Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GgG05Yk94-uIOTU7wTLLRSuPzn8.roa
File: GgG05Yk94-uIOTU7wTLLRSuPzn8.roa (raw, json)
Hash identifier: sdtR5LmcprMg+WcAhPr/10Te++hQotPHvej+VUZBVNg=
Subject key identifier: 1A:01:B4:E5:89:3D:E3:EB:88:39:35:3B:C1:32:CB:45:2B:8F:CE:7F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018FB93F94CF8509E7D968658D2D21750DE8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GgG05Yk94-uIOTU7wTLLRSuPzn8.roa
Signing time: Mon 27 May 2024 08:51:42 +0000
ROA not before: Mon 27 May 2024 08:51:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61112
IP address blocks: 82.152.90.0/23 maxlen: 24
82.153.65.0/24 maxlen: 24
82.163.16.0/24 maxlen: 24
89.213.40.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
194.105.81.0/24 maxlen: 24
213.218.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 16:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:3f:94:cf:85:09:e7:d9:68:65:8d:2d:21:75:0d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 27 08:51:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a01b4e5893de3eb8839353bc132cb452b8fce7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:57:cd:ab:8e:4e:d4:6c:15:26:62:9b:72:
9b:53:a5:32:a1:66:e9:f4:25:ba:6a:9e:2f:34:68:
2f:7c:1e:c1:37:c7:43:d4:dd:c8:f2:7a:63:ab:9e:
41:33:60:35:20:0b:69:54:22:53:1f:22:93:8f:48:
16:5f:2d:77:6d:2b:cc:46:c6:8c:44:0f:bb:3f:e9:
79:20:93:f1:25:b0:3b:cf:43:13:e1:bf:5f:7d:ed:
00:ee:75:68:3f:ac:3b:67:13:b0:4c:11:e3:80:5b:
15:fe:b0:3e:e9:d8:83:92:bb:71:c4:18:b4:c7:61:
96:8e:af:c5:ec:52:d2:69:e2:92:d8:9c:16:50:47:
6a:82:4f:e9:55:ee:de:2a:d9:d0:6b:d6:7a:c7:15:
6c:2d:0b:48:83:79:a2:8b:f6:d3:d8:3d:1e:83:b1:
f1:13:1c:f4:b2:cf:54:f5:df:53:6b:c0:a1:d1:58:
46:81:17:1b:29:27:b7:1e:0f:88:3d:93:f8:54:ca:
2f:2c:b1:a1:e9:ad:8f:6e:5d:37:62:fc:d9:96:35:
7f:57:a1:15:75:ed:c4:ad:3e:c7:e3:43:7f:41:d6:
bf:73:78:2c:bc:b0:c8:eb:06:f7:02:50:a2:59:c6:
73:32:fb:50:98:9b:73:b4:ee:bb:4f:00:30:40:c3:
50:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:01:B4:E5:89:3D:E3:EB:88:39:35:3B:C1:32:CB:45:2B:8F:CE:7F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GgG05Yk94-uIOTU7wTLLRSuPzn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.90.0/23
82.153.65.0/24
82.163.16.0/24
89.213.40.0/24
89.213.164.0/24
89.213.184.0/24
194.105.81.0/24
213.218.254.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ec:e0:d9:fd:f8:89:bd:dd:b5:c1:e0:6f:78:25:cc:7c:e6:
a4:df:9b:a7:38:be:6d:37:52:55:ad:cb:f5:6a:68:e0:4a:f8:
7f:44:3a:9b:5d:1d:c3:9b:8f:a3:5b:7c:f7:01:01:8a:d8:91:
f5:e3:11:35:b3:3c:8b:6a:55:5b:3b:29:a9:5b:ee:4b:56:76:
4f:a0:9c:65:3c:14:13:6c:0a:38:bb:69:80:7f:ad:ef:ce:1b:
d5:18:1b:48:23:a7:e4:ef:26:37:55:0a:8b:34:0a:fd:34:5b:
f4:89:a4:4e:ee:60:af:55:5d:33:d3:c1:86:cb:cd:9d:6a:dd:
6c:73:d3:7d:c4:cf:41:88:46:cd:eb:85:ca:fd:79:ff:fb:68:
aa:c2:5a:a0:77:49:2c:68:d7:77:02:60:a6:6e:9a:8e:30:5f:
b4:75:12:47:d2:88:ec:d1:89:99:20:a3:bc:d3:0a:82:87:dd:
f3:e9:8d:6d:d8:ee:b7:3f:f3:89:51:c5:88:94:19:8e:95:4f:
a7:d1:52:eb:b5:9c:b6:50:1d:74:31:98:66:94:83:20:4f:33:
38:20:ea:07:3e:e9:36:53:d5:26:25:36:8a:87:c1:46:de:5d:
32:0a:18:b4:e0:ff:40:78:cc:8f:ca:09:5d:18:27:96:28:22:
19:52:eb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:05:01 2025 by rpki-client