Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/gyCsIlFSOFEGm17n_jF4p6W3_9c.roa
File: gyCsIlFSOFEGm17n_jF4p6W3_9c.roa (raw, json)
Hash identifier: or4fOtxtRKojZT1BVsiwDuJbA33RzAeT2WaRIUuF2R0=
Subject key identifier: 83:20:AC:22:51:52:38:51:06:9B:5E:E7:FE:31:78:A7:A5:B7:FF:D7
Certificate issuer: /CN=7a0b64cb6f18a114174231050b0179931b5e486d
Certificate serial: 019425FD9F6C91478CF9E4D8E355D542B981
Authority key identifier: 7A:0B:64:CB:6F:18:A1:14:17:42:31:05:0B:01:79:93:1B:5E:48:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/gyCsIlFSOFEGm17n_jF4p6W3_9c.roa
Signing time: Thu 02 Jan 2025 07:49:25 +0000
ROA not before: Thu 02 Jan 2025 07:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47609
IP address blocks: 91.206.132.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 26 Jan 2025 21:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:9f:6c:91:47:8c:f9:e4:d8:e3:55:d5:42:b9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0b64cb6f18a114174231050b0179931b5e486d
Validity
Not Before: Jan 2 07:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8320ac2251523851069b5ee7fe3178a7a5b7ffd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6e:e6:29:50:3c:13:bd:a6:f3:8b:a1:24:16:
9a:25:7c:7b:4c:fd:6b:bf:04:cd:ad:5e:b3:39:ff:
16:66:17:a5:1b:2e:6e:d4:a1:54:e3:1d:e5:c3:f6:
d1:09:9f:75:68:7e:f0:a5:b0:f5:55:4b:1c:fc:2f:
c2:8d:72:6a:af:9b:63:85:8a:7f:ee:a5:24:e7:b1:
b6:9e:20:ab:8b:44:31:05:ed:17:36:1c:97:67:6e:
88:06:b8:f7:5c:5f:77:89:c7:b4:39:1f:42:d4:0e:
67:27:85:21:6b:11:95:71:c4:93:0e:dc:f6:5d:02:
bc:bc:b8:3d:79:17:a6:44:02:3d:5e:e0:8f:ba:d3:
ab:a9:39:88:9a:8f:df:56:b0:e3:65:2d:55:ac:ca:
11:f1:ed:f0:04:93:20:06:83:99:fe:2c:8e:12:44:
e0:e8:31:31:20:2e:9a:60:9b:7b:22:61:86:68:5f:
b7:e0:ac:50:20:72:bd:fd:0b:26:5e:43:d2:49:22:
b5:6d:ba:b1:b9:e3:53:b4:ef:a4:56:01:11:50:60:
8f:b7:54:29:d6:2a:0c:d0:5b:a2:89:d9:3e:51:60:
66:bc:20:9a:34:49:47:f7:0a:f2:82:59:8c:b9:d1:
3e:5e:f1:9f:14:08:74:f9:6c:b8:48:05:e5:56:14:
35:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:20:AC:22:51:52:38:51:06:9B:5E:E7:FE:31:78:A7:A5:B7:FF:D7
X509v3 Authority Key Identifier:
keyid:7A:0B:64:CB:6F:18:A1:14:17:42:31:05:0B:01:79:93:1B:5E:48:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/gyCsIlFSOFEGm17n_jF4p6W3_9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.132.0/23
Signature Algorithm: sha256WithRSAEncryption
53:14:8e:48:9e:d4:fa:82:de:5d:29:45:cb:f6:ff:59:34:aa:
