Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/GA-1QdnA9f8lTxl7RJcu2kZjXNw.roa
File: GA-1QdnA9f8lTxl7RJcu2kZjXNw.roa (raw, json)
Hash identifier: 2z4m079PWAUeLYzkNp6DdR6NUYHBPf4+wG9sLKAYV9M=
Subject key identifier: 18:0F:B5:41:D9:C0:F5:FF:25:4F:19:7B:44:97:2E:DA:46:63:5C:DC
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 018E8458F10E912DDE19790301FEF0E8AD62
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/GA-1QdnA9f8lTxl7RJcu2kZjXNw.roa
Signing time: Thu 28 Mar 2024 09:16:45 +0000
ROA not before: Thu 28 Mar 2024 09:16:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 85.203.45.0/24 maxlen: 24
85.203.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 19:35:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:84:58:f1:0e:91:2d:de:19:79:03:01:fe:f0:e8:ad:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Mar 28 09:16:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=180fb541d9c0f5ff254f197b44972eda46635cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:20:d6:41:3e:e5:f5:ff:9a:d2:77:cf:d3:
74:19:7f:f0:75:8a:89:65:7e:02:be:95:20:47:45:
2c:12:3e:86:09:ed:d9:35:e7:05:ff:a4:a0:47:d2:
e7:50:4e:ba:92:00:42:ea:4b:86:45:88:92:c8:18:
48:43:77:71:2b:16:b2:4d:96:c0:8c:25:39:52:53:
8a:75:91:8e:77:e5:48:ff:be:da:b9:00:86:29:a0:
80:ae:01:49:00:aa:95:37:50:8e:40:b2:a6:93:92:
00:1b:93:72:4a:c1:70:69:99:5d:75:ee:85:95:cc:
23:e5:4b:c7:bb:99:62:73:d3:77:4c:80:ac:df:b7:
86:a4:74:8c:9b:77:2b:60:8d:fe:1b:f4:2a:f7:e1:
d9:a1:34:f1:8d:01:42:e5:da:a0:91:3a:be:8b:4d:
4a:20:82:31:f7:da:38:c7:19:3c:08:6c:b2:2a:59:
fd:d1:72:47:b2:25:f1:0e:23:01:3e:6f:19:a7:86:
90:22:39:ac:2c:7b:33:f8:a1:2a:6e:4c:77:41:97:
90:94:2e:9b:d4:f4:f6:b6:3f:48:c8:c4:14:84:b1:
38:18:00:1f:9f:cb:e3:7b:d3:c7:c1:55:bd:6b:f3:
c7:74:28:4c:66:40:31:b9:5f:d0:1d:ce:b7:9c:d1:
b3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0F:B5:41:D9:C0:F5:FF:25:4F:19:7B:44:97:2E:DA:46:63:5C:DC
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/GA-1QdnA9f8lTxl7RJcu2kZjXNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.45.0/24
85.203.54.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d4:cf:5c:e9:72:34:73:f0:93:20:53:f9:6f:d5:9b:02:f0:
d3:c6:4c:35:54:6c:fb:7d:ce:52:96:9c:ce:29:73:d6:8b:26:
19:25:b2:1b:ce:63:59:bd:73:b4:81:a2:63:6a:02:10:72:ac:
1c:ad:b2:48:3b:59:1b:5a:ee:90:bd:2c:ec:25:8f:76:2d:70:
54:1d:28:61:ad:bb:e2:26:b7:2e:19:89:8b:6e:f7:d6:68:f3:
4f:2d:aa:f0:bc:d2:3c:37:6e:dc:4a:6c:f9:c7:1c:0f:ad:0d:
52:fb:99:3f:97:b1:83:54:a6:75:45:02:eb:d7:4e:3e:b3:a1:
95:c7:a8:d1:9b:22:54:05:23:f9:56:27:eb:3a:a3:de:15:12:
9a:a1:0f:dc:b8:df:3f:45:2a:fb:29:e7:35:4a:42:10:34:84:
86:58:21:68:39:93:c9:76:d0:a1:65:c7:f7:80:f9:4e:b8:87:
f1:9e:2f:e6:40:2d:55:73:b9:c8:66:a8:ae:e0:4a:8e:56:ca:
83:10:de:b2:b7:5d:a9:b0:43:5b:e6:36:f9:c2:7d:82:a7:8c:
f8:38:f4:96:6c:e0:49:83:31:ed:bf:29:8f:36:76:8e:21:d2:
10:32:b0:d1:76:93:c1:1a:b2:b3:01:9d:9b:88:5f:01:3e:c4:
29:06:24:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:50:14 2025 by rpki-client