Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/yQyrYgSRAB7zomIn94bcb_T3bKY.roa
File: yQyrYgSRAB7zomIn94bcb_T3bKY.roa (raw, json)
Hash identifier: Wi98a/LE3XUhX/o3M8Nu83OJ+a05hka5gx96Vj+Dyu0=
Subject key identifier: C9:0C:AB:62:04:91:00:1E:F3:A2:62:27:F7:86:DC:6F:F4:F7:6C:A6
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEF5E069BD889B433F7AE19FD98BB3
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/yQyrYgSRAB7zomIn94bcb_T3bKY.roa
Signing time: Tue 26 Nov 2024 13:35:16 +0000
ROA not before: Tue 26 Nov 2024 13:35:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396567
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:f5:e0:69:bd:88:9b:43:3f:7a:e1:9f:d9:8b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c90cab620491001ef3a26227f786dc6ff4f76ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:62:4a:97:b1:3c:2a:a9:ec:a9:8a:54:b6:
16:c8:de:4c:a9:0a:dc:99:6b:cd:bd:d3:c7:21:e1:
a2:f0:1f:3d:b7:25:5b:05:e3:aa:a4:cd:1a:1f:95:
4f:3b:77:f8:00:2e:8a:94:28:1d:28:4c:f8:ab:56:
3e:0a:0f:43:85:c1:0f:c7:3f:d9:53:26:f6:94:bb:
0a:73:32:db:b4:87:57:37:98:74:1c:42:2d:09:4b:
cf:76:58:f1:6e:12:24:06:2b:d1:2e:d2:5c:19:99:
1d:b4:64:53:68:12:c8:3a:a8:ac:58:5f:03:c6:40:
31:a3:ca:ae:d2:c8:f5:d7:79:1e:a1:f5:25:87:ec:
6e:63:f2:46:9b:23:c7:73:31:6e:cb:89:3e:b2:c7:
56:ee:48:6a:1c:d0:b6:87:ac:82:00:ce:79:44:a4:
a7:0f:12:67:69:53:42:cb:1e:9c:df:68:8d:58:76:
60:fa:bd:d1:3c:a5:6f:9d:49:18:fd:17:34:9b:2e:
25:9f:8a:b4:98:93:a4:34:7c:f9:10:0d:04:fa:92:
11:c9:b4:1c:c1:a1:a8:1e:d6:94:5d:a7:ba:98:9b:
00:6f:34:bd:00:9d:19:52:bc:6a:98:53:cb:18:5b:
7f:68:ab:18:96:2c:b2:c4:26:22:4b:6d:0c:6e:b3:
46:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0C:AB:62:04:91:00:1E:F3:A2:62:27:F7:86:DC:6F:F4:F7:6C:A6
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/yQyrYgSRAB7zomIn94bcb_T3bKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
bf:15:36:92:fb:7b:02:61:3d:b5:2f:b0:de:67:b4:d8:7c:8d:
53:66:ce:ed:cd:07:83:ae:ed:ea:02:02:8c:46:15:c3:49:f7:
8d:a2:b6:56:1a:ad:61:66:00:2a:1c:94:ee:30:f0:62:b3:13:
c2:5d:66:41:bf:9b:e1:18:91:27:7a:7a:8d:a5:8c:fc:08:82:
50:cb:44:19:c2:02:ca:c7:b2:72:40:08:3d:01:76:76:3c:bc:
30:21:05:29:ea:b4:58:a7:75:e9:f1:fb:ca:7f:af:93:26:a8:
da:c3:42:cb:45:ad:85:f9:57:f0:1c:d4:ff:10:50:0c:b9:58:
87:f4:bd:27:02:49:a2:0a:45:d5:c6:0e:95:9d:05:57:15:15:
c7:fc:27:d8:d8:33:ad:ad:24:5c:40:24:e4:bd:ca:eb:e2:17:
75:c2:da:90:0e:cb:9e:28:e3:73:fe:82:2b:44:39:3f:bd:0a:
9d:13:69:2a:0c:92:c0:d2:0d:47:a7:34:03:16:ec:54:17:3e:
e6:83:c6:65:1f:ed:e1:44:b6:70:ac:a6:a3:de:85:88:5e:5a:
3c:56:41:02:a7:6d:7f:27:d3:0c:ae:78:6b:4d:19:c6:19:27:
37:81:f6:b5:2a:ce:34:06:2a:82:6a:25:9d:ac:ca:51:1e:d5:
73:44:9a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:17 2025 by rpki-client