5d:db:5a:70:43:80:2d:b2:fc:0f:84:91:82:90:e4:5c:4d:d5:
a5:fb:98:6e:fa:79:cc:70:ec:83:20:22:95:f2:d1:a1:56:0b:
be:56:af:a5:f8:b0:8e:73:95:a6:f0:ed:c9:0b:fe:84:8f:40:
77:d8:21:5b:7a:e5:bb:f0:c5:15:29:87:70:47:38:e0:36:bd:
65:2b:99:2b:d3:e6:68:34:de:b2:24:9c:da:b7:35:23:77:58:
4f:bf:de:1a:3a:98:a1:cf:e2:a0:a9:97:c7:52:7f:9f:af:a8:
03:0a:a2:ee:b9:46:79:01:f1:95:71:e4:f6:ba:15:2b:24:41:
1c:97:39:bb:33:b9:16:fc:17:7a:98:ec:5d:0b:8c:27:32:23:
07:c2:d4:8a:16:3f:fc:59:67:0f:62:c4:9d:a4:1f:34:3b:a6:
fe:6f:03:d0:08:61:5e:67:36:bd:0e:96:90:03:74:b3:a1:d0:
e1:4e:a5:1f:5c:54:5c:b9:0f:a8:2d:7b:9c:eb:bb:e4:2c:dc:
91:20:08:60:58:c8:91:ce:40:06:f7:ae:df:23:3c:50:d2:96:
09:02:37:30:d2:b5:24:c6:66:8e:bc:53:57:47:9d:37:00:7a:
92:8e:11:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/Z9skUeM+eTY41XVQrmBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMGI2NGNiNmYxOGExMTQxNzQyMzEwNTBiMDE3OTkzMWI1
ZTQ4NmQwHhcNMjUwMTAyMDc0OTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzIwYWMyMjUxNTIzODUxMDY5YjVlZTdmZTMxNzhhN2E1YjdmZmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW7mKVA8E72m84uhJBaaJXx7TP1r
vwTNrV6zOf8WZhelGy5u1KFU4x3lw/bRCZ91aH7wpbD1VUsc/C/CjXJqr5tjhYp/
7qUk57G2niCri0QxBe0XNhyXZ26IBrj3XF93ice0OR9C1A5nJ4UhaxGVccSTDtz2
XQK8vLg9eRemRAI9XuCPutOrqTmImo/fVrDjZS1VrMoR8e3wBJMgBoOZ/iyOEkTg
6DExIC6aYJt7ImGGaF+34KxQIHK9/QsmXkPSSSK1bbqxueNTtO+kVgERUGCPt1Qp
1ioM0Fuiidk+UWBmvCCaNElH9wryglmMudE+XvGfFAh0+Wy4SAXlVhQ1vwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIMgrCJRUjhRBpte5/4xeKelt//XMB8GA1UdIwQY
MBaAFHoLZMtvGKEUF0IxBQsBeZMbXkhtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWd0a3kyOFlvUlFYUWpFRkN3RjVreHRlU0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80MDM5ZDktYThiMC00NjU0LWE1YzMt
MjJhZTU0MmViNWRmLzEvZ3lDc0lsRlNPRkVHbTE3bl9qRjRwNlczXzljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80MDM5ZDktYThiMC00NjU0LWE1YzMtMjJhZTU0MmViNWRm
LzEvZWd0a3kyOFlvUlFYUWpFRkN3RjVreHRlU0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW86EMA0G
CSqGSIb3DQEBCwUAA4IBAQBTFI5IntT6gt5dKUXL9v9ZNKpd21pwQ4AtsvwPhJGC
kORcTdWl+5hu+nnMcOyDICKV8tGhVgu+Vq+l+LCOc5Wm8O3JC/6Ej0B32CFbeuW7
8MUVKYdwRzjgNr1lK5kr0+ZoNN6yJJzatzUjd1hPv94aOpihz+KgqZfHUn+fr6gD
CqLuuUZ5AfGVceT2uhUrJEEclzm7M7kW/Bd6mOxdC4wnMiMHwtSKFj/8WWcPYsSd
pB80O6b+bwPQCGFeZza9DpaQA3SzodDhTqUfXFRcuQ+oLXuc67vkLNyRIAhgWMiR
zkAG967fIzxQ0pYJAjcw0rUkxmaOvFNXR503AHqSjhG3
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:03 2025 by rpki-client