Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/GtNAwS9tRSub-tlusgpMXrMyrws.roa
File: GtNAwS9tRSub-tlusgpMXrMyrws.roa (raw, json)
Hash identifier: 7HrTaH3J8aoVZ6IAjDfoQGEzd597wd2HFaxutR/N9a4=
Subject key identifier: 1A:D3:40:C1:2F:6D:45:2B:9B:FA:D9:6E:B2:0A:4C:5E:B3:32:AF:0B
Certificate issuer: /CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Certificate serial: 018CC64A6210428B0804B0C3F5E386A4D2DD
Authority key identifier: 9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/GtNAwS9tRSub-tlusgpMXrMyrws.roa
Signing time: Mon 01 Jan 2024 18:30:12 +0000
ROA not before: Mon 01 Jan 2024 18:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58224
IP address blocks: 45.15.200.0/24 maxlen: 24
45.15.203.0/24 maxlen: 24
45.15.202.0/24 maxlen: 24
45.15.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:62:10:42:8b:08:04:b0:c3:f5:e3:86:a4:d2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Validity
Not Before: Jan 1 18:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ad340c12f6d452b9bfad96eb20a4c5eb332af0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:c1:0d:c4:db:bf:c7:17:ad:09:0e:b1:f5:
e6:64:6f:ae:65:27:50:06:17:6e:40:67:93:cf:5e:
e0:36:bc:1b:32:6d:0c:b6:ba:6e:f0:2f:78:49:72:
8c:37:50:f1:10:65:0b:c8:95:7f:93:7d:0d:5d:06:
59:dc:70:d0:a0:d0:e6:90:e8:c7:72:ea:6c:ad:a6:
20:eb:c4:71:9d:67:96:c4:01:cf:a6:a1:f1:54:fe:
18:6e:24:d5:37:72:2d:44:7c:d0:a9:c4:e3:bd:36:
c0:b0:4c:9e:41:4e:2a:81:24:0e:f8:4d:5d:b5:89:
3c:d2:97:f6:a2:f2:c1:87:60:90:52:4d:a7:c0:90:
ac:47:0c:59:37:be:d4:e4:7c:1d:1c:db:8a:eb:7f:
84:8e:f9:79:15:cc:92:27:39:d3:a8:68:db:61:c7:
57:be:67:28:ba:a3:63:43:2c:a2:c0:43:90:48:33:
c0:1d:ac:7d:ad:51:39:7e:8e:b0:01:c5:dc:1d:ad:
f7:db:cf:a7:70:43:09:61:9b:d1:54:2f:81:f0:7b:
c7:72:a3:8c:7d:6d:12:94:6c:b3:9d:d5:e6:e8:0f:
87:d8:d4:94:25:66:b9:5b:1c:e7:9b:a4:b2:65:3a:
e8:f6:97:ae:53:2d:dd:44:ad:af:4b:37:ea:6f:be:
89:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D3:40:C1:2F:6D:45:2B:9B:FA:D9:6E:B2:0A:4C:5E:B3:32:AF:0B
X509v3 Authority Key Identifier:
keyid:9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/GtNAwS9tRSub-tlusgpMXrMyrws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.200.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:73:6c:be:ed:de:dd:67:2b:85:b5:d9:85:88:e2:a2:9a:46:
df:d9:53:f1:20:ad:52:1e:8d:14:ed:54:b2:fe:52:73:49:4a:
50:cd:3b:6a:d6:d3:64:6c:b9:b9:12:6e:56:a7:59:59:82:09:
93:82:df:27:80:dd:45:21:64:58:04:7c:80:a2:ba:9e:db:b1:
40:9b:fa:e0:7e:97:a8:b3:c9:6b:bb:7d:a0:df:e8:09:f3:a4:
36:d7:56:c8:09:a8:c1:b2:23:00:09:b5:77:94:d2:cc:5b:8e:
8d:1c:18:47:b6:d5:16:d1:c7:1f:95:58:3a:60:14:a8:2d:d4:
76:1d:83:92:bb:4c:8e:ac:5a:83:5c:7e:59:f6:4c:be:e1:c5:
b2:63:a1:4b:63:da:0e:fc:0e:75:3a:79:e6:b4:3b:48:93:98:
d3:dd:0f:75:c6:a2:8e:91:0c:8f:ec:7c:32:f6:b4:d6:11:39:
9a:e9:89:47:c5:c0:95:5d:88:82:69:cb:38:be:7c:d1:c1:f5:
65:b6:96:1f:a9:dd:a0:b8:f1:0e:9e:44:8f:fa:68:ca:b3:48:
72:a4:f2:ff:ea:32:2f:6c:21:2c:50:be:53:99:47:f4:df:d8:
10:7e:ae:20:1c:9b:59:0a:5f:b9:d5:a6:65:51:0a:52:6f:c9:
e5:84:68:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:33 2025 by rpki-client