Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/GxRZXjJGnA37mj5lbry9OstzPSA.roa
File: GxRZXjJGnA37mj5lbry9OstzPSA.roa (raw, json)
Hash identifier: 5x03qkhOGBcR+wdIpN7qn8MhGEOdLMVF9P50igP1lHE=
Subject key identifier: 1B:14:59:5E:32:46:9C:0D:FB:9A:3E:65:6E:BC:BD:3A:CB:73:3D:20
Certificate issuer: /CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
Certificate serial: 018CC9BC87AB6C946519650AB0AD3EA54ED6
Authority key identifier: 1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/GxRZXjJGnA37mj5lbry9OstzPSA.roa
Signing time: Tue 02 Jan 2024 10:33:44 +0000
ROA not before: Tue 02 Jan 2024 10:33:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62357
IP address blocks: 185.39.184.0/22 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:87:ab:6c:94:65:19:65:0a:b0:ad:3e:a5:4e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
Validity
Not Before: Jan 2 10:33:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b14595e32469c0dfb9a3e656ebcbd3acb733d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8a:7f:46:db:db:42:ae:33:6a:b3:d9:80:3a:
1e:83:4a:04:ee:60:d5:ca:61:0b:43:7e:e3:8e:2c:
60:08:35:32:f1:69:de:3e:5f:b2:11:57:f8:78:2d:
fc:60:f5:e5:42:f9:04:36:4f:9d:3a:c8:3b:21:1d:
b9:e1:14:85:3d:1f:14:99:e3:ff:c1:40:19:ba:21:
0b:a0:d5:3e:0c:4c:65:bf:e9:2e:4b:db:fd:f9:0e:
ea:2f:1e:9b:9c:08:5f:8e:56:6c:14:b1:af:c2:7b:
20:c6:34:fe:f7:aa:fd:35:21:31:3a:4d:b7:04:1f:
74:1c:35:16:e2:10:ed:84:06:2c:d6:86:39:64:54:
be:c6:a4:aa:b7:b8:9f:4e:a8:1c:3a:7b:8f:e3:ab:
d6:2a:90:36:dd:ee:b3:50:43:82:6d:50:b3:65:ef:
08:fd:4c:75:b2:71:c8:71:d2:7b:7e:52:ef:1d:58:
7b:e2:b2:64:61:64:31:73:4d:31:b6:f2:78:f0:76:
00:e8:b4:38:8d:82:62:10:9e:c0:7a:10:c8:5b:7c:
54:4a:b3:d8:f2:c0:03:06:dd:3f:82:f2:8e:56:30:
29:ae:e8:5f:d9:9c:aa:d7:a8:f3:f7:a6:ac:b9:65:
d5:b8:80:6e:ae:8a:62:d8:ec:6a:c8:7c:8d:e1:c9:
0f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:14:59:5E:32:46:9C:0D:FB:9A:3E:65:6E:BC:BD:3A:CB:73:3D:20
X509v3 Authority Key Identifier:
keyid:1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/GxRZXjJGnA37mj5lbry9OstzPSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.184.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:67:c2:d4:d1:cf:65:2a:0f:cb:ad:a8:79:90:07:7e:1a:9d:
df:26:47:54:1f:cc:27:78:29:89:43:54:24:bd:11:27:16:04:
54:ba:f6:cc:27:7f:1d:89:11:9c:c6:38:a0:48:c1:dc:9d:0e:
0d:9a:93:79:24:70:a0:4b:47:3d:6f:20:4a:8a:6f:7f:1f:0b:
44:5e:6e:87:4c:8b:88:19:a6:08:bf:0a:04:15:f0:0e:cb:7f:
a1:50:d7:bc:b4:69:c6:49:29:61:aa:3f:39:66:ac:44:bf:fb:
d6:7c:00:05:dd:0a:7c:05:1b:d9:44:da:3a:51:00:5d:36:b8:
23:6b:ea:3d:99:3c:44:04:26:6d:29:b0:82:7c:b2:23:22:4f:
71:d8:b3:3f:8d:70:ac:6d:48:8b:10:f8:af:0e:48:5b:0e:83:
8e:d2:bc:02:ee:6e:ec:be:a4:e1:f8:dd:25:61:d1:c4:1d:41:
c1:7b:cb:dd:08:84:b0:6e:5b:11:ee:c6:3c:c5:8e:1e:a1:a5:
0a:8d:bb:06:79:db:a4:23:77:1c:bc:47:05:10:d9:2f:6c:fb:
7f:18:cd:b7:db:23:d1:f0:2a:54:c8:12:93:28:21:a8:4f:b9:
d3:1b:b8:6a:3f:9c:05:40:4b:f1:4b:6e:aa:5c:8f:23:9b:53:
25:e0:6f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:08:51 2025 by rpki-client