Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/gW-wR6x3Hd-FywrOCo2wbDljn7M.roa
File: gW-wR6x3Hd-FywrOCo2wbDljn7M.roa (raw, json)
Hash identifier: 7fhvE38Ne0htiPiz1wJ0uqGgIb9Ei7TgtNU5BsYZPos=
Subject key identifier: 81:6F:B0:47:AC:77:1D:DF:85:CB:0A:CE:0A:8D:B0:6C:39:63:9F:B3
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0192D32AC43B7B5CCBE2C7C1151024C3CE4B
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/gW-wR6x3Hd-FywrOCo2wbDljn7M.roa
Signing time: Mon 28 Oct 2024 12:47:28 +0000
ROA not before: Mon 28 Oct 2024 12:47:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215419
IP address blocks: 5.178.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d3:2a:c4:3b:7b:5c:cb:e2:c7:c1:15:10:24:c3:ce:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Oct 28 12:47:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=816fb047ac771ddf85cb0ace0a8db06c39639fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f3:2a:0b:93:17:ac:c3:0e:44:b6:46:ee:e8:
9f:bf:af:aa:47:a0:93:ae:81:6a:a0:e3:8e:0b:be:
04:f3:5e:fd:02:0d:29:9f:b2:ac:dd:4a:38:67:00:
c6:09:79:bb:7a:65:24:b4:d6:32:42:32:b6:9f:c0:
cc:be:a3:1f:24:c3:65:2a:4f:a8:cb:d4:b0:4d:3c:
e3:6c:c4:65:87:e1:ee:21:e8:c6:07:fd:f3:c1:75:
8e:98:4f:a2:d9:56:6f:5d:e0:65:44:cf:57:3a:2c:
1c:aa:47:b0:64:0a:a8:b3:a6:da:8a:69:01:85:16:
12:9c:c0:48:99:a0:a1:26:ca:f1:38:c6:63:cb:1a:
c6:8c:b5:28:f0:d6:1e:40:35:2c:38:b6:ed:41:7d:
79:47:5b:73:0e:1c:5a:66:0b:f8:61:14:64:7a:8d:
7a:58:59:fe:8b:4d:7e:de:08:a8:89:23:55:dd:56:
ad:aa:9a:23:da:29:bf:f9:1f:5d:71:db:d9:92:0b:
61:56:f2:fd:c0:71:84:81:6b:7d:de:c6:21:b9:49:
1c:79:95:5b:08:15:33:28:0d:67:a1:f8:04:71:02:
c3:39:62:0e:fe:8c:07:82:8a:59:d8:3f:97:16:68:
84:b7:5f:ad:e8:b8:7c:f8:bd:59:cd:7f:9d:30:96:
24:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6F:B0:47:AC:77:1D:DF:85:CB:0A:CE:0A:8D:B0:6C:39:63:9F:B3
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/gW-wR6x3Hd-FywrOCo2wbDljn7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.109.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:8c:e8:41:f5:ce:a8:4f:cf:1b:6b:c6:ce:b8:3f:9d:69:36:
29:90:82:c5:e0:46:ec:69:95:43:46:01:0a:2b:2b:81:a3:a9:
25:b3:7e:a8:36:53:bf:8e:df:3f:4d:26:e8:01:76:9a:f7:94:
7d:95:b0:74:13:c6:c1:29:f8:5f:e8:9f:7b:e2:37:a8:92:90:
4c:ee:85:06:2c:6b:78:1e:76:ae:dc:37:5f:bc:38:49:35:18:
d5:05:45:ad:79:58:1f:68:0c:51:c4:e2:3e:7d:94:84:79:19:
03:ff:83:60:3f:e9:15:cf:59:c0:d8:56:9e:e2:5c:75:7e:25:
4d:ba:f1:53:60:78:22:14:26:ce:02:2a:3d:96:cb:79:f6:8b:
8f:86:c0:e8:e5:b4:b7:b2:63:72:68:a4:81:a8:9d:d9:07:14:
e8:05:1a:11:32:bf:50:c7:f6:81:02:d3:13:19:fd:df:d9:8f:
0e:96:bc:69:57:27:d3:3a:d1:c6:d1:7e:ca:1c:08:e6:d9:e1:
df:4f:6c:69:bb:76:c6:7b:47:2d:cf:65:7d:32:85:67:32:3d:
f1:82:08:a7:1b:e6:0c:9e:b2:68:e2:b9:db:18:22:b0:bb:46:
85:7c:5c:e3:37:b9:1f:b4:f9:ce:75:d3:c9:a4:ab:b5:ac:6c:
4a:1f:fa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:11 2025 by rpki-client