Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2GANGEttCoIl_-GHC3csaudzmSs.roa
File: 2GANGEttCoIl_-GHC3csaudzmSs.roa (raw, json)
Hash identifier: 5zAGCuTi9SAzdjpbDKA9rcoEWLUMpLofIH1+malPbGQ=
Subject key identifier: D8:60:0D:18:4B:6D:0A:82:25:FF:E1:87:0B:77:2C:6A:E7:73:99:2B
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0193C0BA6A75B2C95594824B6773A4DECDD1
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2GANGEttCoIl_-GHC3csaudzmSs.roa
Signing time: Fri 13 Dec 2024 15:54:22 +0000
ROA not before: Fri 13 Dec 2024 15:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5505
IP address blocks: 188.130.247.0/24 maxlen: 24
188.130.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c0:ba:6a:75:b2:c9:55:94:82:4b:67:73:a4:de:cd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Dec 13 15:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8600d184b6d0a8225ffe1870b772c6ae773992b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cc:59:cf:5d:e7:25:a9:6a:93:2a:4f:72:8d:
90:dd:19:16:67:0e:9b:0a:c1:19:35:ca:c2:4b:47:
d2:af:d3:44:2e:26:a8:1c:5f:73:b3:0f:0a:35:8f:
50:94:99:04:78:79:bd:1c:a4:5b:49:42:6e:55:fa:
f2:8d:08:4a:aa:8b:0f:36:00:24:db:ad:ce:60:06:
32:50:c6:58:af:87:8b:ab:b3:ca:95:31:2f:c6:42:
3f:1a:d2:cc:d8:05:d9:64:37:f6:5f:de:dc:09:c1:
b7:93:8f:a2:02:00:11:56:a5:18:4f:f1:a0:3c:d7:
11:ed:83:3d:f6:70:cc:25:2a:c9:92:c2:cd:0b:30:
a2:1d:cd:74:02:54:f8:14:49:da:78:67:45:88:f2:
fd:5d:a2:b7:e1:24:85:d9:35:c6:eb:1d:e0:40:12:
ee:b8:d4:08:a4:d3:a4:04:a9:52:ef:8c:86:3a:32:
30:ec:39:b7:7b:fb:9e:fc:04:cd:83:ed:b4:29:d4:
6b:bc:da:63:bf:1f:9f:5c:a4:87:6e:ed:3d:16:d1:
70:f0:3b:c1:49:fe:21:b2:de:fe:88:40:03:98:b7:
4d:5b:7d:28:60:ff:05:cb:88:ba:c4:8e:71:d6:af:
5b:43:ec:66:ce:83:78:ac:89:23:1a:23:a3:0e:51:
26:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:60:0D:18:4B:6D:0A:82:25:FF:E1:87:0B:77:2C:6A:E7:73:99:2B
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2GANGEttCoIl_-GHC3csaudzmSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.247.0/24
188.130.254.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:a0:28:47:93:7e:fe:35:b0:c0:30:e2:a7:b4:c0:8a:6e:18:
f8:a5:db:97:95:62:1b:5b:9e:e9:ba:95:44:80:a8:64:d7:d7:
c5:86:e3:93:96:0f:6b:90:09:9c:67:5c:b1:54:44:07:4c:40:
39:40:9a:25:42:a4:28:00:9a:fb:eb:5b:e3:ac:6d:b5:ac:3e:
78:ea:fd:66:e2:20:57:22:a8:67:98:0e:0e:f6:e8:f6:c1:43:
33:55:e9:ec:96:ba:99:8e:ea:fe:1b:60:23:c5:1f:fc:4d:54:
4e:dd:cd:0b:02:a3:a8:9c:42:fd:b6:41:af:ae:3a:04:18:b3:
15:cd:6c:b6:e7:f3:34:38:e8:c1:67:aa:60:4b:63:e6:1c:ea:
e0:73:ef:aa:53:d7:e4:27:0a:30:91:31:36:cb:43:ff:44:33:
e7:a6:78:50:a2:1f:e6:6c:a6:c6:ac:7e:78:d0:71:39:6c:f1:
ac:b9:ff:ea:88:cf:76:b5:11:7a:a2:1e:88:49:d6:54:5a:78:
26:e9:e5:3a:5b:01:90:f3:25:b3:d7:3b:d5:a7:78:95:73:b1:
51:4d:8f:d6:b1:ea:7f:bb:9d:fc:1a:8c:e9:8e:3e:cb:7c:f0:
38:68:93:12:b4:96:3a:4c:1a:19:d5:7f:6a:a2:f4:b2:f7:63:
38:e6:43:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:41:43 2025 by rpki-client