Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/GGssooi9Ii2hrSc7Y5EvjogIVCQ.roa
File: GGssooi9Ii2hrSc7Y5EvjogIVCQ.roa (raw, json)
Hash identifier: 6pV6cePq41nXfmp2/YH08aPZ9ednuSh2cF2+k6Ucx5w=
Subject key identifier: 18:6B:2C:A2:88:BD:22:2D:A1:AD:27:3B:63:91:2F:8E:88:08:54:24
Certificate issuer: /CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Certificate serial: 018CCA9A117A599D8406E0561352E13DCBA6
Authority key identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/GGssooi9Ii2hrSc7Y5EvjogIVCQ.roa
Signing time: Tue 02 Jan 2024 14:35:43 +0000
ROA not before: Tue 02 Jan 2024 14:35:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62371
IP address blocks: 176.119.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:9a:11:7a:59:9d:84:06:e0:56:13:52:e1:3d:cb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Validity
Not Before: Jan 2 14:35:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=186b2ca288bd222da1ad273b63912f8e88085424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:bf:d1:5f:6b:80:cf:2c:47:ac:04:15:62:50:
73:b3:b3:42:94:9c:4b:76:6c:ed:12:2a:49:70:16:
21:bb:49:28:82:ad:2b:42:9b:96:db:ee:1d:2b:53:
14:b2:31:41:95:28:94:46:1b:19:61:fd:95:68:83:
b4:97:a1:5e:d3:db:17:25:97:66:ee:84:c5:6e:2a:
58:1f:c3:f7:4f:3b:94:20:aa:74:95:db:05:f8:69:
ad:73:c3:2a:d8:1f:11:c3:d0:2e:95:cb:38:f0:a1:
0e:67:18:be:83:ba:5c:72:29:b0:b1:01:77:32:bc:
79:88:cb:88:d0:2c:8b:36:e3:5a:99:a7:a4:fa:87:
eb:db:4b:5f:3a:5c:1f:c9:88:d2:16:79:c5:d4:cd:
72:35:b7:00:da:5d:d0:f7:0c:75:bd:44:d0:33:8f:
be:b1:e3:1d:dc:0c:4f:d9:3d:46:5d:11:fd:fe:72:
ee:5f:b0:25:ee:90:c0:e9:7d:b7:6a:a2:b3:0d:75:
09:57:13:4c:10:5c:a0:68:bc:be:9d:72:8c:39:3a:
a8:ba:64:85:a8:b4:8d:10:0f:f5:24:09:29:ff:b0:
be:bb:b7:97:fc:fb:da:aa:30:24:c2:ad:af:9e:d1:
bb:44:3b:0f:da:76:1e:63:30:65:77:11:3c:85:82:
be:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6B:2C:A2:88:BD:22:2D:A1:AD:27:3B:63:91:2F:8E:88:08:54:24
X509v3 Authority Key Identifier:
keyid:BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/GGssooi9Ii2hrSc7Y5EvjogIVCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.200.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:71:e5:64:9c:6e:6c:f9:9d:b2:a4:80:cd:61:0b:41:02:3d:
b7:a7:de:fe:15:cd:ee:04:b7:d5:72:9c:b4:37:50:3c:9b:ec:
db:1e:2d:40:27:1f:9f:a8:ad:50:ff:d6:d8:e1:89:4d:b9:be:
fd:e8:5b:2d:28:6a:b4:12:e1:cb:f9:7d:75:e3:97:f2:91:83:
4e:69:31:2f:37:54:2f:ef:a7:b9:5f:bf:fb:89:7a:b4:db:76:
1d:d8:35:a2:4c:ca:be:a4:81:38:3b:6c:d0:7b:17:fe:fd:7b:
64:10:b7:88:31:fb:e7:28:ce:c5:8d:8c:3c:97:ca:11:00:94:
bd:82:64:5a:c1:d7:25:32:90:20:2b:61:66:37:7a:11:ae:7b:
34:ba:63:b8:e8:af:7e:99:03:c5:64:40:0b:49:a0:5a:d5:e4:
3a:9e:37:d4:e1:3f:17:4d:b2:31:c4:8d:a6:28:31:1f:d1:72:
3d:f1:e2:41:73:eb:c3:58:8f:62:12:f6:b8:1d:83:45:4e:d6:
73:85:a0:ba:53:0d:1a:8d:f5:6f:c3:81:91:a0:d5:d7:45:e0:
87:20:d4:09:97:06:e5:ce:d7:cb:5a:23:9a:ed:24:3f:ce:fd:
34:23:de:17:cd:39:e9:dd:5a:4f:bc:b4:0c:05:c2:17:21:c4:
bc:8f:3b:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKmhF6WZ2EBuBWE1LhPcumMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMTVhMDI3YjVlZTRiMGU4NTM3YThmNzE5OGNmYTllYTA5
NDVhZTcwHhcNMjQwMTAyMTQzNTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODZiMmNhMjg4YmQyMjJkYTFhZDI3M2I2MzkxMmY4ZTg4MDg1NDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8L/RX2uAzyxHrAQVYlBzs7NClJxL
dmztEipJcBYhu0kogq0rQpuW2+4dK1MUsjFBlSiURhsZYf2VaIO0l6Fe09sXJZdm
7oTFbipYH8P3TzuUIKp0ldsF+Gmtc8Mq2B8Rw9Aulcs48KEOZxi+g7pccimwsQF3
Mrx5iMuI0CyLNuNamaek+ofr20tfOlwfyYjSFnnF1M1yNbcA2l3Q9wx1vUTQM4++
seMd3AxP2T1GXRH9/nLuX7Al7pDA6X23aqKzDXUJVxNMEFygaLy+nXKMOTqoumSF
qLSNEA/1JAkp/7C+u7eX/PvaqjAkwq2vntG7RDsP2nYeYzBldxE8hYK+dwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBhrLKKIvSItoa0nO2ORL46ICFQkMB8GA1UdIwQY
MBaAFLwVoCe17ksOhTeo9xmM+p6glFrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yN2NkNzEtOWRmNS00ZjVhLWE3MDEt
NmRmZTIzOWFlNTQxLzEvR0dzc29vaTlJaTJoclNjN1k1RXZqb2dJVkNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yN2NkNzEtOWRmNS00ZjVhLWE3MDEtNmRmZTIzOWFlNTQx
LzEvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHfIMA0G
CSqGSIb3DQEBCwUAA4IBAQB/ceVknG5s+Z2ypIDNYQtBAj23p97+Fc3uBLfVcpy0
N1A8m+zbHi1AJx+fqK1Q/9bY4YlNub796FstKGq0EuHL+X1145fykYNOaTEvN1Qv
76e5X7/7iXq023Yd2DWiTMq+pIE4O2zQexf+/XtkELeIMfvnKM7FjYw8l8oRAJS9
gmRawdclMpAgK2FmN3oRrns0umO46K9+mQPFZEALSaBa1eQ6njfU4T8XTbIxxI2m
KDEf0XI98eJBc+vDWI9iEva4HYNFTtZzhaC6Uw0ajfVvw4GRoNXXReCHINQJlwbl
ztfLWiOa7SQ/zv00I94XzTnp3VpPvLQMBcIXIcS8jzvj
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:24:11 2025 by rpki-client