Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/gtQ0FB5A-LnWNug-lo9xz5sJKfA.roa
File: gtQ0FB5A-LnWNug-lo9xz5sJKfA.roa (raw, json)
Hash identifier: 4Jq7TMPARslK2VWFf7rKxPZb8IBOukZvOJ9lT7Re7jc=
Subject key identifier: 82:D4:34:14:1E:40:F8:B9:D6:36:E8:3E:96:8F:71:CF:9B:09:29:F0
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 018D7902138973C536B5FA0D525FBA39168B
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/gtQ0FB5A-LnWNug-lo9xz5sJKfA.roa
Signing time: Mon 05 Feb 2024 11:23:15 +0000
ROA not before: Mon 05 Feb 2024 11:23:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210164
IP address blocks: 194.169.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 17:36:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:79:02:13:89:73:c5:36:b5:fa:0d:52:5f:ba:39:16:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Feb 5 11:23:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82d434141e40f8b9d636e83e968f71cf9b0929f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b8:d3:c6:39:5e:10:56:39:69:d7:1c:64:5b:
02:4b:c4:26:18:cf:cc:2d:e3:ac:b2:ab:47:d6:b1:
d9:79:cd:bf:20:7e:aa:4b:fc:dc:f8:ee:23:5f:26:
af:b5:7b:03:b9:e0:6d:52:1e:e3:5c:c9:96:a9:17:
9f:41:72:13:5d:1a:fd:35:db:ae:58:f5:3a:2c:c6:
0c:d1:c0:d7:ae:48:82:30:e8:1b:27:9a:e1:e9:47:
af:66:1d:7d:67:ce:09:ea:0e:6e:30:92:c9:70:1e:
c1:ef:45:43:6a:37:cb:f6:e3:ee:fc:83:23:00:15:
86:9b:75:69:a9:94:fa:26:67:91:72:d5:af:24:39:
c7:56:4b:96:9a:24:2e:21:dd:1b:75:68:bc:fa:0f:
1e:7e:9f:0d:01:ef:0e:6b:05:0d:6c:f8:48:ec:7b:
ad:91:c1:0c:68:80:d7:b9:39:55:b6:fe:7e:3b:20:
13:e4:3c:7f:8b:ba:30:07:d6:80:33:14:79:fb:c7:
b2:21:d6:b0:db:12:8e:aa:d9:46:dd:da:37:f7:47:
65:8d:f0:bd:4a:f7:1b:99:a8:4f:c8:94:d1:88:e6:
1b:2a:55:1e:d9:89:99:60:50:5f:e6:ba:d1:cd:f0:
14:06:7e:1f:5b:11:3a:51:bd:4a:e1:7d:ed:03:c5:
0d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D4:34:14:1E:40:F8:B9:D6:36:E8:3E:96:8F:71:CF:9B:09:29:F0
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/gtQ0FB5A-LnWNug-lo9xz5sJKfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.48.0/24
Signature Algorithm: sha256WithRSAEncryption
80:8c:42:b1:6e:28:30:5d:99:e0:e0:19:57:69:ff:71:6d:b0:
ac:7f:72:a0:f2:30:a4:f8:f2:67:23:6c:94:82:99:fd:97:08:
f3:eb:f9:10:aa:98:0f:4e:2a:02:a9:ce:3a:ad:dc:5d:6a:72:
98:00:9e:52:7a:1e:fc:3a:17:5e:21:dc:aa:e1:80:53:5a:c9:
c1:f0:3a:11:62:84:8c:31:3e:a0:f1:93:2d:cf:61:98:41:30:
4e:82:8e:ab:30:c7:17:7a:84:fc:e7:fc:23:b3:ff:c4:74:36:
92:38:45:4a:1d:0b:ca:2e:d9:95:93:71:7a:ad:ec:c9:89:0a:
97:f4:bf:7f:bf:12:cc:a1:e1:eb:f2:9e:62:f7:36:bc:c5:a0:
e5:a0:91:45:29:a6:2e:63:84:8a:f2:6c:22:5a:ea:96:c7:e1:
6a:6d:78:65:09:d7:15:5d:73:5b:24:08:3b:52:d6:49:14:fb:
0a:69:d2:aa:f9:1f:76:fd:65:02:af:8c:01:7d:07:d9:2a:dc:
55:63:be:eb:64:58:53:d9:ea:f4:a2:ee:6a:d4:65:68:3f:c0:
72:c4:d4:14:96:5b:8d:31:f3:ec:2f:59:4f:20:48:1b:c8:85:
1b:f6:45:4b:0d:b3:8a:1e:69:54:53:b7:40:7b:c3:39:d2:6c:
28:0f:9f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:41:49 2025 by rpki-client