f9:94:72:
a1:a3:5e:80:54:84:c8:fc:c7:e4:33:23:c1:48:30:
29:0f:a0:02:a7:77:08:5a:6b:47:f0:5a:86:bc:72:
eb:28:65:36:cd:7e:c3:97:46:6d:61:1a:30:ef:76:
0d:3d:ff:c9:0f:a8:05:df:1d:dd:2a:af:9d:17:db:
86:df:ca:fc:ae:25:28:8b:08:f8:c8:9f:ec:6e:83:
32:65:a9:ab:05:3b:95:e9:f9:5f:04:82:69:db:46:
83:e4:3b:34:bd:ef:4d:b3:7d:7c:d5:74:b1:a9:58:
4b:3b:9f:cd:2d:b4:e6:6a:0a:76:3f:cd:26:4d:27:
32:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:59:78:89:2F:4A:53:BF:D1:4D:15:3B:5C:12:F4:0E:A4:4D:D6:B3
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/vVl4iS9KU7_RTRU7XBL0DqRN1rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
36:0b:1a:5c:5e:ca:a1:eb:96:4e:8c:55:70:38:fe:b5:11:fd:
d2:70:ea:6c:df:8b:f0:c9:18:0c:db:a8:ef:9e:6e:f0:30:7e:
ab:ca:7c:f6:e8:2d:e0:b4:66:b1:81:86:fc:19:db:6d:e7:c3:
5b:66:ac:37:0f:19:21:77:d9:2f:4a:8e:23:78:b9:7f:76:e7:
b9:37:2a:05:06:60:a3:1e:3d:a5:bd:c3:2a:e8:61:4a:e6:ab:
56:56:93:32:d8:bd:80:6a:1c:de:13:14:5a:f9:f3:eb:32:63:
cd:40:5a:ba:07:de:c2:c2:b4:80:a4:8c:04:c7:9a:7e:b0:f6:
18:9a:69:af:df:25:fc:a8:74:4a:1b:ae:27:85:90:85:b5:f7:
5a:85:f2:4a:bb:4d:07:f7:ac:03:19:06:f5:13:8b:d3:8a:3b:
1a:96:3f:da:08:53:61:96:2d:55:0c:0d:db:34:e9:7e:61:00:
36:8f:df:c9:3d:a0:a1:f5:ae:85:25:77:5b:12:02:b7:8d:bf:
16:15:ff:e4:91:2b:10:0d:b7:08:00:0d:d2:30:86:d0:25:a7:
e8:53:a3:64:a7:f5:6a:30:e7:11:3c:e7:f1:ae:16:22:67:cd:
4a:55:e8:85:c7:c9:92:46:6d:4c:0d:13:dd:19:ad:51:ba:d6:
40:3c:92:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:19 2025 by rpki-client