Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/gtUNa-BVl1JG1q0Kz9QerlJltaY.roa
File: gtUNa-BVl1JG1q0Kz9QerlJltaY.roa (raw, json)
Hash identifier: zGR1YvLzmD4Y9YNe1DJ1+Ztdvo8mvRF1/+N9QlCegso=
Subject key identifier: 82:D5:0D:6B:E0:55:97:52:46:D6:AD:0A:CF:D4:1E:AE:52:65:B5:A6
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01956C03C082D020C75336277733735BA3AC
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/gtUNa-BVl1JG1q0Kz9QerlJltaY.roa
Signing time: Thu 06 Mar 2025 15:12:19 +0000
ROA not before: Thu 06 Mar 2025 15:12:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 31.135.4.0/23 maxlen: 23
31.135.4.0/24 maxlen: 24
31.135.5.0/24 maxlen: 24
91.193.28.0/24 maxlen: 24
91.193.29.0/24 maxlen: 24
109.207.136.0/24 maxlen: 24
109.207.137.0/24 maxlen: 24
109.207.138.0/24 maxlen: 24
109.207.139.0/24 maxlen: 24
176.96.95.0/24 maxlen: 24
176.110.220.0/24 maxlen: 24
176.110.221.0/24 maxlen: 24
176.110.222.0/24 maxlen: 24
176.110.223.0/24 maxlen: 24
176.112.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 14:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6c:03:c0:82:d0:20:c7:53:36:27:77:33:73:5b:a3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Mar 6 15:12:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82d50d6be055975246d6ad0acfd41eae5265b5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8f:f0:9e:5c:b4:b7:be:ab:b1:0b:57:f3:78:
70:c8:0b:58:35:d5:bd:86:8b:3b:e8:b9:5f:ec:33:
27:db:e1:bb:04:24:c1:22:17:44:95:33:85:4f:75:
97:48:a8:38:a5:c8:f3:ea:da:3c:a3:07:7e:84:5d:
8e:d1:64:b4:a5:f1:df:f0:fa:6c:9c:79:b8:77:a6:
fd:68:95:58:df:2e:6f:be:53:60:7b:54:43:99:16:
32:e2:03:2e:c8:b9:04:99:72:1a:b0:bf:7b:19:8d:
a5:36:05:92:e2:5a:48:75:25:f9:b9:bb:14:6b:52:
10:d9:08:37:c1:3e:2c:6f:60:1d:72:c5:c2:d7:62:
57:84:cd:a0:5e:b7:ab:c5:37:03:de:64:bf:5e:ce:
2d:cf:ee:72:32:75:4c:c9:2c:83:d0:3a:9c:46:fd:
32:03:f6:39:a2:8f:c1:e3:de:cc:68:a4:2f:99:3a:
fe:a7:22:d4:fc:97:c0:7d:2d:17:6e:44:2b:38:ce:
d3:7c:d5:78:f6:83:c5:59:a3:0c:a0:2b:cd:04:ab:
fa:40:ca:ed:ae:8e:e8:51:62:f4:19:ce:46:bd:23:
b9:ed:6e:fd:5f:35:1d:3a:d4:1f:9a:07:4a:48:c5:
01:f9:5d:f9:15:b2:73:8a:f5:a2:af:d6:16:7b:f8:
e7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D5:0D:6B:E0:55:97:52:46:D6:AD:0A:CF:D4:1E:AE:52:65:B5:A6
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/gtUNa-BVl1JG1q0Kz9QerlJltaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.4.0/23
91.193.28.0/23
109.207.136.0/22
176.96.95.0/24
176.110.220.0/22
176.112.80.0/22
Signature Algorithm: sha256WithRSAEncryption
27:db:14:69:5b:61:66:18:1f:94:b2:a6:8a:8f:83:f6:6d:32:
f2:fc:76:d9:09:21:b1:e1:a8:fd:0f:6d:5f:b7:ed:24:38:d8:
76:02:a1:77:b4:16:ea:5f:e2:16:72:fb:57:ba:3a:98:e1:16:
a6:f6:4b:09:c0:4f:48:97:a7:b2:4b:de:44:aa:9e:27:4e:a0:
17:66:d5:be:fa:d0:97:b4:a9:4b:30:b9:8f:24:c9:37:37:79:
9a:92:6c:47:b8:9e:1a:d4:3b:4d:11:58:bd:c5:14:46:68:68:
30:af:d8:58:17:d6:d2:9b:19:34:20:a9:f0:d7:f3:73:ad:40:
7e:32:8c:b8:ca:d6:a1:da:01:e8:0b:e2:ba:8c:e2:e2:95:9f:
8e:4f:78:17:f4:6e:c3:c3:e5:30:cf:25:86:7e:21:15:c6:3b:
76:31:3f:e3:98:56:cf:7e:ec:54:08:8e:c6:92:10:07:62:c4:
20:0c:2f:2c:54:fa:e2:de:4c:e8:27:81:cd:c7:9d:4a:ed:51:
df:b7:63:4e:fa:9d:26:08:c9:9d:8f:40:ae:4b:64:aa:11:c1:
62:3b:53:71:6d:19:be:e0:c2:7f:b8:be:2c:88:96:41:9f:8d:
57:eb:45:97:d5:37:8f:9f:1d:1f:d6:f4:39:e8:52:9d:97:65:
02:b1:4f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:26 2025 by rpki-client