Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/GfqeBkj-i0tHKHL_OTPtZtB0SKc.roa
File: GfqeBkj-i0tHKHL_OTPtZtB0SKc.roa (raw, json)
Hash identifier: 0cCWBirIxAEQRFrsVKlqaaHtt074hhTP6vrVADFjJ3k=
Subject key identifier: 19:FA:9E:06:48:FE:8B:4B:47:28:72:FF:39:33:ED:66:D0:74:48:A7
Certificate issuer: /CN=a712593732dffe385e676e90568772306cdaeb72
Certificate serial: 018CC8DEAC1443178D0EB676D7A83A02928A
Authority key identifier: A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/GfqeBkj-i0tHKHL_OTPtZtB0SKc.roa
Signing time: Tue 02 Jan 2024 06:31:25 +0000
ROA not before: Tue 02 Jan 2024 06:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213072
IP address blocks: 194.60.80.0/24 maxlen: 24
2001:67c:c5c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:ac:14:43:17:8d:0e:b6:76:d7:a8:3a:02:92:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a712593732dffe385e676e90568772306cdaeb72
Validity
Not Before: Jan 2 06:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19fa9e0648fe8b4b472872ff3933ed66d07448a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:06:83:eb:af:b8:70:02:ee:8a:5a:2d:9c:00:
e4:62:35:6b:4f:3c:a1:90:cf:95:8e:0f:41:94:c2:
62:ae:25:c8:0e:3d:61:39:34:6e:74:de:4e:17:5e:
f9:5b:76:1b:b1:0b:7b:66:1a:a7:45:8c:3f:6e:8a:
60:42:35:40:e9:eb:75:7a:ef:02:59:43:9b:2a:14:
92:fe:cd:15:3d:3c:49:5e:18:e9:fe:03:18:2c:38:
f5:83:79:07:33:09:5b:74:9c:81:af:7f:7a:cb:c4:
ae:2c:74:e3:ce:cb:67:d7:68:ba:37:dd:89:44:ad:
3c:da:69:52:e1:99:f3:ec:55:24:8c:6d:77:04:ba:
e2:e3:e5:b1:0c:b5:d3:7c:05:54:33:2a:35:38:85:
ba:29:40:41:65:d5:53:1c:78:28:7e:c0:20:7b:85:
cd:7c:29:1e:1f:54:7a:cd:d1:db:ea:64:da:87:a6:
ab:60:e8:94:36:de:62:40:22:82:c1:71:14:6c:69:
d7:10:e1:e1:32:58:b3:50:37:f0:71:9d:92:5d:e1:
a6:d2:9b:2f:d7:9e:27:b6:28:cb:0b:1f:62:a4:0e:
bb:33:9b:9e:a6:83:72:13:f6:49:a4:ee:1e:24:0d:
3a:67:00:be:a8:0e:9e:a0:45:41:90:69:36:42:a0:
47:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FA:9E:06:48:FE:8B:4B:47:28:72:FF:39:33:ED:66:D0:74:48:A7
X509v3 Authority Key Identifier:
keyid:A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/GfqeBkj-i0tHKHL_OTPtZtB0SKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.80.0/24
IPv6:
2001:67c:c5c::/48
Signature Algorithm: sha256WithRSAEncryption
a2:fe:8a:ad:fe:38:db:8a:8c:0b:15:28:a3:6e:b1:80:a3:18:
60:a7:f4:76:9b:d1:72:f7:71:b0:7e:9b:76:75:38:64:2b:83:
f0:66:1b:ef:0b:fc:69:20:98:a8:1e:a2:6c:d3:9f:89:27:ec:
db:37:7d:c5:4d:4d:6f:24:6f:62:bc:cf:16:1b:68:9b:5c:7d:
c8:3d:22:c5:5c:2c:2c:f2:47:fc:96:f0:47:1f:74:ed:8d:1a:
4c:f5:63:75:11:41:90:da:57:1c:ce:fa:70:98:3f:70:7a:7a:
e0:70:37:6d:9b:9f:e8:f9:08:27:f0:e1:d2:a5:e3:a9:2e:ef:
c1:23:af:a9:af:ca:7e:26:de:29:99:c3:1d:a8:89:da:2a:40:
a0:50:9c:01:60:05:66:cf:44:bd:43:e8:f2:3e:36:c4:0c:53:
d3:c1:33:53:2c:19:c7:c7:f9:12:40:79:1c:fd:63:84:c6:6a:
a2:6d:de:8c:81:47:61:fa:36:da:36:70:a6:3e:a2:c7:45:a6:
94:7e:01:06:30:d8:43:e1:55:20:69:79:1e:83:12:0a:21:cb:
b4:1c:32:2f:19:46:80:02:1e:3d:07:43:d1:93:4f:3d:2f:ba:
7d:f2:fb:51:14:1d:95:b8:49:dd:bd:0e:e4:fe:cf:96:14:b5:
2d:d0:51:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:16:08 2025 by rpki-client