Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/gAyhD5UqScsstpRxKKls2QgzW7w.roa
File: gAyhD5UqScsstpRxKKls2QgzW7w.roa (raw, json)
Hash identifier: CodGN/VE4KBzoz6xlgzZ5aSrZ8Cy8zaWtmrR6DSDJ4g=
Subject key identifier: 80:0C:A1:0F:95:2A:49:CB:2C:B6:94:71:28:A9:6C:D9:08:33:5B:BC
Certificate issuer: /CN=20ba71e46c75916b8e5de193cc7f81069df86f73
Certificate serial: 018CC649D6163B97BA232FC2D62141CD97BA
Authority key identifier: 20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/gAyhD5UqScsstpRxKKls2QgzW7w.roa
Signing time: Mon 01 Jan 2024 18:29:36 +0000
ROA not before: Mon 01 Jan 2024 18:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206616
IP address blocks: 185.149.92.0/22 maxlen: 29
212.15.88.0/21 maxlen: 21
2a07:7a80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:d6:16:3b:97:ba:23:2f:c2:d6:21:41:cd:97:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ba71e46c75916b8e5de193cc7f81069df86f73
Validity
Not Before: Jan 1 18:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=800ca10f952a49cb2cb6947128a96cd908335bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:31:f1:ba:e5:c5:51:d5:f3:0a:8c:f0:1f:e2:
9f:89:37:7f:e0:4b:bd:31:3b:ce:d2:12:c7:76:3b:
0b:64:40:fc:6e:75:32:80:3b:1d:1a:b5:6f:d0:3c:
e0:81:e5:99:2a:56:de:58:ce:56:f2:28:b9:3c:35:
60:97:6f:24:36:cc:41:5f:e1:0f:b4:7d:63:32:5a:
82:9b:c6:c4:80:5a:c8:80:3a:93:8c:c2:4b:28:4b:
56:70:dc:91:ff:1e:b6:fb:05:15:5c:de:58:5c:e5:
13:9c:e1:b0:1d:aa:16:fc:77:7d:66:5f:d0:86:f2:
76:f7:a9:b0:0e:e3:ca:5c:c8:47:39:1a:fe:a8:a3:
e0:f1:70:19:51:c3:f3:2a:f6:17:3b:8c:b0:3d:64:
d2:14:e5:38:ce:09:16:3e:8b:16:77:dc:6e:92:1e:
32:91:0b:31:bc:87:da:6c:90:89:56:d3:66:54:1d:
84:e2:e9:2e:e7:7e:07:8a:bb:c1:a8:90:b2:cf:80:
2a:2d:7d:f8:2b:9b:db:5f:c0:b2:37:da:7e:7f:d5:
ca:51:59:16:b3:18:db:51:80:ba:3c:9b:ec:30:3d:
91:3e:81:91:03:fb:0f:60:15:48:9c:f6:ef:fd:28:
f2:b4:95:28:eb:3b:b9:d8:02:40:cc:27:e7:b4:68:
19:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0C:A1:0F:95:2A:49:CB:2C:B6:94:71:28:A9:6C:D9:08:33:5B:BC
X509v3 Authority Key Identifier:
keyid:20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/gAyhD5UqScsstpRxKKls2QgzW7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.92.0/22
212.15.88.0/21
IPv6:
2a07:7a80::/29
Signature Algorithm: sha256WithRSAEncryption
0c:ab:43:3a:53:6e:48:66:48:a5:a3:25:08:69:d7:d4:ee:c0:
eb:46:6e:1e:45:6a:be:c7:46:4e:ad:4b:9d:f3:82:df:0d:73:
f7:a9:3b:a9:a6:a1:80:83:df:52:1c:0d:ad:5a:41:83:5c:55:
cf:33:9a:ee:22:1b:4c:8e:35:21:83:b5:6b:b7:8a:26:1e:2d:
18:43:5a:b5:45:f6:1d:81:01:f4:43:49:62:33:53:13:a7:b8:
33:9a:c1:2b:c0:f2:89:db:86:c8:62:aa:8a:71:0e:b6:ae:8d:
f8:e7:44:29:ac:96:e6:34:70:66:74:17:df:74:de:18:ee:45:
f5:85:ba:23:99:d8:04:09:b1:1e:2c:d1:ec:b0:a1:39:77:fe:
4b:6a:28:17:73:06:22:75:8b:69:75:89:88:bf:77:67:15:e1:
03:3e:cf:93:25:fc:60:90:fa:33:9b:a5:f3:e7:58:a2:6f:99:
96:0f:96:4f:15:b1:2e:29:fb:15:93:8f:b7:37:4d:a8:46:12:
f7:61:62:09:bd:51:ae:36:65:54:c7:23:2d:a1:61:45:d8:82:
66:7e:07:95:7a:0f:9b:a5:61:23:f5:ea:1e:ea:33:23:e0:c3:
eb:ce:a4:8b:b9:51:53:e8:0c:52:79:9f:a5:29:07:85:fe:22:
88:70:de:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:35:52 2025 by rpki-client