Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/GTTvQu_0DsYZyP2JjUrKicMsxyo.roa
File: GTTvQu_0DsYZyP2JjUrKicMsxyo.roa (raw, json)
Hash identifier: jn7AN5i4IkRaz4BZDY15cN8iuSuOsFXpg/uO60KQ74k=
Subject key identifier: 19:34:EF:42:EF:F4:0E:C6:19:C8:FD:89:8D:4A:CA:89:C3:2C:C7:2A
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018D84C4589DB1A91ED54C728DC96527F5BA
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/GTTvQu_0DsYZyP2JjUrKicMsxyo.roa
Signing time: Wed 07 Feb 2024 18:11:16 +0000
ROA not before: Wed 07 Feb 2024 18:11:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43201
IP address blocks: 37.72.139.0/24 maxlen: 24
194.56.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 15:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:c4:58:9d:b1:a9:1e:d5:4c:72:8d:c9:65:27:f5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 7 18:11:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1934ef42eff40ec619c8fd898d4aca89c32cc72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0b:fe:72:ae:e1:c1:35:58:10:85:bb:7c:4b:
24:a4:df:28:8f:bb:61:2a:21:33:7c:06:7b:ef:a1:
68:a8:ab:f1:cb:7c:bb:f0:44:a3:c9:16:e3:c7:63:
b7:d8:f3:1a:2d:bf:87:42:71:41:ac:2e:2b:12:19:
cf:e4:b1:bf:15:ef:1b:f7:9d:eb:6f:c2:e9:65:80:
17:39:07:8a:f8:fb:50:66:9b:34:a1:74:92:69:13:
6d:1e:8e:db:8a:d5:a0:99:33:2d:d8:49:10:c3:a6:
73:e5:fb:5a:97:3b:57:5f:49:72:34:3d:f5:0f:e1:
ce:0d:ed:36:61:02:94:4d:1e:cf:d0:42:fd:4e:2d:
01:80:5e:6a:31:81:3b:72:f0:2a:a7:ab:01:21:11:
d7:79:5a:20:6c:21:64:56:ce:0b:f4:28:00:1d:77:
20:84:de:be:9c:a6:60:b4:33:c0:cf:37:cb:d1:7d:
dd:21:12:b5:48:d7:b2:03:1f:3d:78:a8:10:31:9d:
e8:1c:b7:45:c8:4f:2d:a3:f8:8a:fb:bc:73:39:8f:
54:7e:76:8b:de:5a:c9:b7:94:a8:ee:3d:ee:dc:b7:
34:c9:b4:5e:85:94:51:21:86:2a:ac:43:0d:15:93:
be:2a:52:60:2f:d3:a6:31:d3:2a:04:b3:95:e0:3a:
86:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:34:EF:42:EF:F4:0E:C6:19:C8:FD:89:8D:4A:CA:89:C3:2C:C7:2A
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/GTTvQu_0DsYZyP2JjUrKicMsxyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.139.0/24
194.56.180.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:0b:1e:6f:0d:cf:2c:ae:00:f2:25:f0:45:86:9f:15:a2:08:
62:37:62:a7:a4:d7:31:69:e8:58:af:56:ee:69:55:fb:7d:8f:
09:af:1d:7f:a6:5b:f1:46:71:7f:7e:ac:42:09:56:50:43:2c:
87:8f:cb:7f:0a:00:da:d0:78:f3:fc:46:43:b5:82:62:fd:50:
31:20:6b:03:0f:5b:63:9f:54:5c:d7:09:80:7a:e8:b0:cf:86:
24:f3:96:c6:93:e9:49:f8:aa:1a:b8:94:fe:a9:21:d1:7f:8a:
e4:69:96:0c:fa:b9:06:fb:09:5a:f2:db:25:80:09:af:74:b4:
8e:6b:5e:ee:d1:45:79:e7:64:12:c4:88:7e:7f:ef:a4:1d:67:
c8:0b:a4:4e:70:c4:0e:43:b3:84:f3:aa:2a:cf:d4:83:16:2d:
9a:b3:72:50:6d:28:80:10:e6:b2:18:f5:ab:45:97:0e:7c:1e:
29:c2:09:13:cd:2d:6b:f9:0e:13:8c:15:22:53:8b:e0:92:6e:
ee:8f:ba:b6:40:6e:f3:e3:0d:46:bf:40:f9:37:d7:79:ae:9b:
a6:47:d8:0b:10:eb:2e:20:af:58:c8:10:b5:6c:8c:cf:f2:fa:
07:6d:ea:c3:77:4a:01:fa:22:1f:60:de:0d:dd:6e:e7:ec:2a:
06:6b:e0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 20:24:02 2024 by rpki-client on console-fra.rpki-client.org