Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/gCXqIU9tD3oNpV_aeSrCHxksIhU.roa
File: gCXqIU9tD3oNpV_aeSrCHxksIhU.roa (raw, json)
Hash identifier: Bg/QVDeTDxZwyPxjCnkXuj6vvuJIIRM8KIJ+i7rNGK4=
Subject key identifier: 80:25:EA:21:4F:6D:0F:7A:0D:A5:5F:DA:79:2A:C2:1F:19:2C:22:15
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 0193F9288F49C92780C5ECED970565BD0E54
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/gCXqIU9tD3oNpV_aeSrCHxksIhU.roa
Signing time: Tue 24 Dec 2024 14:53:25 +0000
ROA not before: Tue 24 Dec 2024 14:53:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22773
IP address blocks: 195.64.122.0/24 maxlen: 24
2a10:d505::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f9:28:8f:49:c9:27:80:c5:ec:ed:97:05:65:bd:0e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: Dec 24 14:53:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8025ea214f6d0f7a0da55fda792ac21f192c2215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:16:79:3e:9b:59:f0:bd:33:1a:4f:ed:4a:2e:
5e:5f:38:17:64:74:c6:90:e3:be:5d:58:2e:ba:40:
8e:52:90:8d:2d:15:c9:c7:e2:42:83:48:f9:68:67:
97:53:4b:73:8e:c4:30:32:66:a5:8e:2a:9b:bf:87:
06:b9:54:9d:a9:23:e9:e0:25:b0:78:60:0f:bf:2e:
74:09:d3:52:98:c3:66:e7:9e:f2:cf:f6:a0:a6:41:
15:9d:1e:7a:c0:04:f2:28:d1:19:9c:d9:4d:16:a1:
87:a9:a0:95:49:51:9a:99:06:e3:fd:5d:ce:12:41:
65:7c:8a:5b:36:c5:1f:76:47:ad:dc:b4:fc:57:57:
95:bf:30:c0:a9:77:e9:21:f7:56:54:fc:22:16:ae:
00:c4:9e:9a:66:9f:a9:dc:60:32:ac:4e:bf:82:0f:
4e:0e:18:01:09:3c:0b:9c:0f:51:73:ea:11:50:8e:
0e:fe:2d:31:0a:f9:4b:18:22:1b:ae:c3:66:03:f6:
ff:2b:54:c2:0d:93:2a:bd:a8:fd:72:db:12:57:b4:
ee:ae:71:ea:e5:25:20:e4:f0:ed:37:a8:7e:e8:19:
54:1e:80:17:30:06:c9:be:b2:7c:de:eb:16:01:7c:
3a:24:11:65:19:08:ca:fe:23:e3:db:fe:73:18:a8:
60:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:25:EA:21:4F:6D:0F:7A:0D:A5:5F:DA:79:2A:C2:1F:19:2C:22:15
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/gCXqIU9tD3oNpV_aeSrCHxksIhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.122.0/24
IPv6:
2a10:d505::/32
Signature Algorithm: sha256WithRSAEncryption
3b:5f:2b:5f:44:35:8c:7c:c6:ad:bd:dd:95:ae:2b:45:e9:5e:
0d:b9:1b:1f:51:bd:27:21:0e:e5:02:ac:5f:2c:66:b9:70:4f:
42:7d:85:88:28:a1:08:92:c5:ed:c2:f8:a3:c3:f0:d4:8e:60:
63:94:b8:74:62:2b:f1:6a:27:c4:cf:4e:ea:90:79:ad:7b:84:
a8:69:67:5c:3b:96:7a:bb:65:2f:48:c1:c4:05:8b:bd:c2:4c:
f7:0e:e7:6b:dd:86:bf:4d:84:c6:3b:96:5e:50:ed:f2:9d:14:
4b:96:dc:9a:62:3d:78:86:b0:b9:6a:be:19:23:a3:b8:73:71:
a7:4e:48:1d:7a:4e:68:54:38:11:dd:b5:9f:ad:dc:7d:86:06:
b2:69:12:78:82:9a:48:ff:11:c5:35:e0:3f:78:00:6d:48:70:
66:bf:e0:08:3e:60:8b:95:d3:68:f2:2f:09:3d:fe:2c:84:cc:
72:b6:11:8a:0e:ed:74:ac:75:ca:4e:43:23:7d:fb:c6:60:58:
a0:88:28:29:4a:15:7f:9a:39:2a:26:91:e1:38:b0:1a:ef:88:
97:7f:86:c0:a4:42:4f:1a:d8:ae:a2:f0:a3:6a:24:85:89:3c:
96:a7:ff:e5:88:a8:4b:a9:00:23:a6:63:bc:14:b8:12:e9:30:
0f:f2:86:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:19 2025 by rpki-client