Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/GG7qcIjbm9-W7ADNrSxOSw1Hhvw.roa
File: GG7qcIjbm9-W7ADNrSxOSw1Hhvw.roa (raw, json)
Hash identifier: m8d24jLSu2899lQlXRc2aG5gD8olnJM6D4pPTJmSQis=
Subject key identifier: 18:6E:EA:70:88:DB:9B:DF:96:EC:00:CD:AD:2C:4E:4B:0D:47:86:FC
Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial: 018CC4932C7FCA8848ACCD01F72C6D695A0D
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/GG7qcIjbm9-W7ADNrSxOSw1Hhvw.roa
Signing time: Mon 01 Jan 2024 10:30:28 +0000
ROA not before: Mon 01 Jan 2024 10:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 195.43.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 12:46:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:2c:7f:ca:88:48:ac:cd:01:f7:2c:6d:69:5a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Validity
Not Before: Jan 1 10:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=186eea7088db9bdf96ec00cdad2c4e4b0d4786fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:af:8f:d5:9a:a0:86:59:2d:2f:56:c4:cb:ce:
d9:6e:b0:80:df:46:58:ee:74:d3:44:71:83:e1:72:
06:82:ac:82:ea:ab:69:15:ca:f8:03:36:65:0c:06:
d8:a2:62:bc:09:b3:56:d1:2a:e1:c0:e4:cd:17:59:
1c:d1:fb:79:a4:04:1b:33:df:b7:be:f3:db:5c:ef:
98:d1:97:76:68:7b:9f:38:4e:df:7b:a8:f0:d4:a2:
a8:e2:97:10:e3:69:b2:ae:0d:04:8c:1d:4c:48:7b:
50:50:47:44:e1:52:dd:45:b9:af:c8:3c:0a:64:40:
67:f9:8a:51:63:18:f8:0c:bc:b1:b2:55:55:68:2a:
10:d9:47:86:1c:4a:35:c8:32:14:10:12:02:fc:53:
b7:71:7e:16:08:ab:93:b8:85:f0:79:10:0c:3d:7a:
04:4c:7d:5d:76:ed:37:8d:9a:df:7e:67:08:ab:41:
9e:91:f0:ba:60:2e:ea:ad:c1:43:45:e9:22:51:e4:
43:17:c3:5d:7d:f6:fa:3c:ce:da:e4:78:f3:8f:0a:
d5:48:8a:08:fa:51:21:68:e7:7e:54:b1:06:c4:cd:
f4:e0:96:dd:80:60:ee:85:64:73:eb:df:35:ca:93:
c0:78:4f:b5:0b:b5:75:8c:e5:e0:03:a9:56:28:70:
c4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6E:EA:70:88:DB:9B:DF:96:EC:00:CD:AD:2C:4E:4B:0D:47:86:FC
X509v3 Authority Key Identifier:
keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/GG7qcIjbm9-W7ADNrSxOSw1Hhvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.153.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:dd:67:04:4d:4d:d1:de:fd:3f:22:e2:8f:d7:e4:2c:e8:4d:
15:8b:f6:f0:73:fd:63:71:41:63:09:5e:5b:0a:5c:5b:6e:b4:
b0:e9:9f:d7:e5:c8:ba:61:15:db:a5:59:dd:ed:f2:2c:35:7d:
51:dd:0a:44:bb:a4:7e:dc:a0:11:c3:ad:51:1f:f0:e1:3d:2d:
6b:b1:f7:7e:ea:e0:2e:e8:53:25:94:61:d3:a5:f4:36:c5:d8:
95:0e:c8:9c:6a:0a:bb:5b:dc:52:b2:c0:d1:7a:ba:bf:6a:81:
d6:67:52:c1:d6:d4:47:81:99:37:64:29:5b:c9:11:54:94:3a:
f5:ba:75:fe:ce:c2:45:77:84:2b:c6:7a:1f:2a:7c:ab:21:1c:
5f:3b:da:28:88:5d:92:cd:d6:84:d6:4e:63:f3:cc:67:6a:88:
d7:9e:5a:f1:33:82:53:31:cd:9d:b9:9f:73:f5:e4:2b:20:6c:
9c:23:2e:3a:0d:e5:5b:f4:7e:c3:25:9d:6d:37:13:ce:be:ac:
6c:62:01:9c:7a:0c:69:85:98:57:1c:05:19:2c:2c:dd:84:b9:
57:8c:90:17:be:f7:cf:50:ea:a4:22:31:a7:eb:30:7d:de:05:
a5:6d:c6:d1:dd:d4:5d:d7:fd:66:02:52:b3:0a:54:75:bb:67:
1b:bf:a7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:27:32 2025 by rpki-client