Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GuU9yXZyEuvJee3Sx5d9-oVEo_A.roa
File: GuU9yXZyEuvJee3Sx5d9-oVEo_A.roa (raw, json)
Hash identifier: shy9/row01OOrmM/pViw7OVo8wwml7fdB3dKAftllOo=
Subject key identifier: 1A:E5:3D:C9:76:72:12:EB:C9:79:ED:D2:C7:97:7D:FA:85:44:A3:F0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F3042161ABCDF41809E6F21012F0FA04C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GuU9yXZyEuvJee3Sx5d9-oVEo_A.roa
Signing time: Tue 30 Apr 2024 18:26:28 +0000
ROA not before: Tue 30 Apr 2024 18:26:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150249
IP address blocks: 213.130.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Sep 2024 13:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:30:42:16:1a:bc:df:41:80:9e:6f:21:01:2f:0f:a0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 30 18:26:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ae53dc9767212ebc979edd2c7977dfa8544a3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4f:b0:d6:3f:26:bb:3b:ec:8d:4d:0e:f9:85:
9e:b2:4f:8d:6c:c6:e9:01:05:de:7f:d3:2e:aa:65:
b2:d5:ab:7d:b3:72:62:19:e8:5c:6e:5b:2d:4e:bb:
4b:cf:d7:bc:6b:bc:aa:30:36:44:ae:68:b6:5f:4d:
e3:9d:8d:ab:4b:73:8f:9a:ec:16:f4:28:f7:19:12:
17:fd:47:44:d3:86:32:c9:7f:25:d0:fe:ef:f2:ff:
3c:5f:00:7a:fb:91:02:15:e3:71:7b:2a:d8:d7:a7:
21:ea:50:5c:2b:34:93:6b:9a:10:c0:b7:72:37:64:
90:a9:12:9b:3c:2c:50:0d:5b:f6:fe:14:25:35:e0:
18:48:bf:0f:68:67:ea:a1:c4:68:23:d6:29:a8:f6:
e5:9c:98:3c:bb:72:e2:66:21:b4:70:9a:30:cc:df:
ff:c7:54:21:9a:8e:d3:6a:ea:6d:24:b1:4a:48:d3:
c3:11:ed:58:a3:f1:e0:01:63:83:5c:1f:04:b6:48:
cd:78:24:4a:66:48:ae:37:2d:01:e0:57:ba:28:26:
09:05:1b:39:ff:c9:42:d9:d0:99:8b:e2:4c:68:be:
54:80:38:45:4f:37:fc:4e:1b:82:ea:b3:fc:21:45:
4a:53:f1:41:bf:63:ff:0f:ef:02:ec:df:4f:6b:3e:
49:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E5:3D:C9:76:72:12:EB:C9:79:ED:D2:C7:97:7D:FA:85:44:A3:F0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GuU9yXZyEuvJee3Sx5d9-oVEo_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.130.138.0/24
Signature Algorithm: sha256WithRSAEncryption
68:cf:27:a8:b0:fc:0b:65:0f:29:2b:24:a8:e4:84:8e:9f:3d:
c0:01:70:80:6c:5f:2c:23:83:e6:e0:63:9e:d1:b4:be:08:da:
63:2b:97:88:89:86:42:80:81:1c:69:74:e9:e6:6a:7f:13:b0:
46:99:0f:16:b2:90:1f:c1:e4:c1:25:db:4c:18:32:92:94:9b:
7b:1c:0c:3f:3c:59:23:51:ea:06:62:02:02:09:61:e5:41:b5:
1e:0a:14:8f:4d:b7:17:d4:d4:a0:80:3a:69:ac:f7:87:57:5a:
03:21:61:c9:d9:a7:9a:0c:51:35:47:4c:f8:26:0d:01:9b:0d:
0e:11:a4:9a:ee:f7:43:e0:6f:6e:cb:fd:d5:51:53:18:33:00:
8c:ad:f1:88:ff:56:67:7e:77:dd:a1:86:5c:82:e1:94:fd:a0:
58:24:88:24:e0:51:5e:48:7a:9a:aa:61:1d:9b:16:ea:5a:fe:
59:20:7a:de:6b:41:8b:67:51:87:70:c1:e7:29:c6:74:01:3c:
d9:18:53:3d:3b:72:ce:a7:19:1e:6c:16:06:f9:88:d0:f9:d2:
61:38:3d:3c:12:f5:ac:d7:7a:7f:c9:83:7d:86:bc:88:5d:d0:
18:22:7d:98:89:65:99:0c:6c:21:58:06:16:ab:be:cf:d6:3e:
de:5d:48:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:13:49 2025 by rpki-client