Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/gQOimtgsza9GRs_y6cIwVQU3FWY.roa
File: gQOimtgsza9GRs_y6cIwVQU3FWY.roa (raw, json)
Hash identifier: /2gUw/z80hdWcUCwNYzLw+II6zCDSrc6ZqrMZduhkgg=
Subject key identifier: 81:03:A2:9A:D8:2C:CD:AF:46:46:CF:F2:E9:C2:30:55:05:37:15:66
Certificate issuer: /CN=792c5d8c32caa4662316858c65bebe12c861ad67
Certificate serial: 018CC8DF3EF7153255F14D17675C77C795AF
Authority key identifier: 79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/gQOimtgsza9GRs_y6cIwVQU3FWY.roa
Signing time: Tue 02 Jan 2024 06:32:02 +0000
ROA not before: Tue 02 Jan 2024 06:32:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49672
IP address blocks: 91.212.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:3e:f7:15:32:55:f1:4d:17:67:5c:77:c7:95:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792c5d8c32caa4662316858c65bebe12c861ad67
Validity
Not Before: Jan 2 06:32:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8103a29ad82ccdaf4646cff2e9c2305505371566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:13:e3:21:b5:64:37:24:ba:45:22:0e:af:4f:
c7:a4:ae:be:65:73:a9:d0:00:45:df:96:ce:10:d0:
fe:23:d8:70:a5:39:52:f7:53:c8:ce:a3:7e:f8:cc:
34:a8:69:11:93:b2:b9:2a:b3:02:5c:3d:66:bc:e6:
a2:22:e9:31:9d:e1:2b:8a:e8:f8:1e:a2:83:6f:be:
13:ba:76:4e:9b:f0:6d:d6:5a:71:a2:9b:80:35:3d:
d1:7c:45:e5:d5:5c:c6:5e:af:67:57:63:8d:a3:1a:
fb:f3:c6:bc:b0:fb:4b:7f:5e:dd:58:9f:d1:c6:f8:
2c:22:ee:15:dc:90:67:c6:b1:5a:c3:51:bb:c3:2e:
75:57:ff:93:03:1c:53:f0:94:9d:a1:8b:3e:a3:00:
ec:4b:fe:94:b8:9f:af:72:17:89:b3:e0:b9:32:f0:
82:fb:81:9d:0c:73:46:78:f3:55:ca:08:f9:bb:af:
56:ab:bc:48:da:d3:81:d4:c8:84:b4:00:97:53:ec:
c5:1d:57:77:68:27:f2:b6:7e:04:e7:99:78:a0:78:
06:a0:4a:e3:de:45:ab:65:e6:d6:ed:83:10:a6:8f:
3c:99:56:75:0e:33:b6:1e:58:3c:ac:b3:d0:18:42:
35:7c:35:32:9a:ce:5a:b7:ab:53:da:ba:88:2c:16:
d9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:03:A2:9A:D8:2C:CD:AF:46:46:CF:F2:E9:C2:30:55:05:37:15:66
X509v3 Authority Key Identifier:
keyid:79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/gQOimtgsza9GRs_y6cIwVQU3FWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.178.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:e7:96:dd:46:d1:d2:1c:a0:3a:aa:ef:f6:58:70:b7:4c:2e:
8b:0f:00:30:6d:52:74:66:df:b5:8e:38:9a:fa:5b:bc:56:25:
84:ed:15:5d:8a:7a:cf:04:1a:9b:cf:75:b9:39:b5:6e:7f:75:
ed:62:81:ad:fd:19:58:45:ce:bc:e0:bd:66:6b:61:3c:8e:d7:
87:f7:48:b3:09:32:b8:0b:f5:1c:d5:cf:df:a8:a5:0f:81:e6:
91:c4:af:01:b3:66:9c:99:2a:9b:a8:de:64:9c:64:5c:cc:57:
2d:92:55:cc:eb:44:dd:52:a9:20:df:6c:af:43:bd:c0:94:e0:
ce:d9:a1:c3:eb:b1:ee:ba:a8:4f:c0:d1:34:5c:42:88:67:88:
66:29:93:a6:e9:76:3d:fa:26:64:48:1e:99:2f:65:e3:dc:2e:
f5:6c:81:c7:e0:0f:98:cf:e7:ec:37:8e:46:d0:2b:27:da:7e:
70:e8:32:db:55:cf:87:c0:91:85:10:ea:13:ee:18:7d:65:1b:
7c:07:b8:1c:0f:ac:f7:98:fc:46:a1:c8:be:be:22:cc:f1:f4:
57:9a:9e:b9:15:e5:76:88:6d:ab:d8:13:16:0f:ef:1e:4b:ff:
4b:94:a7:9b:37:29:5b:e3:e4:c2:74:e1:a0:15:44:f1:16:ed:
c9:c2:9f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:05 2025 by rpki-client