Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/GorMNFFQqixNBGwQqqGC6298ntQ.roa
File: GorMNFFQqixNBGwQqqGC6298ntQ.roa (raw, json)
Hash identifier: +Ugdz9XfRCmx+XUvQE8SNWRAJdX5BZdhbC3n3NT5njk=
Subject key identifier: 1A:8A:CC:34:51:50:AA:2C:4D:04:6C:10:AA:A1:82:EB:6F:7C:9E:D4
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 018E2FF0A9FB96E1B1FB9A1A7E4A1BBEA109
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/GorMNFFQqixNBGwQqqGC6298ntQ.roa
Signing time: Mon 11 Mar 2024 23:54:45 +0000
ROA not before: Mon 11 Mar 2024 23:54:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 77.223.192.0/21 maxlen: 21
77.223.200.0/23 maxlen: 24
79.139.64.0/23 maxlen: 24
176.222.48.0/22 maxlen: 24
198.145.112.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 02:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2f:f0:a9:fb:96:e1:b1:fb:9a:1a:7e:4a:1b:be:a1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Mar 11 23:54:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a8acc345150aa2c4d046c10aaa182eb6f7c9ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e7:e3:e8:e0:ea:00:97:64:90:fd:47:e2:10:
8a:4c:f5:05:36:ba:f6:4a:5a:76:b0:24:31:c1:01:
13:1e:8f:4d:92:50:42:39:e9:e6:6f:7a:67:e1:b3:
c6:e0:fe:84:ee:3b:5e:bf:6e:31:6c:9b:45:3f:0e:
2d:46:cc:88:f5:cf:25:f7:22:f1:c6:4e:eb:1c:1e:
64:8a:14:6e:37:d7:0a:a9:39:6c:ef:f4:5b:64:3e:
df:e1:67:65:f9:7c:08:7b:11:ba:58:0a:02:10:8b:
30:a2:f8:90:78:7f:ea:df:b9:86:c9:a3:bb:59:05:
ab:bb:ff:01:f5:bb:26:07:00:78:32:47:86:cf:d4:
9d:c5:26:66:f0:96:0a:ba:3f:c1:70:d3:da:9a:33:
22:27:b7:8c:ac:b2:25:cb:8d:c4:6c:54:bc:65:1e:
fa:2f:e0:12:53:2e:39:29:2d:44:df:42:b6:79:85:
e3:11:61:d9:02:dd:af:4a:0b:c2:66:c5:2e:9d:a4:
2b:59:5a:1d:30:5e:69:17:c7:b1:48:d9:5d:03:ff:
d9:db:23:a7:cd:94:73:a9:a0:71:f3:e4:62:ca:e6:
cf:22:9c:eb:cf:77:fe:07:db:73:21:03:48:14:44:
ea:85:79:a7:84:61:d5:ae:6b:28:a0:1a:e8:75:16:
c6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8A:CC:34:51:50:AA:2C:4D:04:6C:10:AA:A1:82:EB:6F:7C:9E:D4
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/GorMNFFQqixNBGwQqqGC6298ntQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.192.0-77.223.201.255
79.139.64.0/23
176.222.48.0/22
198.145.112.0/22
Signature Algorithm: sha256WithRSAEncryption
07:a9:93:d0:1a:d9:76:a2:85:60:8a:12:0b:85:17:80:f3:ff:
1c:62:05:4b:1c:f9:92:6e:01:a2:e1:26:59:eb:36:08:e6:2d:
6b:83:d1:3d:54:16:6e:7b:b4:37:e5:32:da:ad:af:42:44:84:
19:97:ab:68:62:8f:1e:5a:1d:50:5d:94:10:0a:01:8d:92:85:
8f:64:1a:6b:ad:b0:74:45:b1:55:71:1b:35:5e:55:36:d5:17:
56:39:a2:0f:c5:bb:cb:b0:bb:92:ba:c0:61:3c:af:aa:0d:47:
fe:1b:42:f3:ff:bb:d8:9c:e9:92:7f:45:ba:93:65:d7:16:7f:
c5:fc:c3:54:ba:30:3e:c1:3d:30:7e:02:07:7e:d4:b7:8a:af:
37:cd:0d:9b:02:f6:ae:1f:36:5b:fe:01:8b:b1:cc:97:fd:1a:
48:af:84:73:d2:a1:23:d8:ca:ef:5a:34:d7:7c:09:28:cc:38:
19:50:ba:45:c6:9b:5d:ae:67:67:13:67:10:ed:e9:45:4e:4b:
06:d2:f4:75:7d:4b:d4:e1:8a:ff:6c:79:8e:2d:81:60:5d:e3:
c1:35:97:28:82:02:48:ec:7b:e8:5a:2e:39:cd:2e:fb:ba:75:
8a:31:97:75:fb:c3:0b:47:d1:68:81:28:e4:32:07:07:9e:eb:
8f:8b:12:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:04 2025 by rpki-client