Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/GQH25PVjQ2iUqAJOER0aooWrJBw.roa
File: GQH25PVjQ2iUqAJOER0aooWrJBw.roa (raw, json)
Hash identifier: JsquUE6k6IrYut/AOsZ+ET5qxBCwe5rRUMdJy5C+jMM=
Subject key identifier: 19:01:F6:E4:F5:63:43:68:94:A8:02:4E:11:1D:1A:A2:85:AB:24:1C
Certificate issuer: /CN=65e3e6c847c79bb05aac24d4178178d6f7c04485
Certificate serial: 019340CA25A3814131F8E539B30B5346BB85
Authority key identifier: 65:E3:E6:C8:47:C7:9B:B0:5A:AC:24:D4:17:81:78:D6:F7:C0:44:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/GQH25PVjQ2iUqAJOER0aooWrJBw.roa
Signing time: Mon 18 Nov 2024 19:40:09 +0000
ROA not before: Mon 18 Nov 2024 19:40:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41027
IP address blocks: 195.189.228.0/24 maxlen: 24
195.189.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:40:ca:25:a3:81:41:31:f8:e5:39:b3:0b:53:46:bb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e3e6c847c79bb05aac24d4178178d6f7c04485
Validity
Not Before: Nov 18 19:40:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1901f6e4f563436894a8024e111d1aa285ab241c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:51:93:24:53:fa:b5:24:46:d3:5a:7e:e2:b8:
7d:ad:54:2b:72:4d:77:97:c3:bd:68:b9:e4:17:bd:
65:09:d9:b1:ec:8c:53:2b:43:bd:48:ee:b6:55:dc:
69:4c:d0:df:98:fc:fa:6c:2d:69:0f:c1:5f:23:80:
7b:84:84:5e:63:73:22:6f:aa:fd:a5:bb:08:50:c4:
55:cc:38:b3:aa:72:64:5f:29:81:ef:ec:c1:f7:89:
8c:66:ab:cd:b7:83:ac:be:02:86:eb:8e:4c:41:da:
40:e1:08:49:52:bc:24:5d:a1:e2:19:1a:58:7f:19:
c4:0c:09:06:d2:ed:16:8e:3f:24:bf:ab:b1:dc:58:
1e:9b:9b:12:2a:16:58:45:89:90:bc:fd:ba:07:2c:
0a:5e:dd:0c:1a:9b:3a:6b:b5:c7:97:bc:89:68:d0:
94:00:47:b7:5b:d8:c3:8c:1d:e7:a6:d8:76:a2:f7:
34:2a:45:6b:0b:ea:8e:9c:16:f2:10:bd:76:96:6c:
cd:26:0d:23:38:92:28:2e:0a:a4:28:37:c6:f9:4f:
ae:fc:7f:78:0c:b0:cb:2f:39:cf:e9:16:b9:19:c1:
21:60:a5:85:99:cd:42:5d:1c:23:f9:32:93:86:6b:
79:c2:da:ac:42:6a:84:c4:94:84:e4:87:ae:c2:6c:
26:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:01:F6:E4:F5:63:43:68:94:A8:02:4E:11:1D:1A:A2:85:AB:24:1C
X509v3 Authority Key Identifier:
keyid:65:E3:E6:C8:47:C7:9B:B0:5A:AC:24:D4:17:81:78:D6:F7:C0:44:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/GQH25PVjQ2iUqAJOER0aooWrJBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.228.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:db:a6:98:35:c9:03:4d:f2:6f:36:88:1b:00:27:2f:8e:ea:
69:84:92:1b:37:7e:7f:42:09:5c:bc:80:78:fe:c4:f3:ac:1b:
91:8f:30:04:f1:5e:5a:a6:a7:39:5d:58:66:70:54:97:60:0b:
8e:ec:b8:c1:0b:8c:c2:92:c1:66:9b:d4:8e:ce:d6:8f:b1:21:
a9:c1:0d:f6:00:c1:79:a6:93:64:3f:e5:97:9e:81:c5:45:dd:
f0:bf:e5:78:4e:e9:8c:9f:75:98:f6:79:8f:75:d2:08:6b:57:
ff:97:42:56:14:75:e8:9d:80:22:3d:f7:cc:5c:ef:0b:d2:aa:
c8:35:4c:cc:2f:ee:6c:83:8f:de:46:68:84:4d:6d:e1:89:a5:
31:35:0b:8b:58:e8:45:6e:e6:1e:67:8a:43:04:38:e3:f9:70:
3a:d5:fa:bb:cf:8e:a9:47:8a:c2:03:61:8b:2c:4e:38:13:20:
87:b1:ae:50:61:14:25:14:12:d1:9f:ce:2f:d6:08:34:73:7c:
10:ed:5c:1d:80:f7:46:87:b9:c4:d1:76:10:eb:66:d8:bb:85:
ec:a8:c6:fd:25:bd:46:b1:4c:38:6b:11:19:14:34:8b:9a:0f:
96:21:f7:c9:74:02:6e:e2:e8:bb:ed:2e:17:92:71:f9:71:55:
57:dc:b4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:02 2025 by rpki-client