Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/GmzkC3Uvh20-c_cNj1Q6z4hsdlY.roa
File: GmzkC3Uvh20-c_cNj1Q6z4hsdlY.roa (raw, json)
Hash identifier: 2DrONmP/vDmi9aMgdQPZPFl1+oJpn/oo5sf1wwIxKew=
Subject key identifier: 1A:6C:E4:0B:75:2F:87:6D:3E:73:F7:0D:8F:54:3A:CF:88:6C:76:56
Certificate issuer: /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Certificate serial: 019425FDA5A74BB2EC5B7FB28C87EFD25212
Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/GmzkC3Uvh20-c_cNj1Q6z4hsdlY.roa
Signing time: Thu 02 Jan 2025 07:49:27 +0000
ROA not before: Thu 02 Jan 2025 07:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210055
IP address blocks: 176.119.132.0/22 maxlen: 22
176.119.132.0/24 maxlen: 24
176.119.133.0/24 maxlen: 24
176.119.134.0/24 maxlen: 24
176.119.135.0/24 maxlen: 24
185.214.170.0/24 maxlen: 24
185.214.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Jan 2025 09:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a5:a7:4b:b2:ec:5b:7f:b2:8c:87:ef:d2:52:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Validity
Not Before: Jan 2 07:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a6ce40b752f876d3e73f70d8f543acf886c7656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5e:fd:fa:57:b0:2c:cc:6c:1f:0a:e7:12:27:
b7:bb:60:9f:32:92:42:cb:10:50:6b:73:45:0e:1c:
8a:e6:14:ba:98:31:1d:5e:6b:6b:95:23:c6:49:db:
74:53:03:c3:d9:70:25:a4:eb:53:7e:b9:8c:ad:19:
31:6a:2a:5b:79:71:b8:bc:64:20:31:0f:3b:f9:b5:
6e:dd:bf:ff:92:85:8f:28:fc:01:a6:1a:96:73:bd:
2c:c8:7a:41:eb:14:00:ca:94:8c:8a:46:3f:ce:de:
69:54:0a:cb:7e:10:d0:30:b3:8b:b0:e3:a0:f1:50:
b6:65:a0:e0:ba:80:11:ae:05:b7:b6:cb:4f:ef:7d:
42:72:05:79:95:dd:66:b3:5a:a3:4b:7a:09:fd:93:
ef:e1:e4:25:ec:4b:21:89:c9:ed:fe:cd:f2:76:88:
39:3c:f8:18:13:09:cd:23:73:ca:77:f8:8d:57:e0:
47:3a:83:15:1d:e5:24:38:85:e5:9b:42:0a:7e:27:
cd:c4:b5:79:57:3a:20:f8:fa:9f:9e:49:b6:2e:f9:
fd:31:8e:50:f2:11:db:79:17:22:79:2a:7d:cc:8f:
80:05:d0:c6:e3:79:e9:65:37:18:8f:94:8f:c0:72:
02:aa:72:20:b8:d6:a2:34:c5:f1:bd:ee:12:c6:80:
3a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6C:E4:0B:75:2F:87:6D:3E:73:F7:0D:8F:54:3A:CF:88:6C:76:56
X509v3 Authority Key Identifier:
keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/GmzkC3Uvh20-c_cNj1Q6z4hsdlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.132.0/22
185.214.170.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:38:20:71:25:44:3f:72:8c:05:e5:a4:cc:a3:b1:c2:60:d5:
f2:d1:a2:80:65:12:e0:61:d4:92:b5:e9:90:7e:04:0b:24:da:
db:b1:2a:cb:dd:a8:e5:d4:86:83:38:e3:11:0c:71:fd:4c:be:
57:ec:69:18:23:a9:4e:9d:61:79:80:3c:f8:48:56:53:6c:7f:
5f:cb:15:48:30:82:71:4d:93:53:26:e9:92:0b:8d:39:f5:68:
e5:34:f6:23:fe:12:ae:b2:fe:d4:bb:9c:1d:2a:d0:06:0b:8f:
8c:13:e5:a1:07:98:15:56:af:13:63:f7:9e:a1:8f:9e:11:1f:
58:76:50:89:84:5b:e7:8c:72:60:d4:74:4f:e6:63:7c:96:88:
f4:8b:4e:9b:1b:91:43:18:4b:24:ec:15:89:c9:2b:6a:31:2c:
df:05:33:a5:ab:47:da:1f:7f:e6:ea:a6:ff:78:d4:2a:11:d6:
a3:18:b3:40:f6:57:67:1f:e9:20:ec:4e:d2:49:f4:6d:d5:84:
40:10:0b:89:61:7b:5b:c5:dc:f7:e5:57:ee:2c:48:b4:13:6e:
9b:37:d3:36:a3:c2:d1:a6:79:61:68:87:cf:e1:93:35:cd:8c:
f5:79:92:0d:2f:09:73:b7:74:73:9e:59:d7:6f:15:7d:61:45:
19:1e:f2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:52 2025 by rpki-client