Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GK_yceWIaPJi39_pLdCRy936U0k.roa
File: GK_yceWIaPJi39_pLdCRy936U0k.roa (raw, json)
Hash identifier: AL2133DM45H2+dwkba3T/K+/GWTGvm7NzX46dgtsXbs=
Subject key identifier: 18:AF:F2:71:E5:88:68:F2:62:DF:DF:E9:2D:D0:91:CB:DD:FA:53:49
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A073FAEB301BDE27206B263CF8372
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GK_yceWIaPJi39_pLdCRy936U0k.roa
Signing time: Tue 02 Jan 2024 12:33:21 +0000
ROA not before: Tue 02 Jan 2024 12:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49811
IP address blocks: 31.148.16.0/22 maxlen: 24
31.148.244.0/24 maxlen: 24
93.170.48.0/23 maxlen: 24
93.171.236.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 13:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:07:3f:ae:b3:01:bd:e2:72:06:b2:63:cf:83:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18aff271e58868f262dfdfe92dd091cbddfa5349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:85:76:ab:e7:de:78:85:67:6e:df:ea:5b:
dc:d2:b4:05:8f:06:bb:69:33:7c:bd:ea:db:30:11:
e8:6d:0d:2c:9d:8c:7f:6e:3c:76:83:1a:44:c1:b4:
96:83:50:8b:fd:ac:2a:ef:a5:93:87:d4:8b:d5:de:
cb:38:dd:d7:33:90:ee:8b:85:02:94:ad:0a:49:09:
5a:67:2b:e2:09:b2:3d:77:a9:8c:31:e9:56:ee:99:
07:4a:67:2c:c5:a0:6a:9a:b4:ff:20:0e:77:85:0d:
b6:9e:d2:bc:3a:88:8d:0b:a8:a4:98:a7:a3:25:b4:
91:33:e2:67:b3:ef:00:2b:e3:f7:5d:8e:08:e0:b6:
07:3d:44:81:f1:5e:4a:35:f5:f3:a1:03:75:73:7c:
ff:22:ab:6c:0f:f8:3a:8a:d4:be:72:ca:0d:2b:d4:
fd:42:b9:e9:46:2a:60:e8:f6:f8:4d:02:35:06:7b:
78:d1:a2:dd:57:03:e8:75:a1:b4:10:43:20:15:d7:
d4:d7:7e:fa:19:ef:0c:a8:36:a7:bb:b3:89:b7:35:
41:cb:87:9b:8f:e4:af:a9:54:8e:82:67:0b:28:fc:
9f:0d:7b:ff:4f:3f:52:74:24:60:fe:6d:ce:c6:61:
e0:be:ae:7b:df:a3:1d:1b:83:38:39:70:7f:34:a4:
da:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AF:F2:71:E5:88:68:F2:62:DF:DF:E9:2D:D0:91:CB:DD:FA:53:49
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GK_yceWIaPJi39_pLdCRy936U0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.16.0/22
31.148.244.0/24
93.170.48.0/23
93.171.236.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:07:dc:a8:b9:e8:a3:6e:b7:72:ea:03:db:00:49:68:27:2a:
4f:99:23:b4:85:77:c2:43:c1:9c:29:c2:90:d8:11:ce:04:96:
77:d9:b4:79:db:44:b0:36:96:25:b7:2b:83:58:c7:71:9c:7b:
95:fb:6d:8c:75:0d:df:d4:ce:f4:35:c8:2c:ad:f6:e7:99:32:
ef:27:75:39:bb:90:45:93:93:15:35:99:f9:36:33:f0:a3:70:
57:a1:c7:41:cf:1e:03:7a:5f:5d:38:ec:08:cf:51:53:a8:29:
3a:c4:30:75:0b:41:e3:bb:18:7f:21:40:a3:b4:08:45:c6:ab:
4d:c2:72:7c:ee:1a:d5:1c:2d:5d:4c:0f:2a:c5:43:d4:20:45:
a8:d8:34:9c:eb:92:1c:9e:fd:ec:f3:fe:d6:94:c4:a0:2b:4c:
93:1c:12:c1:d3:47:b8:3a:48:ff:4f:80:37:36:78:a5:27:36:
66:8f:04:f1:e5:b2:27:55:5d:ec:32:f7:72:48:37:03:3f:d2:
f3:91:4c:e5:9a:9f:11:00:e3:d2:91:28:4b:6b:60:42:02:bf:
1a:9c:53:76:38:a0:c3:23:27:5b:94:e0:10:8e:e7:e5:1d:1f:
4e:ab:e5:c2:08:4e:e8:7b:81:9c:9d:ce:2c:4d:90:d6:f0:3f:
88:4f:69:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:54 2025 by rpki-client