Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gyn2f44_d1Zdca3qdcZGlqJ_w2g.roa
File: gyn2f44_d1Zdca3qdcZGlqJ_w2g.roa (raw, json)
Hash identifier: Vn3ihBtKfxqxgNCwRCxEcKp+VQoCWgt1VyZuj2wmMEM=
Subject key identifier: 83:29:F6:7F:8E:3F:77:56:5D:71:AD:EA:75:C6:46:96:A2:7F:C3:68
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01934D67376BB415E95391DE47823B236892
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gyn2f44_d1Zdca3qdcZGlqJ_w2g.roa
Signing time: Thu 21 Nov 2024 06:27:10 +0000
ROA not before: Thu 21 Nov 2024 06:27:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39238
IP address blocks: 194.113.36.0/24 maxlen: 24
194.113.37.0/24 maxlen: 24
194.113.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Nov 2024 07:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4d:67:37:6b:b4:15:e9:53:91:de:47:82:3b:23:68:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 21 06:27:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8329f67f8e3f77565d71adea75c64696a27fc368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:81:69:e3:de:ec:de:c8:74:52:26:eb:f0:
1c:b7:b5:63:23:df:fb:58:56:80:4a:5d:d2:cb:20:
e2:7b:df:f3:67:66:f5:8c:96:0a:03:19:2e:3b:01:
a2:ba:a7:69:e7:70:3e:ad:ad:4c:9d:31:57:b8:da:
8a:71:8a:7e:2e:a1:34:0a:51:00:c9:ab:ff:fb:df:
9c:51:c4:85:69:73:ba:bb:6e:69:15:0a:14:e1:de:
10:51:1c:82:ce:ac:cd:b5:ec:2d:94:ec:ac:67:71:
f0:cf:bd:67:67:c1:e4:24:6d:6b:1b:d0:d3:5f:c5:
5e:17:f8:7e:49:35:bd:85:65:18:8a:74:0f:22:4d:
e7:00:49:3e:2a:8f:18:12:9e:7c:11:23:c2:ab:32:
37:2f:80:e3:3c:3d:cd:e4:1e:01:03:a1:2c:00:3d:
0c:6e:fa:aa:01:26:32:82:2f:90:f6:8a:10:dc:fb:
96:3a:5e:3b:85:7f:be:b5:99:14:ac:0c:2e:05:07:
ed:99:32:fc:64:f0:a3:34:3a:17:51:4d:50:ad:c7:
f3:71:f2:a7:9c:59:02:31:cd:a5:11:75:90:14:b6:
7e:76:4b:d1:5c:31:d4:42:c0:dd:fd:f9:78:88:2e:
fb:3b:a3:12:d0:f3:17:43:ff:2d:ef:33:fa:d2:75:
47:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:29:F6:7F:8E:3F:77:56:5D:71:AD:EA:75:C6:46:96:A2:7F:C3:68
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gyn2f44_d1Zdca3qdcZGlqJ_w2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.36.0/23
194.113.39.0/24
Signature Algorithm: sha256WithRSAEncryption
af:28:1c:fc:1a:b6:64:d7:b5:e8:5a:ca:63:15:35:1a:bd:55:
07:41:7e:55:4c:47:d6:a9:ee:07:6c:28:57:15:bd:5f:51:15:
91:74:fb:2a:33:14:8e:1c:16:62:3c:c9:73:5e:9d:39:b5:25:
94:9b:b8:11:15:26:04:1c:95:bc:e2:c2:48:97:9f:b3:36:fd:
64:d7:66:1c:09:98:bf:a6:da:9c:1a:2c:6e:62:93:5f:03:f9:
c5:e3:f9:7f:55:86:fb:03:ba:62:09:37:6d:bb:01:48:89:74:
bc:75:1c:d5:47:c3:63:83:63:4c:ef:5e:ad:86:58:7c:29:3b:
fa:f0:ae:47:fa:55:1c:5f:72:1b:78:cf:86:bf:42:74:c3:74:
28:db:1d:77:86:3f:41:5c:fe:4f:5e:6e:f2:fa:e3:a1:b7:c6:
38:f2:99:33:ad:9d:a1:25:4f:88:dd:e2:c1:02:23:48:27:69:
51:df:b1:03:99:e5:4c:5c:2b:05:15:21:5e:5a:ab:2a:cd:b6:
11:29:cf:c6:62:08:2e:8e:e6:cb:5c:ca:11:7b:2d:9f:fc:ef:
57:57:85:73:d4:10:fa:18:83:10:70:16:45:6b:93:6f:75:8d:
c6:3f:b5:bb:7e:72:d4:42:08:64:f3:f8:e0:23:1b:ab:89:72:
61:9e:34:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:09 2025 by rpki-client