Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GxrDjGjJPILPE34FTc5tPLbmru0.roa
File: GxrDjGjJPILPE34FTc5tPLbmru0.roa (raw, json)
Hash identifier: /eBphiOh4COGI+/2B0/Vn8Ag74RtrdletgL6MZm2aNM=
Subject key identifier: 1B:1A:C3:8C:68:C9:3C:82:CF:13:7E:05:4D:CE:6D:3C:B6:E6:AE:ED
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FD3DB6CD2D4C3E28D7928287F1553
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GxrDjGjJPILPE34FTc5tPLbmru0.roa
Signing time: Thu 02 Jan 2025 05:49:30 +0000
ROA not before: Thu 02 Jan 2025 05:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60612
IP address blocks: 93.170.7.0/24 maxlen: 24
95.46.125.0/24 maxlen: 24
95.46.164.0/23 maxlen: 24
95.47.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 16:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:d3:db:6c:d2:d4:c3:e2:8d:79:28:28:7f:15:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b1ac38c68c93c82cf137e054dce6d3cb6e6aeed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:b3:9a:54:08:9b:4b:d7:ab:bb:55:4f:5a:
62:e2:2c:0b:3b:1a:f7:56:4c:b5:fe:39:c2:ec:95:
32:c1:e9:90:ab:68:ab:f5:dd:66:a5:f1:16:e9:77:
c8:a8:a9:6d:dc:b1:af:54:92:6f:bd:4c:ac:f1:27:
ce:81:20:16:e3:0d:63:aa:91:24:e1:f8:78:95:fc:
e0:02:e7:ec:3c:cd:fd:fd:84:4d:e5:e3:f3:56:b3:
f9:90:d0:02:5d:42:14:d0:4d:67:89:72:65:64:c7:
ba:bd:90:47:b5:6b:93:86:1f:3c:a1:e7:d3:10:be:
64:a0:fc:43:ee:f6:14:b8:17:8f:b1:46:55:54:ca:
35:bb:81:ed:0d:1e:8c:53:29:ea:a9:57:12:db:53:
04:2f:d9:4d:41:94:42:d4:d8:6c:12:f9:be:4c:3b:
0a:c9:58:e9:4c:49:af:63:12:46:ee:cd:f3:f4:1a:
c1:5e:cd:1e:08:c7:1a:df:d6:f4:81:23:c1:92:9b:
89:97:45:50:3e:4a:db:66:bd:1b:a9:d9:0a:c9:3c:
60:d0:dd:88:15:db:c9:e2:85:5a:f7:40:10:b3:65:
9e:3e:a0:b1:10:ec:9d:5f:d1:44:a8:50:21:bc:72:
fa:4e:4c:d0:09:40:a5:b8:8d:8c:72:c0:fb:34:72:
9a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1A:C3:8C:68:C9:3C:82:CF:13:7E:05:4D:CE:6D:3C:B6:E6:AE:ED
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GxrDjGjJPILPE34FTc5tPLbmru0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.7.0/24
95.46.125.0/24
95.46.164.0/23
95.47.175.0/24
Signature Algorithm: sha256WithRSAEncryption
48:b3:c4:5b:24:95:7b:d0:8d:99:66:bc:dc:53:cf:d9:df:2e:
8f:7f:e7:a3:f8:b6:ae:50:bb:db:c3:b7:09:44:13:03:a0:a2:
1e:7a:c7:5a:51:bf:d3:33:17:16:19:c9:cc:a0:73:ba:26:97:
80:0c:f3:d0:63:37:c9:c2:24:9e:a7:f8:4c:0d:7a:1d:82:14:
5d:80:86:ff:5c:8b:15:77:95:6d:6e:2b:14:89:74:a9:5a:35:
3f:29:9e:4d:74:9a:8c:b0:09:d7:3a:85:95:3c:17:3b:55:36:
19:cf:f7:89:0d:cb:57:76:a5:63:ca:a0:da:74:ae:68:32:71:
ec:d7:40:81:d1:1c:6c:69:58:7d:c9:b2:d6:47:0a:8e:ac:59:
2e:b4:b1:6c:83:03:e9:07:a9:94:72:2e:1b:49:09:88:25:7c:
13:2f:bd:60:b5:d0:74:c7:8e:b3:b3:dd:69:3a:d2:53:a4:5e:
82:92:76:a9:98:2d:16:3b:79:b5:65:29:46:e3:1d:75:ca:d5:
c0:60:af:cc:34:fc:f5:ef:1b:91:0a:d0:6f:89:3b:6e:84:80:
28:19:b4:56:74:6d:5a:43:51:13:ce:84:65:70:b1:e7:c7:e8:
b1:28:8b:c9:c4:c5:6b:19:5b:5d:cf:83:fe:64:70:dc:dc:81:
36:39:09:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:21 2025 by rpki-client