Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Gpd3gTs-fAFQG9ZzjtnRAi3Msdg.roa
File: Gpd3gTs-fAFQG9ZzjtnRAi3Msdg.roa (raw, json)
Hash identifier: VYKuPYqCoRMk4AkonGGYhbVNrNDjPulCSKBKEHb+gPM=
Subject key identifier: 1A:97:77:81:3B:3E:7C:01:50:1B:D6:73:8E:D9:D1:02:2D:CC:B1:D8
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018FEE3824E6BDCEE79F55E90B3CCE600171
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Gpd3gTs-fAFQG9ZzjtnRAi3Msdg.roa
Signing time: Thu 06 Jun 2024 15:43:27 +0000
ROA not before: Thu 06 Jun 2024 15:43:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 82.153.246.0/24 maxlen: 24
109.176.206.0/24 maxlen: 24
213.218.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 09:53:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ee:38:24:e6:bd:ce:e7:9f:55:e9:0b:3c:ce:60:01:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 6 15:43:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a9777813b3e7c01501bd6738ed9d1022dccb1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:65:a0:5c:4c:b1:08:f3:5d:32:f3:93:dd:6d:
be:15:55:b8:78:a9:7e:d6:63:9b:67:99:0a:a5:9d:
88:9a:b6:34:60:0f:48:10:6c:ef:e4:87:e0:a0:b2:
41:67:b6:8a:44:b8:33:fc:dc:14:31:8a:f9:04:9c:
4f:39:96:32:81:67:0c:84:de:15:84:aa:7d:4f:19:
91:31:bd:42:40:fa:0c:e7:26:8d:b9:13:67:5d:11:
02:c7:f9:d0:b5:1a:3f:47:e1:a7:11:16:fd:1d:0a:
37:9b:3c:1d:d1:9f:a8:6c:49:ba:31:c5:93:c4:2f:
f4:6f:d8:da:87:63:15:3a:c6:77:2c:45:a5:6b:ff:
cb:b4:ee:ac:78:dc:30:9d:3a:d5:c1:a7:66:7c:10:
28:99:ef:86:8e:7a:b6:24:9d:c1:09:75:b5:93:ff:
ac:09:b2:9d:ab:44:37:0c:13:77:aa:a5:aa:7b:57:
31:8e:6f:25:79:95:3f:be:4b:fb:61:b3:2f:1e:a7:
47:9b:c3:45:4b:13:45:e1:a4:9f:5e:eb:51:e1:91:
cf:62:c2:60:04:aa:33:ff:f5:d8:00:ce:62:02:40:
82:a0:1f:a0:53:56:50:c3:a2:5d:54:1c:03:0a:73:
de:c8:3b:57:82:ca:2a:73:ea:95:b1:29:7a:bf:c7:
85:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:97:77:81:3B:3E:7C:01:50:1B:D6:73:8E:D9:D1:02:2D:CC:B1:D8
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Gpd3gTs-fAFQG9ZzjtnRAi3Msdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.246.0/24
109.176.206.0/24
213.218.243.0/24
Signature Algorithm: sha256WithRSAEncryption
52:e0:72:6b:2b:1f:f8:78:9f:b0:62:46:1d:fd:49:37:58:cb:
76:ad:3d:5b:55:e5:a0:cc:a7:fa:14:5d:98:35:7e:3b:9d:ce:
b4:7e:56:23:cf:81:69:27:f6:3e:a7:ce:e6:80:94:41:4f:cd:
2e:ec:d4:b6:63:bc:b4:f4:56:04:bd:a1:a7:33:17:d7:cb:3f:
60:6c:42:83:4d:de:06:2f:ef:57:6a:ff:f7:82:3b:ec:85:95:
ae:b1:bf:b4:5b:0c:5c:40:17:df:e2:79:75:ac:3b:02:31:94:
aa:2e:db:b0:60:3d:7c:f3:c7:ce:1f:20:f7:13:cb:6f:16:b1:
af:f7:16:51:ec:38:f8:9e:b7:91:03:5a:96:db:7b:23:51:2a:
75:3d:00:97:43:cc:11:94:7c:a1:b2:6c:cd:db:c5:53:f2:27:
0d:3c:cb:ed:d9:32:b1:6d:c2:f4:ba:21:0f:1e:1c:c9:dd:1f:
83:35:c7:9f:90:52:8f:50:61:8c:9c:ee:88:b1:73:74:af:39:
b9:9a:88:57:0a:04:7f:fe:51:9b:07:3f:3e:5b:31:61:d9:3a:
78:9e:67:0c:ac:11:23:48:e1:2d:cb:8a:73:a5:71:7f:29:14:
04:19:2a:d5:a9:d8:e0:71:0c:60:7d:66:41:c9:1d:ee:8f:14:
09:ab:d0:75
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY/uOCTmvc7nn1XpCzzOYAFxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNjA2MTU0MzI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTk3Nzc4MTNiM2U3YzAxNTAxYmQ2NzM4ZWQ5ZDEwMjJkY2NiMWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22WgXEyxCPNdMvOT3W2+FVW4eKl+
1mObZ5kKpZ2ImrY0YA9IEGzv5IfgoLJBZ7aKRLgz/NwUMYr5BJxPOZYygWcMhN4V
hKp9TxmRMb1CQPoM5yaNuRNnXRECx/nQtRo/R+GnERb9HQo3mzwd0Z+obEm6McWT
xC/0b9jah2MVOsZ3LEWla//LtO6seNwwnTrVwadmfBAome+Gjnq2JJ3BCXW1k/+s
CbKdq0Q3DBN3qqWqe1cxjm8leZU/vkv7YbMvHqdHm8NFSxNF4aSfXutR4ZHPYsJg
BKoz//XYAM5iAkCCoB+gU1ZQw6JdVBwDCnPeyDtXgsoqc+qVsSl6v8eFrwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBqXd4E7PnwBUBvWc47Z0QItzLHYMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvR3BkM2dUcy1mQUZRRzlaemp0blJBaTNNc2RnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUpn2AwQA
bbDOAwQA1drzMA0GCSqGSIb3DQEBCwUAA4IBAQBS4HJrKx/4eJ+wYkYd/Uk3WMt2
rT1bVeWgzKf6FF2YNX47nc60flYjz4FpJ/Y+p87mgJRBT80u7NS2Y7y09FYEvaGn
MxfXyz9gbEKDTd4GL+9Xav/3gjvshZWusb+0WwxcQBff4nl1rDsCMZSqLtuwYD18
88fOHyD3E8tvFrGv9xZR7Dj4nreRA1qW23sjUSp1PQCXQ8wRlHyhsmzN28VT8icN
PMvt2TKxbcL0uiEPHhzJ3R+DNcefkFKPUGGMnO6IsXN0rzm5mohXCgR//lGbBz8+
WzFh2Tp4nmcMrBEjSOEty4pzpXF/KRQEGSrVqdjgcQxgfWZByR3ujxQJq9B1
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:04:51 2025 by rpki-client