Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/gsIOm2l9uQwzS7OEhSikiAMjjDo.roa
File: gsIOm2l9uQwzS7OEhSikiAMjjDo.roa (raw, json)
Hash identifier: 3Hq7Cc2hE3biV1BXGzGcc7gTU7ZYmadq4Vz3cThDsyI=
Subject key identifier: 82:C2:0E:9B:69:7D:B9:0C:33:4B:B3:84:85:28:A4:88:03:23:8C:3A
Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial: 019425FDA6B1894DABB15380C7661B3550E3
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/gsIOm2l9uQwzS7OEhSikiAMjjDo.roa
Signing time: Thu 02 Jan 2025 07:49:27 +0000
ROA not before: Thu 02 Jan 2025 07:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43151
IP address blocks: 185.122.140.0/24 maxlen: 24
193.93.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 05:14:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a6:b1:89:4d:ab:b1:53:80:c7:66:1b:35:50:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Validity
Not Before: Jan 2 07:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82c20e9b697db90c334bb3848528a48803238c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:1b:fd:23:1c:0e:54:db:46:5e:07:f2:93:
69:96:81:9a:99:a3:78:61:1e:d4:f4:53:2d:87:2f:
26:20:32:3a:35:18:99:35:9c:b0:59:33:19:07:e4:
12:74:fc:ab:fd:33:09:ae:95:4e:75:6c:8f:d6:07:
23:7c:9a:0e:90:55:46:98:97:43:77:ea:ab:98:db:
8c:d7:39:e0:17:48:68:82:26:ab:98:d2:9f:19:0f:
a0:de:0d:bc:25:41:35:55:97:d4:58:87:fe:88:67:
14:ac:1d:e5:44:a6:83:fe:07:06:00:cd:86:29:68:
33:ac:e0:95:e5:87:2e:a2:39:a0:16:1b:51:9a:4b:
55:b3:93:43:0e:9f:43:83:0a:4b:be:4f:87:2c:ac:
ac:53:4b:6e:35:be:92:d1:7e:29:46:d9:57:20:9c:
62:1e:1b:2c:03:62:1d:4d:8e:a5:b5:01:27:c2:d9:
fe:62:07:34:f6:93:0a:c7:dc:5a:85:3a:ea:b7:d5:
90:8a:98:d2:d9:4f:de:3f:ff:a5:be:ed:af:83:d5:
a4:1a:4f:58:ec:22:c4:d4:28:ca:36:2f:08:3a:09:
20:ea:2e:dd:89:03:e6:45:92:27:b9:d0:dc:4a:ad:
08:f7:ae:f3:b2:68:62:fb:2d:fc:b3:fc:4c:c6:e8:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C2:0E:9B:69:7D:B9:0C:33:4B:B3:84:85:28:A4:88:03:23:8C:3A
X509v3 Authority Key Identifier:
keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/gsIOm2l9uQwzS7OEhSikiAMjjDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.140.0/24
193.93.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:05:a9:9c:e8:b5:9c:4b:2b:d7:20:9f:d1:04:f6:7a:ea:7d:
c8:c3:e0:cb:6f:4c:ce:83:c9:1a:73:ee:c7:da:b2:aa:a4:e3:
c3:5d:3d:37:0d:02:52:dc:fe:ee:72:94:ba:71:8f:af:45:cf:
f6:b2:6f:73:26:64:f9:7e:92:2a:c1:07:f4:99:54:f1:73:01:
04:13:e0:3b:57:20:bf:0f:94:ec:5b:2e:c9:f2:51:64:1c:27:
3c:4f:2a:61:67:06:10:8a:a2:0f:a2:cf:4c:ac:f8:e3:a6:1c:
14:71:a7:52:a0:5f:05:08:2d:58:c6:16:c9:4e:16:78:08:d0:
da:d2:e1:d6:2a:dc:c1:44:50:b3:09:92:24:bd:7b:3c:b9:cb:
f5:e7:1d:a4:49:e7:15:60:f5:46:25:ef:8d:65:06:3e:ee:c6:
6e:26:f0:a3:ae:d5:a6:cf:57:f2:1d:91:1a:ce:79:bc:b7:e9:
da:cb:4e:3a:f6:83:aa:29:25:a4:56:7c:ff:3b:57:56:cb:61:
47:c9:76:97:5b:62:e3:fc:6d:8e:d9:45:ca:c9:f8:8e:de:5a:
b8:0d:90:36:ed:a2:0e:3c:85:85:e6:1b:d4:e7:ef:35:ae:72:
cc:f4:8b:3a:de:42:0b:81:27:54:8e:d8:bf:89:91:ad:46:e4:
ac:79:b5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:54:16 2025 by rpki-client