Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/gKELP5nWFdJG9xDBK51YRWQMfDM.roa
File: gKELP5nWFdJG9xDBK51YRWQMfDM.roa (raw, json)
Hash identifier: KA478Ilxc4jQRyJnYDWCiB7N7XLSH2F9d0oU8h9m6Rw=
Subject key identifier: 80:A1:0B:3F:99:D6:15:D2:46:F7:10:C1:2B:9D:58:45:64:0C:7C:33
Certificate issuer: /CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Certificate serial: 018F9FD5D6B2676529FC651E2487436986D1
Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/gKELP5nWFdJG9xDBK51YRWQMfDM.roa
Signing time: Wed 22 May 2024 10:25:42 +0000
ROA not before: Wed 22 May 2024 10:25:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44180
IP address blocks: 46.227.88.0/21 maxlen: 24
185.98.56.0/22 maxlen: 24
185.144.204.0/22 maxlen: 24
185.146.196.0/22 maxlen: 24
193.34.116.0/22 maxlen: 24
2a0d:9100::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9f:d5:d6:b2:67:65:29:fc:65:1e:24:87:43:69:86:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Validity
Not Before: May 22 10:25:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80a10b3f99d615d246f710c12b9d5845640c7c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:af:a6:69:f6:bd:00:2a:53:c1:d1:c9:51:
b0:f5:94:0e:fb:4c:51:27:85:fb:0d:da:85:bf:85:
c2:a1:8e:03:b2:98:13:10:bb:3e:43:79:0f:d9:f2:
18:8d:ba:5f:0d:ea:38:4e:da:56:84:90:5a:23:2e:
29:1a:0c:0b:1c:2a:69:a9:44:c0:60:0b:4a:56:a2:
2d:72:54:fb:dc:44:17:b8:6b:9c:7f:04:80:50:09:
c7:e9:e5:f0:09:82:5c:6e:47:75:d8:bc:61:cd:73:
27:06:83:19:68:11:83:13:39:cd:2d:b0:04:e6:4e:
e8:3b:2d:99:07:1a:2b:41:16:a0:02:b6:fe:7f:36:
ca:6c:28:37:d7:d3:0e:28:2a:76:97:b3:68:98:1b:
48:8e:89:c1:c1:b0:59:48:2b:69:9f:bf:be:0c:70:
fb:dd:95:fd:a5:90:93:86:16:f2:56:26:12:73:a7:
c8:17:a5:4b:5a:76:21:13:c9:f9:e4:df:99:56:f9:
e1:47:7d:d9:e2:36:ab:39:1f:14:f9:59:bc:fd:f6:
e4:44:8d:db:06:28:d7:84:05:89:c3:7f:64:1e:cc:
7c:bb:3c:d4:0f:24:77:19:ca:e0:4c:af:b1:3b:78:
30:5b:d7:77:7d:ca:eb:82:d7:36:f0:2b:98:bf:db:
dc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A1:0B:3F:99:D6:15:D2:46:F7:10:C1:2B:9D:58:45:64:0C:7C:33
X509v3 Authority Key Identifier:
keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/gKELP5nWFdJG9xDBK51YRWQMfDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.88.0/21
185.98.56.0/22
185.144.204.0/22
185.146.196.0/22
193.34.116.0/22
IPv6:
2a0d:9100::/32
Signature Algorithm: sha256WithRSAEncryption
27:55:cb:50:d9:61:a1:ea:cc:8b:0a:8e:42:51:19:55:c4:6e:
9a:3e:fb:1c:e8:fb:6b:d5:e6:d3:8a:bc:a2:7b:c3:0b:47:5a:
48:b7:63:1f:e8:78:de:39:f8:76:b2:01:c9:2e:3c:bf:95:84:
fa:37:63:5d:1d:01:a7:92:92:77:64:94:fc:f7:5c:1b:2d:bf:
79:3f:6c:9b:53:8f:fa:db:75:6a:f8:dc:dd:16:98:20:a1:35:
51:c9:56:a3:ef:b2:b1:17:87:2e:7e:81:60:b1:18:5f:7a:31:
db:63:eb:21:e8:d1:ca:71:77:cb:45:06:73:3e:ab:52:54:e4:
68:fa:66:ff:8b:16:87:29:9b:2e:af:7f:dc:13:dc:24:d1:be:
31:dd:09:9c:f1:af:02:16:3c:30:cd:33:70:90:80:09:c6:9b:
14:6d:51:63:9d:8f:c0:49:1b:8e:df:da:1e:70:3a:ce:56:63:
67:eb:c2:3e:35:91:be:3b:99:9c:40:73:8b:0e:c2:a1:c3:11:
1d:72:8f:06:3c:91:bd:87:c5:39:44:0a:6f:25:31:47:d4:8e:
67:d6:7f:dd:f8:45:dd:43:45:ce:bf:df:9c:9b:49:5f:ef:2b:
31:2b:19:b5:4c:b8:0e:19:0e:c5:75:d0:e1:cc:ff:dc:0b:e1:
87:47:ca:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:22 2025 by rpki-client