Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/gbPG2km3pofjP5PAcCU3CR_Tn5Y.roa
File: gbPG2km3pofjP5PAcCU3CR_Tn5Y.roa (raw, json)
Hash identifier: FGPdHIjRG7xzl1Muhoaj4DORss0UUUUOXDAMNaUZpOI=
Subject key identifier: 81:B3:C6:DA:49:B7:A6:87:E3:3F:93:C0:70:25:37:09:1F:D3:9F:96
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018FB989BCE779558845566135EDA12B253B
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/gbPG2km3pofjP5PAcCU3CR_Tn5Y.roa
Signing time: Mon 27 May 2024 10:12:42 +0000
ROA not before: Mon 27 May 2024 10:12:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30860
IP address blocks: 82.115.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:89:bc:e7:79:55:88:45:56:61:35:ed:a1:2b:25:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: May 27 10:12:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81b3c6da49b7a687e33f93c0702537091fd39f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:8f:20:2d:ff:87:11:b7:be:db:bd:7f:c4:
74:d9:31:45:ca:ab:76:cc:0a:fb:e1:f3:ac:16:8a:
ec:c1:af:49:89:a6:87:11:f7:d9:85:34:dd:e0:f1:
b6:08:33:d8:81:18:6e:86:47:23:35:1b:f6:9f:33:
a8:22:64:64:24:e3:6e:4c:68:89:99:4e:73:9e:8c:
ba:be:f5:83:e9:ce:36:51:51:d8:9e:80:3c:b6:05:
06:88:e3:21:41:2d:3d:b8:e8:99:93:f1:7b:31:2a:
1d:9a:bf:01:98:df:60:12:df:8d:7f:58:af:19:13:
5c:3c:85:ce:a3:21:49:11:e8:fa:b9:c6:21:cf:dd:
00:f0:8e:74:8e:c2:e7:e1:b2:5f:81:52:e4:c2:08:
14:7e:49:26:9b:7c:bb:98:eb:b1:69:4e:2e:46:ed:
1b:30:cc:f4:2c:9b:72:3e:12:50:d0:a0:97:f6:3b:
9d:c8:4d:14:29:05:77:07:ff:94:f5:31:41:62:93:
ec:e2:d4:cb:9a:bf:93:43:86:69:f0:79:8a:7e:c3:
5a:ef:9f:e1:8a:b4:48:53:1e:e3:cc:5f:42:42:1d:
0e:8e:e5:ef:3c:d7:33:8d:7a:a3:fc:d9:e8:9b:ba:
70:32:cc:5e:f3:ce:5d:91:a1:8e:fc:bf:83:28:d6:
74:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B3:C6:DA:49:B7:A6:87:E3:3F:93:C0:70:25:37:09:1F:D3:9F:96
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/gbPG2km3pofjP5PAcCU3CR_Tn5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.0.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:40:ca:0c:c4:3c:83:09:9b:3e:7e:86:c9:88:1c:dc:93:7d:
ff:8a:dd:11:d3:79:05:c5:4f:35:a1:8f:40:4d:52:cf:a4:8a:
70:4e:8b:59:6f:26:a5:f8:f6:3f:6f:4b:eb:84:c0:bc:22:1e:
dc:1c:d1:a8:f1:b2:f6:25:1a:56:d5:0c:48:4e:5c:44:67:b0:
97:65:b3:58:f4:ed:d3:71:31:b3:61:0c:3b:bf:5a:80:b3:14:
75:2f:fa:c6:93:d0:6f:59:40:7a:5f:8e:53:38:77:27:78:6a:
bf:0e:49:20:86:7c:bb:ff:09:e8:1a:9c:8a:bf:1b:e1:72:5c:
26:79:b7:f1:25:7c:0d:97:61:57:99:f5:f0:1d:4b:0a:fe:c2:
9c:36:51:e1:47:a7:0d:4f:e4:f3:81:f2:b1:07:20:7a:30:5a:
5f:5f:54:90:05:15:9e:04:ed:18:7a:b3:3e:42:79:92:93:67:
1d:8f:15:f9:72:fa:f1:c4:a9:0f:8f:c7:7f:8e:7c:a8:3e:0c:
e7:f0:9a:49:3a:8d:07:a0:29:dc:8c:23:1c:df:8e:00:73:aa:
46:cf:b7:57:a5:ee:db:69:a6:89:9b:08:c5:d0:25:ce:27:26:
f3:1c:64:98:c9:4b:86:8b:a1:c8:c8:15:a6:ee:07:bc:e2:c5:
5c:f0:a8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:58 2025 by rpki-client