Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/GoF3RpvXi_FuH7xHyvA5p639kxE.roa
File: GoF3RpvXi_FuH7xHyvA5p639kxE.roa (raw, json)
Hash identifier: tfYhclEkERfxKQ4JeIu/D9leMI1JUKeOyQjQK36CWy4=
Subject key identifier: 1A:81:77:46:9B:D7:8B:F1:6E:1F:BC:47:CA:F0:39:A7:AD:FD:93:11
Certificate issuer: /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Certificate serial: 018E31FD4456B784ACB7E5F76E27F3993241
Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/GoF3RpvXi_FuH7xHyvA5p639kxE.roa
Signing time: Tue 12 Mar 2024 09:27:45 +0000
ROA not before: Tue 12 Mar 2024 09:27:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8473
IP address blocks: 5.150.192.0/18 maxlen: 18
37.123.128.0/18 maxlen: 18
46.59.0.0/17 maxlen: 17
62.63.192.0/18 maxlen: 18
79.136.0.0/17 maxlen: 17
81.170.128.0/17 maxlen: 17
82.196.96.0/19 maxlen: 19
85.24.128.0/17 maxlen: 17
94.254.0.0/17 maxlen: 17
98.128.0.0/16 maxlen: 16
109.228.128.0/18 maxlen: 18
176.10.128.0/17 maxlen: 17
178.174.128.0/17 maxlen: 17
185.57.4.0/22 maxlen: 22
185.90.176.0/22 maxlen: 22
195.178.160.0/19 maxlen: 19
212.85.64.0/19 maxlen: 19
212.116.64.0/19 maxlen: 19
213.80.96.0/19 maxlen: 19
213.80.120.0/24 maxlen: 24
213.80.125.0/24 maxlen: 24
213.136.32.0/19 maxlen: 19
213.164.192.0/19 maxlen: 19
217.27.160.0/19 maxlen: 19
217.27.164.0/23 maxlen: 23
217.31.160.0/19 maxlen: 19
2001:9b0::/29 maxlen: 29
2001:9b0::/32 maxlen: 32
2001:9b2::/34 maxlen: 34
2001:9b2:4000::/34 maxlen: 34
2a02:508::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 17 Oct 2024 11:09:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:31:fd:44:56:b7:84:ac:b7:e5:f7:6e:27:f3:99:32:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Validity
Not Before: Mar 12 09:27:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a8177469bd78bf16e1fbc47caf039a7adfd9311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d6:fe:a2:23:0c:9e:91:e3:74:e7:62:36:ff:
61:ea:da:77:6a:5c:1b:ac:11:4b:01:bc:15:33:15:
4c:e3:1f:26:3e:61:00:ee:85:68:77:53:b0:e8:7f:
24:9b:f3:26:6a:6f:b0:ad:9b:cf:89:7d:06:bc:7a:
e3:c9:b4:f2:06:ad:fc:1b:3e:fa:4f:25:b6:48:9e:
23:f9:2f:be:22:69:76:2b:9a:26:76:bb:bd:d5:27:
fa:27:8f:6d:db:76:5c:e6:aa:72:0e:f4:6b:da:b1:
da:e2:c1:1a:ce:7a:c3:01:52:38:65:eb:5a:c2:49:
06:fe:cf:9c:db:fa:e7:83:c8:a5:27:95:d3:12:6e:
66:21:3a:9e:23:54:a5:f0:69:c8:03:c6:3e:72:b7:
36:ff:90:17:44:5b:1a:f0:7d:0e:fd:4e:43:0c:6b:
91:00:10:18:e9:8e:2e:ba:d8:91:f9:cf:a2:ec:d7:
5d:e0:50:4c:54:69:c1:a9:d5:4c:48:1c:87:d3:e2:
04:63:f3:3b:b9:bc:7e:27:19:36:91:37:54:0b:f6:
46:5f:f1:11:fd:08:eb:5f:84:5f:2d:af:04:1a:60:
7f:50:33:79:39:d7:77:e7:5f:a5:76:0b:9e:76:bb:
86:a0:89:b9:84:b1:0d:8e:28:46:25:57:15:af:88:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:81:77:46:9B:D7:8B:F1:6E:1F:BC:47:CA:F0:39:A7:AD:FD:93:11
X509v3 Authority Key Identifier:
keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/GoF3RpvXi_FuH7xHyvA5p639kxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.150.192.0/18
37.123.128.0/18
46.59.0.0/17
62.63.192.0/18
79.136.0.0/17
81.170.128.0/17
82.196.96.0/19
85.24.128.0/17
94.254.0.0/17
98.128.0.0/16
109.228.128.0/18
176.10.128.0/17
178.174.128.0/17
185.57.4.0/22
185.90.176.0/22
195.178.160.0/19
212.85.64.0/19
212.116.64.0/19
213.80.96.0/19
213.136.32.0/19
213.164.192.0/19
217.27.160.0/19
217.31.160.0/19
IPv6:
2001:9b0::/29
2a02:508::/29
Signature Algorithm: sha256WithRSAEncryption
15:8c:a4:ea:54:ef:2b:1a:fc:a9:c7:48:ec:1a:10:b5:24:a9:
e1:17:a9:18:e7:cb:99:e0:4c:b2:44:ce:62:11:8b:23:26:1b:
be:2d:b3:e3:3f:ae:67:57:25:19:27:54:b2:38:75:18:49:26:
08:2a:e3:4f:1f:ef:7f:fd:f5:4c:38:a3:90:b3:22:b7:c1:e4:
0c:e4:a4:9f:30:55:5e:0e:75:aa:ac:b7:60:12:73:60:9a:49:
d6:5d:04:5c:7f:be:91:97:3b:09:7e:75:01:6b:7f:7b:78:48:
da:cc:ea:85:08:b6:c0:10:af:0d:7a:23:46:a4:17:7d:26:e3:
ec:c8:4d:a3:ce:7d:18:ad:08:21:18:78:ea:96:6d:cc:b7:bc:
96:d1:02:cf:1a:cf:38:89:0e:a3:65:cb:ff:7f:5f:fc:53:77:
c3:a2:e8:17:d7:7c:a3:82:3c:8d:06:53:a6:c2:81:20:a5:a3:
03:1c:6f:3e:8b:1e:fa:30:e4:32:80:26:6c:d9:d4:20:3c:a0:
17:1d:40:ca:d1:4b:7c:ce:8a:4b:0c:19:92:3e:0d:e4:e5:34:
34:29:12:bd:83:7c:2e:f6:02:01:59:96:f5:f0:3c:4a:f9:b1:
45:a4:01:12:9d:10:96:d0:de:63:64:46:41:83:85:6b:0b:bd:
cb:42:cf:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:37:40 2025 by rpki-client