Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/GQdOPnZOvrSIGg6O10Qjzi7mHbU.roa
File: GQdOPnZOvrSIGg6O10Qjzi7mHbU.roa (raw, json)
Hash identifier: 1SAeOQKarE0PQ2EEdYmrtesPcZgC+1zEFCpM3PcOkQk=
Subject key identifier: 19:07:4E:3E:76:4E:BE:B4:88:1A:0E:8E:D7:44:23:CE:2E:E6:1D:B5
Certificate issuer: /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial: 01919E5BCF75CCCF534AFCFA6521DC83884F
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/GQdOPnZOvrSIGg6O10Qjzi7mHbU.roa
Signing time: Thu 29 Aug 2024 13:38:22 +0000
ROA not before: Thu 29 Aug 2024 13:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208189
IP address blocks: 31.22.12.0/22 maxlen: 24
212.132.160.0/19 maxlen: 24
2a04:c880::/32 maxlen: 48
2a0f:9d80::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 12 Dec 2024 10:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9e:5b:cf:75:cc:cf:53:4a:fc:fa:65:21:dc:83:88:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Validity
Not Before: Aug 29 13:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19074e3e764ebeb4881a0e8ed74423ce2ee61db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a4:c2:3a:ee:eb:de:af:7b:6c:77:14:1e:e7:
ce:e9:5a:25:13:ad:5e:de:f4:c5:24:fc:ae:91:a5:
3d:85:be:0a:c5:9e:0b:ce:94:b5:51:d0:92:e3:89:
d0:52:38:d1:61:e7:97:92:c3:27:eb:f1:32:86:93:
0f:01:4c:3c:b6:30:d5:b2:ca:4b:57:49:28:de:db:
71:7d:fa:f2:5b:8a:f0:60:09:92:e8:cc:7b:34:66:
85:78:03:04:82:59:a2:27:e2:c5:15:3c:25:7b:07:
15:e6:88:27:97:dd:f5:3a:cd:01:99:cd:a9:8f:48:
f5:d8:e7:ea:13:53:53:08:a2:e6:42:56:17:de:69:
d8:74:e8:15:cf:af:5a:ec:fa:57:a0:c4:23:cf:df:
bd:c8:38:1e:26:3d:16:8e:74:88:98:25:95:32:1e:
91:05:4c:8a:68:c6:ea:a3:f4:7f:0d:27:3f:2e:24:
10:3e:d0:25:de:19:bf:1e:fc:2e:70:bd:0a:32:a4:
c7:01:f7:93:ba:fc:58:54:8f:55:98:0e:77:e0:30:
28:07:5c:ce:49:bb:eb:af:27:50:09:58:dc:5d:df:
60:90:31:74:50:e6:d6:09:45:91:91:10:a3:9f:e1:
93:9e:52:c6:6d:d7:61:eb:d3:ad:8e:15:17:45:8c:
8f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:07:4E:3E:76:4E:BE:B4:88:1A:0E:8E:D7:44:23:CE:2E:E6:1D:B5
X509v3 Authority Key Identifier:
keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/GQdOPnZOvrSIGg6O10Qjzi7mHbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.12.0/22
212.132.160.0/19
IPv6:
2a04:c880::/32
2a0f:9d80::/32
Signature Algorithm: sha256WithRSAEncryption
6f:41:0a:ba:f0:ae:b3:d3:b6:0e:bd:6d:7b:8b:c9:ab:80:f4:
e2:5b:88:d2:77:4b:9d:07:37:ea:54:db:ac:64:09:ec:56:84:
7f:f4:e6:a2:ab:09:f9:26:3c:1e:08:74:57:4c:4c:9b:df:51:
27:24:31:4c:92:b6:1c:f5:77:e3:0a:a9:72:74:3d:4e:18:ed:
29:73:54:0b:3e:cd:55:ad:0c:4d:56:67:48:ff:fd:16:0f:3e:
b9:5e:9c:7f:9e:84:67:40:41:ec:6d:14:d8:f1:75:a8:9a:e1:
f4:18:36:0d:81:1e:60:9a:7a:75:d2:2b:63:2d:6f:e0:c7:d0:
69:2a:2f:20:95:6b:10:06:c4:fe:87:e9:d9:3e:21:9b:e4:02:
5f:78:82:4d:20:93:d6:63:56:cf:17:96:24:1a:23:6e:20:34:
e3:df:e2:5a:be:c0:80:0d:91:db:1e:c1:eb:c0:20:d7:2a:29:
bf:28:46:58:93:e3:63:74:99:3c:f0:a1:cb:12:16:d5:b2:8f:
0c:ba:12:75:d6:ae:84:c8:1f:15:c5:3e:ee:10:7e:f6:f0:03:
2c:6d:a3:07:61:b8:b8:96:f3:85:cf:3a:eb:74:cd:fe:67:69:
96:b3:14:79:58:81:e1:67:7f:e8:72:b4:d6:1f:6c:95:64:c4:
26:ae:9f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:19 2025 by rpki-client