Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/GSvn5SuhMzwhcfo8MXNXa-7xFVc.roa
File: GSvn5SuhMzwhcfo8MXNXa-7xFVc.roa (raw, json)
Hash identifier: wb4fVuqwsrs25yEZHnWcYNunokRVIgS0os/Ar9FnbaY=
Subject key identifier: 19:2B:E7:E5:2B:A1:33:3C:21:71:FA:3C:31:73:57:6B:EE:F1:15:57
Certificate issuer: /CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Certificate serial: 018CC8DF5A3FFC5017CC25DCDDB658B97892
Authority key identifier: E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/GSvn5SuhMzwhcfo8MXNXa-7xFVc.roa
Signing time: Tue 02 Jan 2024 06:32:09 +0000
ROA not before: Tue 02 Jan 2024 06:32:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204813
IP address blocks: 185.105.120.0/22 maxlen: 22
185.225.180.0/22 maxlen: 22
185.107.248.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:5a:3f:fc:50:17:cc:25:dc:dd:b6:58:b9:78:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Validity
Not Before: Jan 2 06:32:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=192be7e52ba1333c2171fa3c3173576beef11557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e6:7a:fe:cb:85:93:96:ea:b6:78:5d:19:44:
d9:dd:5a:f7:e0:92:22:82:7c:4c:28:06:0c:53:18:
49:1b:3a:b1:77:f0:da:4f:49:ed:99:3b:e1:70:a0:
38:29:93:9a:41:e3:da:16:f8:13:b7:a4:c8:f1:3d:
35:c9:ba:d7:7b:87:ec:4a:83:45:32:61:d7:c6:25:
cd:4b:7e:5b:7e:80:90:de:e6:58:90:b0:f4:a7:d8:
94:b4:66:ed:86:5e:1c:48:aa:50:e2:54:88:4e:43:
a7:70:de:55:52:52:d2:b8:5b:cc:28:5b:6f:6d:60:
32:06:b6:7e:3a:3f:87:23:83:a5:99:49:43:c1:e3:
d2:d4:fa:24:92:29:cd:b1:c1:80:4a:21:28:d7:4e:
cb:9c:49:c2:2b:c1:ed:01:39:05:fa:ad:e5:e7:90:
8c:55:e9:3b:44:fd:6e:5b:72:22:15:5d:b6:9c:d7:
9c:cd:05:05:58:d5:6b:8f:30:e7:ed:3a:e3:44:94:
fd:ba:b6:9d:a5:e5:2f:1e:6c:fd:43:97:4b:a6:cb:
59:c2:3e:3f:37:19:53:30:63:16:8f:ce:b0:d6:09:
50:e1:f9:bb:10:43:0f:71:85:0d:ff:5d:04:2e:4b:
54:f9:e8:0d:33:ad:eb:a0:92:6b:59:2c:20:30:c9:
d9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2B:E7:E5:2B:A1:33:3C:21:71:FA:3C:31:73:57:6B:EE:F1:15:57
X509v3 Authority Key Identifier:
keyid:E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/GSvn5SuhMzwhcfo8MXNXa-7xFVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.120.0/22
185.107.248.0/22
185.225.180.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:b9:6f:a2:92:ae:5b:ec:c6:94:d6:a2:8a:fa:39:35:72:30:
f2:97:ae:cc:3d:f5:1b:7e:0d:10:67:63:b4:29:97:c4:6e:21:
c3:30:75:33:b4:20:37:f6:c9:d2:b0:1b:f1:21:bd:34:49:9d:
f6:d3:2a:69:d4:33:aa:0e:32:92:0a:e5:ae:1d:e4:0a:4f:0b:
61:75:f5:f4:2d:34:85:05:e9:d2:35:94:44:88:07:57:16:74:
a6:b9:7e:0b:d9:67:89:d5:1b:2e:e7:75:7a:72:12:b1:ef:41:
b6:33:cd:4f:71:0e:2e:4f:26:60:e8:3e:89:5a:a8:5c:4a:1b:
ab:f7:ad:19:54:3d:34:5c:fc:8f:22:01:f3:79:da:d1:a5:54:
d3:54:bf:12:93:71:1e:ae:db:b7:b1:0d:1a:ca:94:57:65:6b:
a1:28:0f:53:8a:3d:5f:c8:58:7f:d6:d2:b2:d4:12:fb:ab:a2:
c2:7c:fd:e2:08:36:ba:62:b3:9a:24:79:aa:6c:46:90:d3:cd:
3c:37:cf:31:4c:71:f7:43:34:38:5b:69:e1:86:f4:00:10:0c:
84:5a:78:e5:9d:d2:90:25:2f:a0:1c:be:91:fd:48:b3:4e:9b:
28:eb:97:20:a9:39:d9:35:71:ff:ec:5f:6e:09:4a:76:d6:af:
45:08:4b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:47:56 2025 by rpki-client