Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/GPDTaLFOW8VXcrrmLy-mLh-oLdo.roa
File: GPDTaLFOW8VXcrrmLy-mLh-oLdo.roa (raw, json)
Hash identifier: gHBmmSFfRSW3aNvr7biE0AaiAeQBuReKIPjcddH1OYg=
Subject key identifier: 18:F0:D3:68:B1:4E:5B:C5:57:72:BA:E6:2F:2F:A6:2E:1F:A8:2D:DA
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 0197166608414A14CE2AB25328C06F199975
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/GPDTaLFOW8VXcrrmLy-mLh-oLdo.roa
Signing time: Wed 28 May 2025 10:17:54 +0000
ROA not before: Wed 28 May 2025 10:17:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48065
IP address blocks: 46.213.128.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 03 Jun 2025 06:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:16:66:08:41:4a:14:ce:2a:b2:53:28:c0:6f:19:99:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: May 28 10:17:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18f0d368b14e5bc55772bae62f2fa62e1fa82dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:a4:7d:fc:ec:50:f0:58:3c:98:fc:eb:bd:
36:36:67:42:9b:1d:a6:5c:f3:de:50:79:07:35:84:
85:4c:bd:7e:b3:e9:b0:db:f1:39:84:de:23:0e:a1:
90:93:65:a8:bc:2a:08:26:95:d6:d9:41:53:4b:86:
ad:f7:b9:2c:0c:d5:33:a0:ac:4f:d8:58:cb:db:7a:
cc:1d:ee:77:9b:12:0c:dc:ae:65:74:e3:05:75:93:
dd:3e:c7:3a:98:46:b3:47:98:06:9d:e7:23:72:61:
4c:71:ff:76:2c:e6:5c:40:ec:ac:c8:2d:71:b7:e4:
88:ce:2a:d2:f8:57:b8:82:ff:cd:0a:c8:02:21:b8:
2c:2a:99:38:74:46:7e:97:73:3f:3e:d3:a8:2e:fd:
16:6d:d0:77:9a:3e:cc:f7:94:27:10:3c:be:1e:0a:
c8:fa:5d:d4:ca:a9:1e:c5:1c:5d:f7:3c:da:20:ea:
07:0a:1c:99:c0:54:42:85:be:c2:42:dd:c5:16:f8:
92:9e:2f:15:f5:91:05:68:64:77:9e:ea:0d:80:e8:
32:d6:d7:5e:f1:ba:64:1e:33:b5:7c:71:09:3d:23:
18:34:11:ea:39:61:62:d4:c9:51:e1:d6:4e:ea:7f:
99:70:42:1f:47:59:28:e6:f0:0c:1c:ec:a2:ae:06:
f3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F0:D3:68:B1:4E:5B:C5:57:72:BA:E6:2F:2F:A6:2E:1F:A8:2D:DA
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/GPDTaLFOW8VXcrrmLy-mLh-oLdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.213.128.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:2b:48:87:d6:ea:00:76:b0:33:b1:37:6d:5d:0e:91:ad:8e:
90:00:81:ca:54:9a:76:30:c0:d6:15:20:13:d5:cc:8f:93:af:
20:06:5a:b1:b5:ce:53:89:3b:cc:9c:91:7a:e6:20:ae:47:c2:
ec:99:81:6e:9c:42:fd:86:d7:f8:84:dc:7f:62:40:9d:f8:b1:
76:32:3e:b8:d4:9f:cb:34:e6:48:94:eb:85:53:78:10:96:57:
64:4e:28:79:34:20:d6:98:af:d1:9b:6d:83:67:7e:ae:f6:db:
2a:11:9c:35:bf:f1:17:32:50:98:a2:58:20:e4:45:9e:7a:ac:
9b:63:4b:36:02:2b:de:a3:7c:4f:dd:36:bc:c5:b0:ea:39:ec:
d6:eb:5c:45:0f:50:98:10:e5:29:38:c6:32:c0:f4:cc:f2:da:
84:63:ee:88:4f:fd:a0:8f:fa:3c:fd:8c:dc:97:06:55:f1:ff:
d2:81:2a:97:69:50:eb:8e:0e:a1:cb:0e:51:0c:0d:05:1b:85:
f1:59:e5:52:e8:ac:14:f0:3b:2f:9b:0d:16:a8:5f:23:f7:35:
87:98:96:68:b3:81:bf:b7:0d:1b:23:d3:9b:c9:02:95:30:4e:
06:80:d6:c8:f8:65:d7:50:75:7a:9f:c2:8a:6f:9f:26:c7:f6:
0b:67:6b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:25:07 2025 by rpki-client