Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gztFELIrPUUg1kyaEPWXT58cAU4.roa
File: gztFELIrPUUg1kyaEPWXT58cAU4.roa (raw, json)
Hash identifier: 9qlfKN83yipaGxu8ozk3CaDpDFe7x+QP1izEKunwd9I=
Subject key identifier: 83:3B:45:10:B2:2B:3D:45:20:D6:4C:9A:10:F5:97:4F:9F:1C:01:4E
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 019537FC6678F0D461014F80609A2F505EB7
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gztFELIrPUUg1kyaEPWXT58cAU4.roa
Signing time: Mon 24 Feb 2025 12:44:02 +0000
ROA not before: Mon 24 Feb 2025 12:44:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55154
IP address blocks: 91.201.142.0/24 maxlen: 24
91.201.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Mar 2025 14:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:fc:66:78:f0:d4:61:01:4f:80:60:9a:2f:50:5e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Feb 24 12:44:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=833b4510b22b3d4520d64c9a10f5974f9f1c014e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:62:f3:52:29:ca:d2:3b:b0:4a:33:0a:b1:43:
1d:90:3c:0a:f2:88:1c:b6:8c:1c:c4:06:99:be:74:
5b:6a:f0:20:ef:02:f1:45:40:eb:a6:a9:51:f2:d5:
ab:bf:04:52:8b:d9:32:69:ab:6e:b3:cb:c1:e7:a6:
1f:dd:9d:73:30:cf:c9:8c:1a:06:f2:57:89:1e:55:
cd:28:99:df:fd:16:75:82:88:7b:f9:dd:e2:5b:cc:
31:ac:53:ec:34:81:ef:41:c3:45:1f:7a:35:09:05:
aa:91:6f:f9:cf:8c:fb:91:fb:48:a0:09:99:68:fe:
d9:50:4c:c0:b8:ac:87:30:95:7c:5d:3a:3d:9d:01:
41:a8:a1:da:8d:ae:49:90:b4:7b:e8:a5:de:8b:b5:
fb:11:d4:af:98:bf:e2:dd:dc:d3:fe:ed:c6:30:0e:
08:e8:ca:99:32:a7:ff:bc:6b:30:ae:a8:c4:6b:f6:
80:fa:66:64:42:8c:85:9a:15:1c:2c:19:2c:9d:c2:
15:67:a3:97:62:2c:78:f2:7c:4e:b5:97:69:c9:20:
25:bd:13:ec:19:ae:5a:2c:a8:66:30:14:8f:b5:66:
47:e6:54:3d:e4:38:a4:9b:5c:d7:27:cb:0a:29:53:
e0:5e:31:0d:4d:2f:95:a5:75:dc:12:52:86:b3:ed:
bf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3B:45:10:B2:2B:3D:45:20:D6:4C:9A:10:F5:97:4F:9F:1C:01:4E
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gztFELIrPUUg1kyaEPWXT58cAU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.142.0/23
Signature Algorithm: sha256WithRSAEncryption
67:e7:6d:6d:5b:2d:44:dc:ca:1c:ed:60:be:36:3c:b3:ca:0f:
e3:38:2e:68:87:ed:47:e6:dc:bb:00:9c:5b:19:eb:b7:8d:b3:
91:ee:5e:16:d6:7d:95:b2:08:68:6e:57:36:ab:72:3e:dc:5e:
0f:ad:71:4b:eb:a7:b6:d6:a6:c8:f8:46:5b:02:8f:c2:ee:13:
e4:78:0b:96:d2:34:12:50:b5:2b:c7:54:ec:4d:42:3a:06:c6:
af:1a:45:6d:23:7a:6d:a0:24:1c:5a:b5:03:8b:3a:71:ec:e6:
80:12:d8:04:e0:82:ee:26:66:99:7b:84:5d:1a:66:56:6a:a5:
90:35:98:d6:ed:a3:af:69:1a:20:3c:70:c1:ea:14:3c:41:66:
76:62:c5:09:b5:f3:9e:a4:2b:9f:08:9d:84:95:06:24:9a:a8:
13:06:da:99:1f:fd:aa:bf:ed:fd:b5:72:8e:95:ac:32:2d:c9:
37:41:2b:2b:f8:90:67:b5:dc:17:b3:61:c5:cf:1a:d5:59:19:
6c:8e:b8:d8:cf:51:89:16:af:5e:48:3a:7f:9a:1b:7f:40:2b:
d7:70:82:a4:a2:0d:86:4f:e2:e4:89:1c:14:4a:04:fc:c6:52:
6a:ce:e6:4b:b9:ac:51:8e:21:77:37:ee:62:c5:2b:36:83:31:
0e:e3:bc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:57:46 2025 by rpki-client