Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/GSEMamDTXn_dRA3b4CSyJjImKzA.roa
File: GSEMamDTXn_dRA3b4CSyJjImKzA.roa (raw, json)
Hash identifier: k0Kg52+NIT5idUDHzads8B0lt74/uI5zt9AGilYDCFY=
Subject key identifier: 19:21:0C:6A:60:D3:5E:7F:DD:44:0D:DB:E0:24:B2:26:32:26:2B:30
Certificate issuer: /CN=8f6c424cfe92703100d50a2832253744dd756452
Certificate serial: 018CC8DF70665343B475EB204091D7604CC9
Authority key identifier: 8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/GSEMamDTXn_dRA3b4CSyJjImKzA.roa
Signing time: Tue 02 Jan 2024 06:32:15 +0000
ROA not before: Tue 02 Jan 2024 06:32:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210588
IP address blocks: 37.200.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:70:66:53:43:b4:75:eb:20:40:91:d7:60:4c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6c424cfe92703100d50a2832253744dd756452
Validity
Not Before: Jan 2 06:32:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19210c6a60d35e7fdd440ddbe024b22632262b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:32:79:84:1a:33:a4:e2:e6:ac:95:bd:36:a1:
38:01:14:14:12:a4:1a:12:3a:18:08:2d:e3:24:d5:
08:f7:cb:8f:7c:b9:75:25:b8:14:61:2d:c7:19:b1:
82:78:c9:88:14:cf:21:f8:8c:cd:79:52:39:03:75:
f0:61:e0:84:6c:7d:3d:7d:de:74:98:af:41:a0:e8:
ff:83:d6:2b:bb:35:e6:a3:7c:c8:41:48:29:b5:a6:
20:cf:88:f6:67:57:d5:06:57:81:45:5c:bb:46:56:
2f:ab:69:e3:4f:d5:cc:72:d5:27:ce:6c:fc:9d:50:
6b:b8:c2:a0:d9:fc:2e:a0:d4:43:01:b8:13:cf:cc:
b0:92:8a:b5:4d:55:2d:85:58:24:30:c0:3e:ce:90:
11:a8:89:10:d6:91:5a:cf:9a:59:5d:e3:70:c2:aa:
00:60:67:0b:4d:fd:90:04:eb:26:8d:8e:0b:de:9b:
a8:bf:96:9b:4f:cc:be:44:20:01:a8:9e:23:6c:35:
cf:cb:19:db:5f:0b:f6:d9:db:14:8e:95:0a:c8:14:
b3:47:99:6f:4f:12:3f:d4:15:c7:a0:da:70:3b:8a:
c7:25:d7:41:f6:fe:7b:d6:44:7d:64:99:66:6e:a3:
f2:12:32:ac:2d:96:ee:6d:d7:cb:1f:44:d4:1c:37:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:21:0C:6A:60:D3:5E:7F:DD:44:0D:DB:E0:24:B2:26:32:26:2B:30
X509v3 Authority Key Identifier:
keyid:8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/GSEMamDTXn_dRA3b4CSyJjImKzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.200.87.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:3f:d8:9e:4b:71:8c:02:fb:13:a5:c1:a6:14:23:33:7c:f0:
0f:2f:bd:59:4f:dc:10:11:c0:83:16:61:0b:e9:4e:54:48:1f:
dd:87:b0:33:e1:24:a6:c3:76:a1:eb:86:8b:73:c0:3e:ba:53:
40:ac:4f:54:11:b0:dc:7f:76:0b:96:b0:b3:04:d8:d3:72:5e:
ca:ae:54:05:8c:c1:14:48:34:39:88:99:21:b3:42:54:81:f7:
13:52:0e:e9:44:29:ba:dd:53:84:66:6d:ae:16:58:be:92:4d:
5f:bb:82:b0:84:24:54:81:d9:6f:20:01:49:31:1c:cd:8c:1a:
09:16:71:fe:10:02:e3:59:88:a5:87:68:1c:bf:df:46:96:7d:
91:88:03:67:9d:28:17:c1:c5:86:3b:f3:4e:9e:28:f4:e2:c3:
c8:71:29:b9:15:c5:25:4c:ed:43:54:7c:d7:d4:7c:2c:67:ca:
64:43:7f:b8:ba:7d:1d:4c:85:aa:3a:2b:16:2a:cc:a8:77:52:
57:e5:ef:c0:dc:be:88:80:b9:b2:24:b2:b3:8f:b6:93:54:d0:
19:fe:6a:09:df:4a:54:a6:18:86:71:31:d3:a6:61:64:bc:82:
2c:b8:42:68:a8:1c:a6:b4:65:2a:7a:73:a4:00:1a:8a:da:02:
5b:d9:94:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:47 2025 by rpki-client