Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/GTRenFiahX5toDdm2JOooVeiEhU.roa
File: GTRenFiahX5toDdm2JOooVeiEhU.roa (raw, json)
Hash identifier: IveB8DjTVf0zmovOTnGa/uzlqCWNxw9EZyHtGufnWQ4=
Subject key identifier: 19:34:5E:9C:58:9A:85:7E:6D:A0:37:66:D8:93:A8:A1:57:A2:12:15
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 018CC94BFFFF6D6A53F2A2795B1B24046539
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/GTRenFiahX5toDdm2JOooVeiEhU.roa
Signing time: Tue 02 Jan 2024 08:30:50 +0000
ROA not before: Tue 02 Jan 2024 08:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43413
IP address blocks: 78.41.16.0/21 maxlen: 21
92.63.48.0/20 maxlen: 20
2a04:bc00::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:ff:ff:6d:6a:53:f2:a2:79:5b:1b:24:04:65:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Jan 2 08:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19345e9c589a857e6da03766d893a8a157a21215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:05:c1:40:65:19:70:bd:01:77:15:4e:64:cb:
74:41:9a:0b:a3:31:f3:fe:07:81:54:74:9a:93:95:
48:48:b0:6a:a4:8d:54:63:5c:c6:e4:07:37:1c:b4:
29:89:cf:b5:37:b4:34:51:d3:06:f9:98:4b:1d:4a:
70:d9:60:37:28:38:cb:40:56:6f:04:26:10:3d:0c:
e5:a3:2d:aa:96:6c:4f:ca:74:63:98:43:da:56:c5:
a2:cf:dc:de:cd:7a:16:50:3b:c4:bd:eb:1b:cb:1f:
ad:81:bf:fc:aa:40:d6:f5:d7:ff:9f:83:82:c2:ee:
8c:c0:3b:fb:c6:a7:67:09:1d:07:e4:6e:ed:c6:06:
ed:3e:4c:3e:9a:f9:23:0f:c4:ce:cc:97:d2:19:6d:
bb:09:47:24:eb:d3:04:ff:31:90:b5:90:d4:92:4e:
89:68:18:ca:71:9f:6c:30:39:34:68:12:8c:79:e9:
c0:f7:57:55:dc:c6:65:ec:f6:be:c5:56:3d:df:8e:
83:3e:c6:c2:37:a2:d7:39:79:29:95:7f:5c:91:1f:
4c:9b:20:bd:a6:6c:9a:f8:d0:5b:0e:0d:f3:26:ff:
bb:9a:ea:d3:62:7d:5b:d7:9b:92:67:15:e2:09:b8:
b7:2b:aa:2d:e9:f1:88:4f:35:75:a9:0f:dc:bf:77:
4d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:34:5E:9C:58:9A:85:7E:6D:A0:37:66:D8:93:A8:A1:57:A2:12:15
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/GTRenFiahX5toDdm2JOooVeiEhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.16.0/21
92.63.48.0/20
IPv6:
2a04:bc00::/29
Signature Algorithm: sha256WithRSAEncryption
9e:dc:b9:a9:fc:0d:26:20:3f:b3:38:3b:c0:ae:da:26:92:da:
8c:32:d1:5c:23:ce:3d:5c:65:5f:1c:54:f5:19:ea:61:d1:ce:
8f:9d:9f:44:29:8c:e6:c6:4b:d0:6e:79:e4:12:3b:ad:37:56:
3d:13:34:41:b3:0c:64:3f:4b:13:b1:92:e5:25:62:b1:4b:1c:
7a:fc:95:c5:d3:03:e2:cb:ac:ca:6f:46:36:04:8b:a5:eb:cb:
f8:cb:7f:ab:54:74:fc:b8:92:59:d7:93:65:75:55:d5:03:1e:
d5:b5:3f:c9:fd:14:80:e4:ae:21:70:5c:e0:6d:11:a5:3d:89:
ff:37:14:10:35:41:6b:a9:6a:9a:d1:f8:13:e3:e2:ef:24:92:
49:c3:a4:ca:5c:61:50:5d:fb:35:f8:95:b2:a6:79:c1:72:34:
e4:02:02:fc:67:c6:a2:3b:97:02:30:06:ed:57:16:52:7f:18:
9e:ca:3f:d6:e2:8b:ef:92:ae:9c:f5:2d:2d:6c:99:ea:4c:e3:
d3:7d:51:02:79:f0:34:34:99:d6:61:27:17:da:d3:6a:d1:53:
77:fc:72:c2:91:3c:b3:c4:cf:d4:93:43:b7:2f:9e:00:86:88:
37:15:50:b0:d9:11:0a:19:fa:11:0e:83:11:b7:60:c1:36:d5:
ea:66:04:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:01:39 2025 by rpki-client