Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cGwqSU0q6dDxXiwLfrEfM1diULk.roa
File: cGwqSU0q6dDxXiwLfrEfM1diULk.roa (raw, json)
Hash identifier: yCkMobcRHLP50szXOz1oJscvOHhWCNzcgqcXppoH4/o=
Subject key identifier: 70:6C:2A:49:4D:2A:E9:D0:F1:5E:2C:0B:7E:B1:1F:33:57:62:50:B9
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193C0F1597478F0CF2FAE93946D7C89A199
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cGwqSU0q6dDxXiwLfrEfM1diULk.roa
Signing time: Fri 13 Dec 2024 16:54:22 +0000
ROA not before: Fri 13 Dec 2024 16:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214309
IP address blocks: 188.213.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 14:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c0:f1:59:74:78:f0:cf:2f:ae:93:94:6d:7c:89:a1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 13 16:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=706c2a494d2ae9d0f15e2c0b7eb11f33576250b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bf:12:1b:b2:65:c4:14:f3:21:67:77:92:bb:
6f:25:ac:62:89:c0:48:01:f3:ee:3e:da:77:ee:ba:
c3:14:43:41:fc:95:88:71:1f:66:48:af:a0:29:6e:
6e:fc:5e:e9:83:7c:7d:65:c1:9d:2d:ce:bd:a9:2b:
5e:a5:d5:21:bd:dd:92:78:c1:dc:bf:1d:30:3f:54:
5a:10:58:32:a2:33:da:6c:c1:5d:22:1a:ba:60:b1:
74:7f:c6:77:95:6b:d9:94:a7:53:8d:61:3b:99:b4:
02:27:d8:83:09:a2:a7:9c:3c:b5:54:7a:2d:2a:a3:
5f:35:bd:87:4b:82:08:27:5e:97:cc:1e:2f:0e:7c:
6d:3b:dd:f9:6b:88:d7:95:60:c9:3f:9a:e2:17:29:
1e:5f:b9:67:2c:a4:59:2b:b0:53:bd:41:a2:44:94:
0d:7d:2a:82:e3:e3:35:ba:01:67:76:98:14:34:f9:
b6:63:2a:26:e1:d9:8a:68:88:5e:8b:74:51:1f:70:
78:5f:3c:05:ce:20:62:cd:56:78:64:71:25:78:43:
ac:88:51:83:e1:9c:58:46:b7:b7:a3:2c:22:c7:89:
b1:92:62:03:2c:f2:d6:39:f8:4a:05:23:e6:48:5e:
9e:54:59:93:fb:67:fd:57:c0:39:ea:f7:cb:e5:f4:
a6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6C:2A:49:4D:2A:E9:D0:F1:5E:2C:0B:7E:B1:1F:33:57:62:50:B9
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cGwqSU0q6dDxXiwLfrEfM1diULk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.0.0/24
Signature Algorithm: sha256WithRSAEncryption
80:18:c4:96:fe:0d:95:1a:50:d1:d5:d4:3f:ee:71:c0:23:cb:
6e:b4:29:86:c4:c3:6d:c5:7a:ee:a7:1d:6d:fc:8b:3a:10:ec:
a2:a2:49:de:ae:e5:e4:9c:1f:40:70:75:35:ee:ce:25:0e:54:
af:46:c9:fb:74:52:9b:78:4c:0a:a3:b4:50:e5:28:d3:5b:1f:
14:28:be:65:ef:58:e7:83:a9:d0:b1:35:08:a2:68:f2:92:39:
ef:6f:3e:52:8a:3b:70:52:e2:61:03:35:ec:77:04:c5:8a:a1:
11:5d:0d:46:99:fb:9e:d8:03:9c:1a:84:a5:f6:ad:14:97:32:
d6:a4:98:2f:13:93:71:95:ba:4b:bd:af:36:5d:bf:2e:08:2b:
06:89:d3:1b:57:96:e2:03:c8:bb:f6:84:27:fa:f0:32:fc:b5:
60:b5:c0:4f:2f:36:d8:7e:2b:42:f6:d1:40:04:b6:84:e7:7a:
e8:ce:03:d9:f7:a0:3d:49:2c:67:e6:a4:d8:a5:e3:2f:0a:22:
bf:fa:96:45:bd:4e:26:52:3a:0c:ad:37:8d:27:b8:d6:49:ff:
0f:50:17:cb:4b:49:01:cb:1e:45:7d:b9:e6:ca:5c:b9:14:5f:
34:66:fe:7b:8b:24:c2:21:38:0e:17:61:f4:19:44:b5:60:31:
7b:a9:3a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:18 2025 by rpki-client