Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gue_h39J2njhxPqPy_IwaSNLEAk.roa
File: gue_h39J2njhxPqPy_IwaSNLEAk.roa (raw, json)
Hash identifier: bWjrjSxxePuCx07l1+FbCcfr9Uh9QnnSJKiWXa6cPG4=
Subject key identifier: 82:E7:BF:87:7F:49:DA:78:E1:C4:FA:8F:CB:F2:30:69:23:4B:10:09
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143F12FFA371D66C8348701C3771D89
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gue_h39J2njhxPqPy_IwaSNLEAk.roa
Signing time: Wed 01 Jan 2025 09:48:08 +0000
ROA not before: Wed 01 Jan 2025 09:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62005
IP address blocks: 213.218.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:44:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f1:2f:fa:37:1d:66:c8:34:87:01:c3:77:1d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82e7bf877f49da78e1c4fa8fcbf23069234b1009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ba:01:67:e9:39:f4:50:db:7c:f5:20:78:7e:
8d:88:ec:33:22:fe:e9:53:a2:3b:46:97:da:ea:f9:
e1:b1:07:c6:c4:99:0c:5f:5c:de:d8:7a:43:8a:05:
a6:30:69:ea:03:5f:e9:ad:bb:2d:26:d6:87:f6:42:
37:1a:c2:41:91:fe:02:a1:d4:a2:ef:21:fd:f7:a0:
c1:56:d6:e8:13:39:2b:bd:40:f9:16:96:cd:f9:59:
1f:22:9d:54:18:56:fa:89:88:fd:71:c9:e3:e8:be:
03:20:2b:c7:1e:89:e7:d0:5b:ff:17:55:ea:cf:da:
73:65:cb:7f:e9:72:c7:5d:41:6a:b4:34:a8:d0:69:
b3:d0:a5:1c:49:14:26:e3:5c:19:6f:dc:6e:0e:b6:
c4:03:15:60:e8:39:6b:8d:26:bc:6e:a3:27:e7:a9:
f2:fe:79:c9:25:44:72:f3:52:37:04:54:e5:95:b0:
40:2b:78:50:95:c3:4a:66:57:cf:99:5b:23:c4:47:
ca:8f:27:94:d6:f3:87:85:18:ec:c1:15:c0:04:60:
9f:af:12:b6:97:1d:5d:5a:17:9a:8e:b1:25:29:ff:
f3:83:e6:c3:80:e2:ad:77:07:51:76:53:1b:a6:76:
0b:96:cd:7c:96:54:1b:25:3e:fc:fb:04:04:59:da:
24:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E7:BF:87:7F:49:DA:78:E1:C4:FA:8F:CB:F2:30:69:23:4B:10:09
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gue_h39J2njhxPqPy_IwaSNLEAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.210.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:dd:a1:a4:1b:0d:2f:8e:86:52:7e:35:6f:a2:0b:92:20:32:
e3:8d:2f:f8:4c:bf:23:28:db:2a:f6:0e:9b:72:c9:c7:3e:68:
87:be:c9:fe:72:53:d5:ee:f7:97:af:f1:69:0a:e5:5b:b4:4d:
32:cd:0c:76:53:fe:68:85:d0:58:34:ac:5a:0a:72:a2:97:10:
9a:b4:d5:40:81:a1:c7:4b:a0:be:f5:5d:44:84:45:d4:09:5a:
3e:14:39:4d:55:67:22:40:26:2d:a7:2a:6c:55:e9:c5:64:de:
86:47:9b:8d:9e:88:0e:07:0d:58:14:ea:30:86:09:20:7f:4a:
cf:39:f2:99:c8:ea:b5:c0:c0:d6:e7:46:ef:17:ab:c6:fd:c1:
58:cf:c2:e9:7a:96:6c:ac:c4:8f:ca:fe:95:a7:b1:07:d5:e5:
cb:25:b4:ff:28:b3:05:47:cf:51:2f:24:74:42:d7:1a:9d:69:
c1:0d:df:97:1c:73:50:12:b6:56:83:36:2d:4e:b7:d0:b1:d7:
7f:e9:06:e5:a9:af:bc:ff:1d:3a:7e:7b:2c:36:3e:2d:43:81:
8f:24:40:42:7b:a2:12:be:c9:49:af:e7:16:aa:f4:a0:68:00:
b5:a3:32:cc:e9:6c:87:3f:56:7a:e5:89:d8:f2:75:f6:e0:ac:
5b:28:66:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:31:57 2025 by rpki-client