Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/GGlwhl1bL_vztcYAuZxq3oFkbcE.roa
File: GGlwhl1bL_vztcYAuZxq3oFkbcE.roa (raw, json)
Hash identifier: S/SFYvBPGh8d1m379XYqQ8Ke2urW+db30L16dwJSuqg=
Subject key identifier: 18:69:70:86:5D:5B:2F:FB:F3:B5:C6:00:B9:9C:6A:DE:81:64:6D:C1
Certificate issuer: /CN=c69594075f31c513a1337e91759290037e667bf9
Certificate serial: 0193ABB9853610572507CB88977616F0F32B
Authority key identifier: C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/GGlwhl1bL_vztcYAuZxq3oFkbcE.roa
Signing time: Mon 09 Dec 2024 14:01:22 +0000
ROA not before: Mon 09 Dec 2024 14:01:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56998
IP address blocks: 194.164.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ab:b9:85:36:10:57:25:07:cb:88:97:76:16:f0:f3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69594075f31c513a1337e91759290037e667bf9
Validity
Not Before: Dec 9 14:01:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=186970865d5b2ffbf3b5c600b99c6ade81646dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:e3:9f:60:95:b3:c9:a2:c5:5c:5d:e3:ce:
90:fb:fe:ce:f8:9d:c9:fc:82:9c:5d:e1:f7:33:7c:
91:07:f1:c3:13:79:54:30:d5:66:58:8d:ba:48:12:
77:37:f9:ae:0d:23:48:8d:29:78:cb:c3:5c:de:e7:
56:ef:55:40:ea:02:26:72:dc:a3:17:af:a1:2a:3f:
7d:40:60:b8:d5:bb:58:05:87:71:d6:fc:7d:7a:65:
a8:7f:39:cc:6e:31:15:31:47:39:85:0b:ad:c2:9a:
53:b3:7a:94:90:d4:13:b4:9d:e0:50:10:65:72:32:
33:e3:45:17:21:79:d5:59:ea:3f:7c:d1:b9:a9:c7:
66:20:a9:16:19:b9:c4:5d:c0:cc:5c:2a:99:f6:23:
52:a3:9e:c0:ce:e7:db:d2:bc:06:8a:c2:af:0f:66:
18:f2:f9:6d:f7:04:f3:74:ba:0f:90:5b:e7:a6:a1:
f5:0c:c4:c2:49:11:e5:08:ae:d5:10:8b:e1:c2:37:
0f:75:d5:6e:b7:40:8d:0d:0f:2a:80:6b:e1:25:af:
c7:80:ad:68:79:b6:fe:57:80:10:d5:6d:94:ea:c9:
32:0b:c6:fc:4e:4d:19:d6:e6:57:ed:5d:92:16:68:
3e:38:54:55:69:aa:61:db:5d:6a:fe:fd:59:bb:fb:
3b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:69:70:86:5D:5B:2F:FB:F3:B5:C6:00:B9:9C:6A:DE:81:64:6D:C1
X509v3 Authority Key Identifier:
keyid:C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/GGlwhl1bL_vztcYAuZxq3oFkbcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.164.240.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:06:26:60:6c:1f:77:c6:68:10:e8:57:54:39:6d:c2:fe:b8:
3d:54:d8:83:e1:37:c3:7f:fd:73:a2:5f:f0:98:e9:fe:0d:58:
95:f4:51:3b:42:f7:1e:d6:d5:0d:f7:30:b5:f5:d6:45:00:5b:
8e:b6:76:18:23:49:cd:ed:9d:98:ce:64:01:1d:8f:84:3b:7f:
66:a9:ba:7a:d2:49:ee:a4:e9:f4:13:33:5b:41:2f:f7:50:26:
1a:cf:d4:02:fc:21:02:f2:c2:a9:b8:b6:a4:a6:81:c9:19:7d:
03:12:64:a1:c6:17:16:3c:88:96:59:a8:79:22:a2:ac:22:15:
fb:b4:90:d2:b4:da:4a:1f:8b:ed:4f:4d:07:cd:e5:89:f3:6c:
df:41:30:e1:0f:97:13:60:9f:6d:23:82:d5:d8:a6:64:0a:1d:
86:d4:fb:62:c5:3b:2b:ee:63:66:47:63:97:63:9a:5b:a4:3f:
18:7f:cb:6f:15:01:d1:b9:7f:da:39:dc:49:a8:d7:d5:25:6c:
7e:0d:c9:77:96:b8:6d:f9:bd:e7:7a:36:ac:49:8e:3e:c9:54:
ae:b1:1f:32:16:dc:a7:4c:28:ef:21:c5:f6:92:57:70:29:12:
31:f6:fb:14:4d:c8:45:30:e0:fb:50:4b:fb:fb:0d:8a:88:38:
e7:e3:94:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:03:27 2025 by rpki-client