Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/GbCIK7FAxU6HdVR0UVf5TzY4fVc.roa
File: GbCIK7FAxU6HdVR0UVf5TzY4fVc.roa (raw, json)
Hash identifier: wsC5YiVB6Z3uQU9iEeF+m3j04hEK3NbJ8QUHKPx3d8M=
Subject key identifier: 19:B0:88:2B:B1:40:C5:4E:87:75:54:74:51:57:F9:4F:36:38:7D:57
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 0192B5C7B65A7A1CF7FA419A2FFFCF8BAE61
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/GbCIK7FAxU6HdVR0UVf5TzY4fVc.roa
Signing time: Tue 22 Oct 2024 19:50:17 +0000
ROA not before: Tue 22 Oct 2024 19:50:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 89.249.201.0/24 maxlen: 24
185.21.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 13:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b5:c7:b6:5a:7a:1c:f7:fa:41:9a:2f:ff:cf:8b:ae:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Oct 22 19:50:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19b0882bb140c54e877554745157f94f36387d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:49:d6:d7:07:c4:80:20:4f:92:1d:56:48:
55:15:e9:f2:eb:f0:2f:67:cb:dc:86:65:70:76:26:
31:50:e6:d5:60:6c:78:93:d2:fe:0d:97:69:db:95:
7b:db:a0:91:bc:87:49:a8:47:31:f5:41:95:e4:f6:
b8:67:f1:50:14:4f:de:64:9a:b2:fd:1c:ca:06:4d:
09:79:73:64:98:d6:31:93:be:3a:1e:e3:d0:b2:a1:
05:6d:c9:51:fc:b0:a9:2e:e4:3c:df:fe:f1:e2:10:
0b:df:b8:8e:f7:60:8a:0f:b0:6f:b8:ed:b2:1f:b9:
c3:d8:b5:de:a9:d3:e7:28:2b:bc:f6:86:52:18:c1:
67:78:57:ed:f2:74:2b:e0:1e:52:5e:ae:d4:a9:3b:
2b:ed:9a:5d:a4:cd:0d:44:2f:72:56:70:a7:f5:37:
e0:b2:00:2d:31:80:ec:41:c8:a2:50:82:2b:26:69:
bf:9a:00:2d:bd:d2:d5:c6:e2:56:41:de:07:41:c9:
f7:65:03:34:59:cf:bf:6d:56:b4:69:cb:cc:a5:d5:
b5:a4:b0:a3:31:4c:94:50:06:ab:9a:ab:bf:1e:45:
dd:67:6d:3d:89:7d:75:5a:27:b5:01:71:de:e4:5d:
08:6b:05:0f:4b:86:b5:89:4d:ac:e1:6f:cc:5d:45:
3d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B0:88:2B:B1:40:C5:4E:87:75:54:74:51:57:F9:4F:36:38:7D:57
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/GbCIK7FAxU6HdVR0UVf5TzY4fVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.201.0/24
185.21.253.0/24
Signature Algorithm: sha256WithRSAEncryption
82:63:b7:4b:31:df:50:ad:60:c0:92:03:b9:90:85:d5:fc:18:
63:18:69:d5:4e:e9:77:78:c2:8d:05:e9:97:fe:d4:96:12:db:
e6:ee:4d:01:ea:e7:48:a6:07:3f:fb:ab:5d:6c:63:82:68:fa:
08:ea:85:f3:1a:ab:b0:31:e1:0a:73:bc:d5:56:bb:15:08:4f:
27:d2:ec:45:29:5d:a6:4d:af:78:b4:42:64:e0:99:dc:77:13:
4e:08:ad:67:50:94:51:f9:05:d8:99:23:1c:de:26:2d:ba:56:
9d:ee:2e:61:32:99:2b:ee:44:0a:4e:7a:31:34:f5:f6:11:bf:
d9:cb:52:39:d8:a2:b0:94:cc:3e:22:91:0a:0e:24:a9:1b:43:
b6:44:a5:4b:37:11:19:96:1a:83:19:9a:7e:86:34:98:36:b3:
0b:bb:f8:17:1a:85:56:ea:43:fb:e5:42:91:d2:bf:e6:a3:d4:
bb:96:a7:b6:fc:a3:7d:b9:cd:33:96:36:27:84:39:6e:be:ca:
f8:30:3c:07:fe:a2:e7:63:04:f1:5a:40:20:8d:5a:f4:c8:01:
f6:20:04:d3:37:cf:4f:ee:b0:59:55:cd:e7:f9:95:50:8b:01:
35:6b:d4:18:9d:87:ed:e3:31:24:b2:97:9c:2c:59:bc:21:6b:
41:6f:5b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:55 2025 by rpki-client