Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/GxwczxO_JLpFpGbqjA_GGwjGGpM.roa
File: GxwczxO_JLpFpGbqjA_GGwjGGpM.roa (raw, json)
Hash identifier: MyzrA63Dn2zHX80BuevjrY5CTwjlonxLd5g1XMajniQ=
Subject key identifier: 1B:1C:1C:CF:13:BF:24:BA:45:A4:66:EA:8C:0F:C6:1B:08:C6:1A:93
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 0195384ECAB904259F4D033EC58E953D9ECE
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/GxwczxO_JLpFpGbqjA_GGwjGGpM.roa
Signing time: Mon 24 Feb 2025 14:14:02 +0000
ROA not before: Mon 24 Feb 2025 14:14:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51469
IP address blocks: 81.31.224.0/22 maxlen: 24
81.31.228.0/23 maxlen: 24
81.31.236.0/22 maxlen: 24
81.31.240.0/23 maxlen: 24
81.31.248.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 07:53:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:4e:ca:b9:04:25:9f:4d:03:3e:c5:8e:95:3d:9e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Feb 24 14:14:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b1c1ccf13bf24ba45a466ea8c0fc61b08c61a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7a:8a:aa:00:19:2f:45:1d:40:8c:19:d8:c5:
92:5c:49:a8:fe:b4:9a:7e:b6:bc:0e:c1:47:d5:0b:
27:74:89:fe:2b:32:8e:1b:46:89:e4:16:cf:35:c2:
8a:10:3f:3e:cb:4f:0b:80:64:e6:32:05:3d:c5:09:
97:f3:4f:d1:c4:11:a6:75:e4:c5:00:1c:36:a1:72:
8d:28:c8:ef:76:a3:67:df:61:b8:a7:52:2b:cc:b6:
7e:68:a3:2f:44:0c:b0:3c:6a:ef:b8:91:2b:f9:86:
5f:24:bf:c7:76:bb:81:3f:e6:5b:6f:49:ec:e3:e1:
3d:33:01:07:3c:51:5e:e3:c6:53:ce:6e:23:d6:0d:
f3:b7:64:31:73:2e:53:43:17:dc:2a:5c:e4:79:4b:
3a:1c:99:4b:0c:4a:05:ad:bc:8a:f9:77:4a:04:d7:
7e:40:4f:23:f9:38:4a:45:d1:bf:64:6b:bd:da:ff:
b3:e1:25:93:bd:11:b0:52:54:63:24:98:42:ab:09:
a6:84:99:ca:59:d9:02:97:96:6b:33:be:00:6a:23:
38:bf:79:ae:e3:05:c4:14:9c:83:d6:e2:64:f2:5b:
56:fe:5f:73:0d:ce:7c:1f:fa:41:d4:fc:6b:63:41:
77:bc:f8:58:cf:ef:37:7e:ce:2d:55:bc:1d:32:d2:
31:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1C:1C:CF:13:BF:24:BA:45:A4:66:EA:8C:0F:C6:1B:08:C6:1A:93
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/GxwczxO_JLpFpGbqjA_GGwjGGpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.224.0-81.31.229.255
81.31.236.0-81.31.241.255
81.31.248.0/23
Signature Algorithm: sha256WithRSAEncryption
35:a8:cd:cd:a2:07:b0:05:d3:3e:c0:ff:41:24:44:aa:d5:a5:
00:89:39:ba:40:6e:47:a2:d4:76:9a:03:25:62:0a:87:fe:48:
bd:e1:da:e4:94:78:ae:54:74:41:54:26:9e:b6:15:6d:eb:58:
66:f8:e0:4e:50:09:0d:ff:e6:31:0b:d3:67:b5:b2:2d:c0:5f:
46:99:69:90:4e:3b:6f:ec:49:64:b5:ea:8d:35:4f:e1:d0:25:
cb:d5:b7:63:55:42:70:8c:38:3e:04:5b:c4:88:b4:0d:6d:f8:
aa:c1:73:45:b3:bd:bb:39:8f:50:bc:d7:2c:e3:cc:27:a2:8f:
b2:0a:21:99:86:87:20:17:d3:a5:f7:6b:85:b2:54:da:3d:9f:
fc:a4:38:a9:90:e7:22:22:67:cd:ca:d0:2e:ac:2d:3c:24:80:
ca:c4:08:b0:74:93:db:46:fb:47:40:a5:8e:17:8e:76:2a:ad:
2c:28:33:92:87:e6:50:2c:c5:94:f8:1a:f2:35:b1:90:4f:f1:
1a:03:0e:8f:c9:cc:80:c7:76:bb:91:e4:29:4a:7b:90:2c:bc:
d9:a5:cb:37:a0:59:7b:60:66:c0:93:ca:3a:84:59:41:b3:1e:
c2:7a:39:a7:1e:38:3a:f8:7d:73:e7:ca:97:d2:99:ea:9b:d0:
af:ad:e2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:18 2025 by rpki-client