Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/gg1HMbG0dzq2upoM0flINgeVXVI.roa
File: gg1HMbG0dzq2upoM0flINgeVXVI.roa (raw, json)
Hash identifier: t65SibLdwnynhiukMJpvPzwWSzxYSoj24RsRfXxuqtE=
Subject key identifier: 82:0D:47:31:B1:B4:77:3A:B6:BA:9A:0C:D1:F9:48:36:07:95:5D:52
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 018CC4934075341D9C5D5473A61D15A6D39A
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/gg1HMbG0dzq2upoM0flINgeVXVI.roa
Signing time: Mon 01 Jan 2024 10:30:33 +0000
ROA not before: Mon 01 Jan 2024 10:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205379
IP address blocks: 145.14.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:40:75:34:1d:9c:5d:54:73:a6:1d:15:a6:d3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 1 10:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=820d4731b1b4773ab6ba9a0cd1f9483607955d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:62:87:70:eb:73:0d:a1:5e:06:5f:aa:44:60:
94:87:21:ba:ec:3d:ec:00:58:d6:dd:0c:83:bb:35:
4d:86:e7:ae:93:71:59:b9:9a:1e:c3:a2:7d:69:5b:
6e:54:98:49:6f:e3:d0:4f:80:7b:af:2f:b5:a8:c8:
e7:c2:83:93:0c:23:1f:0b:d8:16:b6:c0:05:38:10:
a1:ee:68:9f:86:b7:6d:ad:b5:61:4d:66:40:61:98:
25:fa:ab:06:ee:5c:b2:99:50:e9:ee:53:69:db:b2:
c1:cc:a9:1e:d8:76:45:ce:2a:a8:22:73:a4:84:a9:
d2:5d:8c:db:a8:0a:d5:84:15:27:81:05:0d:50:58:
26:a7:58:48:a1:29:cd:4f:f9:d2:4d:8a:ff:82:6c:
2e:d0:ee:13:fb:ff:1c:bb:50:9f:37:05:53:7d:ae:
50:7f:4a:fc:db:c9:6c:6a:a5:69:f9:a0:4a:4d:7c:
3a:0f:2c:51:9d:0b:a1:57:2b:df:31:2d:21:46:38:
80:36:fe:1d:9c:40:a6:40:7e:fc:23:5e:fe:47:99:
82:3c:ee:8b:a2:d3:cf:76:30:29:ca:a3:d6:4e:c6:
fd:08:54:bd:4f:34:2f:29:26:5f:84:3e:30:7e:95:
b7:06:2b:df:69:f0:fb:9a:fd:e2:e6:77:b4:bc:a8:
a6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0D:47:31:B1:B4:77:3A:B6:BA:9A:0C:D1:F9:48:36:07:95:5D:52
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/gg1HMbG0dzq2upoM0flINgeVXVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.14.7.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:61:d8:33:bb:79:53:cc:31:54:96:2c:25:cf:43:a1:7f:d5:
38:24:17:0c:49:2f:7a:94:d2:1a:fd:00:3a:2a:5f:4a:fe:df:
9c:eb:5d:82:97:a6:8e:5b:74:e8:2a:bc:8c:25:6a:61:6b:d4:
d9:fb:62:44:23:59:e0:45:ce:6b:5b:47:9c:e4:21:b1:00:09:
81:a2:c0:e7:b0:58:31:16:fb:25:17:f7:07:79:3b:6c:de:cc:
71:26:9c:6a:8f:8f:09:a9:4c:e2:d1:79:f7:fc:2b:b8:77:8f:
59:68:23:da:71:51:1f:6d:bc:3e:a9:e2:9d:c8:04:e1:f4:56:
84:97:a7:03:06:cf:1c:f5:88:46:88:25:21:bb:8f:03:c1:b0:
da:10:fa:6d:8c:1a:c3:84:63:41:0d:39:da:b7:4d:5a:24:5b:
8c:ac:20:98:93:3c:5c:00:e2:2d:cd:46:61:ca:44:ad:f0:80:
26:e8:c9:66:37:96:75:b1:2f:ee:b9:4a:46:ec:d8:f1:ec:ed:
cb:e5:f8:40:a4:93:08:d8:ee:a5:da:ca:00:4c:22:0b:8b:af:
5b:82:08:7a:8b:00:1e:5b:a3:da:0e:a3:03:b4:af:19:dd:51:
a7:86:70:fb:22:ff:f5:dd:23:4d:e1:e5:9d:f9:9d:85:17:b2:
8b:25:93:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:39:07 2025 by rpki-client