Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/54GOVDaP_D09uKfEtYMPVBTT5gQ.roa
File: 54GOVDaP_D09uKfEtYMPVBTT5gQ.roa (raw, json)
Hash identifier: Ref/G8dhqt7Ngr/7rFvow+HQ9C8SLce9/+i6U+7GjA0=
Subject key identifier: E7:81:8E:54:36:8F:FC:3D:3D:B8:A7:C4:B5:83:0F:54:14:D3:E6:04
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 0193A46413CC16A2D4D5C42E98EEA0498AE8
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/54GOVDaP_D09uKfEtYMPVBTT5gQ.roa
Signing time: Sun 08 Dec 2024 03:50:42 +0000
ROA not before: Sun 08 Dec 2024 03:50:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197328
IP address blocks: 91.92.113.0/24 maxlen: 24
185.4.227.0/24 maxlen: 24
185.150.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a4:64:13:cc:16:a2:d4:d5:c4:2e:98:ee:a0:49:8a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Dec 8 03:50:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7818e54368ffc3d3db8a7c4b5830f5414d3e604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:56:9b:0c:4e:ba:cc:70:a9:68:7f:d4:31:19:
20:60:00:4e:57:02:ea:12:00:75:35:de:5a:09:6e:
8b:3b:4b:9f:bf:b4:87:d1:2f:6a:23:b6:7f:a6:5d:
7e:6b:bf:b2:c7:ed:a1:c2:a7:c7:60:94:5b:74:a2:
02:cb:49:57:b7:c2:f6:1a:2e:bd:b5:45:44:94:9a:
06:34:29:59:3e:fa:21:bb:ac:1e:83:c8:a2:d9:f1:
b3:88:2d:92:bb:97:3f:ec:ca:b4:47:6a:72:54:e9:
4b:d7:92:cd:a3:6d:5f:25:ca:7a:d2:a7:f5:1e:81:
8f:ac:0b:c8:ca:8a:54:9d:3c:df:19:57:da:18:42:
84:e3:35:7d:50:97:06:08:3b:a8:62:a5:d6:61:9a:
c9:a9:15:e8:55:9a:9d:cc:53:b7:8f:5e:33:a4:dd:
be:60:b1:4c:76:ca:c1:42:e2:d4:22:84:43:a4:87:
a3:64:f9:d3:92:27:c8:7c:8a:b8:56:4e:8b:4d:5a:
a9:b2:86:c3:cd:db:ee:33:11:72:8f:c4:f4:be:53:
d6:cb:90:b2:de:ae:83:db:de:16:6f:f8:36:39:c0:
70:57:66:b1:eb:df:56:43:07:7e:f9:05:94:4c:16:
0a:02:06:45:63:b6:23:57:87:7c:b4:25:a5:3e:f4:
b3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:81:8E:54:36:8F:FC:3D:3D:B8:A7:C4:B5:83:0F:54:14:D3:E6:04
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/54GOVDaP_D09uKfEtYMPVBTT5gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.113.0/24
185.4.227.0/24
185.150.2.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:33:1f:12:de:5b:fc:f9:de:ee:85:6e:80:78:88:46:20:a9:
b9:bb:29:b7:a8:ba:10:9e:75:d7:c6:42:52:4b:bb:f9:07:a5:
d7:ca:b2:ce:fc:5f:05:21:21:a7:d6:64:9e:0a:b0:bc:fb:30:
2b:d4:20:6e:79:65:89:53:bf:48:5d:7d:02:ee:94:96:b3:9e:
03:41:bb:37:5d:90:0e:c8:be:ff:d6:d2:c0:1a:c7:f4:92:b2:
3b:37:dd:40:b5:e8:21:6a:cc:e3:2b:76:78:88:6d:52:36:c2:
10:11:f7:59:03:1d:6c:ff:d5:57:db:80:9a:23:27:1e:9c:a4:
ca:46:af:88:7a:a6:ee:f1:44:df:2f:12:6c:ad:83:83:1e:00:
64:bb:eb:25:ec:06:ae:2c:23:1a:b3:3a:75:80:e5:fd:57:58:
cf:17:47:53:6b:40:d6:77:3d:68:d5:61:5d:1f:f8:50:ba:e4:
b2:c5:04:16:47:4d:71:17:d9:bf:62:bf:bb:87:d4:bd:7f:a2:
95:e6:09:a0:5d:8d:86:d2:8d:b2:68:10:e6:93:0c:ca:86:4c:
d6:fc:7b:75:e3:a9:b9:6b:26:e8:12:87:bb:db:34:a2:cd:c9:
fc:4d:aa:35:94:00:1b:d7:81:f4:36:44:2a:f3:9c:6e:75:b7:
6c:98:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:47:23 2025 by rpki-client