Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/GkHmo_xcRiIXt9qgjwMto5BuAHY.roa
File: GkHmo_xcRiIXt9qgjwMto5BuAHY.roa (raw, json)
Hash identifier: EQpAihp0BdG6Ke4bvoeSaxUYNaN++n8JgkCUr5rlt/8=
Subject key identifier: 1A:41:E6:A3:FC:5C:46:22:17:B7:DA:A0:8F:03:2D:A3:90:6E:00:76
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019150EAA181FC327F3653E223E773E07453
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/GkHmo_xcRiIXt9qgjwMto5BuAHY.roa
Signing time: Wed 14 Aug 2024 12:43:59 +0000
ROA not before: Wed 14 Aug 2024 12:43:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6747
IP address blocks: 80.232.180.0/24 maxlen: 24
80.233.136.0/24 maxlen: 24
81.198.93.0/24 maxlen: 24
2a02:16d8:105:9::/64 maxlen: 64
Validation: Failed, certificate revoked on Wed 14 Aug 2024 13:05:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:50:ea:a1:81:fc:32:7f:36:53:e2:23:e7:73:e0:74:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Aug 14 12:43:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a41e6a3fc5c462217b7daa08f032da3906e0076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:de:a3:81:80:df:9b:22:0d:cc:fc:8f:e7:f6:
2a:d8:a4:b1:bb:a2:74:cd:56:bd:21:d8:02:ff:86:
60:b4:bd:fa:df:c6:4a:18:a2:d9:ed:f5:a4:55:3c:
fc:d7:c5:6d:e7:9c:d2:2c:90:2f:47:81:68:73:17:
fb:9f:4a:03:3d:3e:6c:0a:06:a8:b7:ec:73:eb:3f:
7f:8c:5b:7e:70:86:a8:04:65:ee:51:f4:9a:66:7e:
e2:2f:66:10:c2:30:47:fe:d1:9c:48:c7:01:6d:29:
1e:a8:8c:47:e6:a1:64:e3:67:57:00:13:6a:b5:e5:
6f:bf:29:f3:c7:92:32:00:3d:20:fb:d7:e1:f4:ce:
b8:23:27:90:2a:89:bc:f3:37:4c:29:2c:b6:29:01:
dc:0f:bb:da:7d:41:16:b8:5c:43:37:f2:29:95:70:
2e:a1:b4:87:66:80:bd:e3:d2:63:f0:ed:1d:36:e9:
8a:a2:ae:ad:a8:77:96:2f:9a:95:1b:fd:02:34:ea:
be:b1:41:fa:23:fb:67:74:fd:89:aa:d4:2e:02:c9:
b6:7f:8b:05:57:2a:19:df:6d:7a:7d:bc:39:c8:1c:
02:19:58:10:97:41:de:af:00:e6:1a:e1:35:f2:43:
c4:aa:af:cb:5f:86:72:1e:c2:c8:09:54:3e:3d:46:
ab:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:41:E6:A3:FC:5C:46:22:17:B7:DA:A0:8F:03:2D:A3:90:6E:00:76
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/GkHmo_xcRiIXt9qgjwMto5BuAHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.232.180.0/24
80.233.136.0/24
81.198.93.0/24
IPv6:
2a02:16d8:105:9::/64
Signature Algorithm: sha256WithRSAEncryption
93:77:06:1e:f8:e4:f8:44:45:c8:45:16:b2:37:16:8d:e0:a1:
c7:11:ae:e7:31:07:3b:5c:db:16:56:48:07:f5:4e:bd:72:51:
05:55:3a:be:a2:c1:88:7b:89:6c:32:58:d6:db:e8:b5:bc:ca:
eb:1f:da:b4:e9:b5:5b:cb:30:be:62:3d:a4:0d:a0:26:85:27:
61:e0:af:98:8a:81:43:74:0a:f7:eb:31:fe:9a:22:49:69:b8:
30:bc:9d:19:00:e5:c5:93:c4:96:d0:b6:05:95:b5:c6:6e:8a:
9d:64:a9:6d:3e:f0:86:9c:f4:ce:1b:66:b5:e5:fb:0a:cb:85:
12:cb:d5:70:96:c8:bc:ea:5d:52:8a:fb:4d:f5:65:99:77:80:
25:1a:97:ef:9d:de:36:14:a8:62:cf:43:4f:cc:11:ed:5b:73:
f9:c8:e1:fe:52:d9:0e:22:19:a9:55:74:84:0c:90:c4:a3:5f:
3e:03:3e:e7:12:9b:ee:b3:d3:6b:dc:bf:64:f9:03:b9:33:15:
6a:65:5e:5b:cf:bf:79:08:4a:b8:c1:1c:c4:4b:df:04:e4:4f:
fc:c2:12:cc:f2:49:1c:f2:5a:5c:2b:18:96:7f:f0:ea:3b:8e:
35:10:b9:b5:e0:c4:f3:ed:c0:82:1b:dc:82:18:6d:d3:dc:2f:
27:1f:4a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:48:48 2025 by rpki-client