Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Ghyc0QMUA7rPr0ILNWwGDrpEAUg.roa
File: Ghyc0QMUA7rPr0ILNWwGDrpEAUg.roa (raw, json)
Hash identifier: DUr8YEiWMyxGdYbGRfkEaTj7hP3M7of5IqQNcINLZ4E=
Subject key identifier: 1A:1C:9C:D1:03:14:03:BA:CF:AF:42:0B:35:6C:06:0E:BA:44:01:48
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018E85C7270A7221B08B7A9C925C457802AA
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Ghyc0QMUA7rPr0ILNWwGDrpEAUg.roa
Signing time: Thu 28 Mar 2024 15:56:45 +0000
ROA not before: Thu 28 Mar 2024 15:56:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43350
IP address blocks: 83.171.232.0/22 maxlen: 22
194.62.132.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:85:c7:27:0a:72:21:b0:8b:7a:9c:92:5c:45:78:02:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Mar 28 15:56:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a1c9cd1031403bacfaf420b356c060eba440148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:27:34:b8:a9:91:29:78:f2:3d:0c:8b:59:f1:
b2:af:68:b4:e1:04:69:26:af:73:05:5c:46:83:52:
12:8b:89:bb:da:c1:ba:58:f5:bd:1d:8b:eb:cd:14:
37:49:40:a1:30:18:db:d6:d4:f9:8f:18:79:73:fd:
d4:bc:17:a2:4f:3f:2a:c1:06:cd:60:f4:0e:98:33:
cf:36:36:46:42:45:35:f9:ab:e3:5a:16:75:2a:be:
f3:a7:39:3e:c0:e7:86:51:f3:1a:12:d4:d3:02:4d:
e8:b8:30:f9:b2:24:4f:14:4e:b3:72:c7:93:fd:d6:
5f:41:db:fe:0f:01:b5:f9:86:9a:e4:3d:ab:56:8c:
87:f7:cf:f1:a2:e0:b5:16:51:7d:b3:7b:c3:40:f2:
ee:9d:dd:cf:d7:70:e2:43:c6:3a:7a:99:2b:95:5b:
41:f8:c8:25:46:10:be:8c:3f:84:d2:db:54:69:72:
1d:ef:ad:a8:a4:b8:19:54:98:25:f7:8f:f2:be:a0:
41:bc:61:9d:92:d9:86:36:8c:f9:95:61:4a:3d:74:
09:7c:32:32:9e:d2:33:44:fd:f3:7b:76:7d:50:92:
51:e3:b2:10:a1:6c:06:76:c6:02:19:b8:a7:c9:66:
c2:59:ca:d7:f2:df:61:fa:ee:34:69:d8:49:05:4a:
9d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1C:9C:D1:03:14:03:BA:CF:AF:42:0B:35:6C:06:0E:BA:44:01:48
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Ghyc0QMUA7rPr0ILNWwGDrpEAUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.232.0/22
194.62.132.0/22
Signature Algorithm: sha256WithRSAEncryption
53:e9:52:ef:5b:89:8b:ca:de:21:51:5e:ee:4d:5d:46:97:78:
96:12:3c:3d:43:67:fa:ac:a3:c2:ba:8e:52:9a:f2:bf:3a:f6:
c5:10:30:d2:6e:51:d2:7a:ee:a2:54:0a:70:4d:a8:76:1a:e2:
b9:ca:03:66:a9:a8:1d:a5:8e:39:64:fc:35:30:04:78:11:33:
92:11:55:9e:c3:45:17:28:61:7b:26:67:8c:b5:19:60:31:cc:
80:8c:15:dd:ef:98:a5:a4:fd:80:65:be:1c:a8:62:25:b5:b6:
d2:a8:f9:d6:81:78:34:71:15:66:2c:10:ba:65:0b:20:ad:c8:
75:e2:33:79:f8:8c:c5:4f:7f:a5:89:9d:90:38:37:66:1c:f9:
ba:06:71:a6:52:4b:d8:66:c0:6f:66:45:81:4a:fe:48:f9:d6:
10:0e:8f:27:9a:84:56:c0:7d:28:5c:b7:38:f8:52:45:89:43:
c5:c8:02:26:d6:ba:50:99:d3:ba:0d:8a:1d:17:03:c7:d4:e2:
7e:28:91:1f:bd:18:73:f7:4d:89:4f:0b:af:12:56:fe:a8:4e:
ea:1e:62:b5:ff:3b:a1:b6:9e:b7:1f:17:cf:0f:c1:b4:e9:2d:
70:b0:9a:f1:05:6f:91:77:b1:94:a5:dc:be:f0:05:bb:55:ef:
c1:1b:8b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:12 2025 by rpki-client