Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Gv0Ri5MTVne8D001WMXnhMJmouo.roa
File: Gv0Ri5MTVne8D001WMXnhMJmouo.roa (raw, json)
Hash identifier: TVXvjvZ+2TqjkYa6BqtG8n1u3xb17kLSSR4+iB7zMzI=
Subject key identifier: 1A:FD:11:8B:93:13:56:77:BC:0F:4D:35:58:C5:E7:84:C2:66:A2:EA
Certificate issuer: /CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Certificate serial: 019424B3FA6C5CF9611075AB4C968437D140
Authority key identifier: 1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Gv0Ri5MTVne8D001WMXnhMJmouo.roa
Signing time: Thu 02 Jan 2025 01:49:22 +0000
ROA not before: Thu 02 Jan 2025 01:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202790
IP address blocks: 146.19.201.0/24 maxlen: 24
185.152.124.0/22 maxlen: 24
212.18.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:fa:6c:5c:f9:61:10:75:ab:4c:96:84:37:d1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Validity
Not Before: Jan 2 01:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1afd118b93135677bc0f4d3558c5e784c266a2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:da:ff:86:97:09:36:17:0f:b5:14:40:94:
af:ea:b8:a3:d9:be:af:a2:ee:6f:5d:dd:46:e5:0c:
37:fd:d6:c7:55:bf:38:f1:ad:fd:a6:99:83:5c:fc:
e4:af:2c:69:1c:40:0e:ab:32:16:c7:30:b8:b3:44:
e1:fa:61:6e:90:86:9f:f8:4f:73:6d:c5:b4:90:2f:
50:91:3c:fe:44:bc:90:dc:fa:02:c8:2e:b4:b5:76:
61:c8:dd:99:bb:3c:2a:86:a7:b3:0a:1f:38:da:a2:
ab:ab:1e:fa:55:14:54:1a:0a:2b:c6:cd:e3:8d:52:
3c:8a:76:23:fb:a5:ad:6e:37:68:18:2a:bc:82:69:
15:d5:cf:39:80:54:5a:b7:69:05:6b:e8:cc:3e:1e:
71:a4:fb:0b:7b:f4:e5:95:cf:fb:02:88:67:c0:0c:
dc:33:36:88:13:46:9b:55:df:46:e5:a5:34:f8:90:
94:e8:24:ee:50:34:2a:25:ab:bc:11:03:7e:80:7d:
bf:3a:f7:a4:7c:33:ae:56:c6:b4:2d:e6:5e:ab:f8:
0e:f2:3d:4e:ee:b0:b3:9a:20:9d:7d:ff:3e:76:77:
8b:b6:ba:81:71:11:eb:e0:c2:71:27:8a:e1:45:6d:
71:54:7b:94:2b:a5:58:07:3f:f2:9f:aa:7c:7d:e7:
9b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FD:11:8B:93:13:56:77:BC:0F:4D:35:58:C5:E7:84:C2:66:A2:EA
X509v3 Authority Key Identifier:
keyid:1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Gv0Ri5MTVne8D001WMXnhMJmouo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.201.0/24
185.152.124.0/22
212.18.121.0/24
Signature Algorithm: sha256WithRSAEncryption
81:a8:04:f6:43:8f:fc:d1:ff:56:21:8f:30:fc:45:fe:19:db:
a0:b6:11:44:72:fb:33:9f:fb:bf:c0:2a:83:ae:82:90:38:d3:
ad:a6:96:ca:0c:bf:05:b3:9d:68:1a:eb:1a:33:06:1d:78:99:
f5:c3:00:12:18:85:16:fa:d1:09:52:fc:a5:44:11:a9:5f:c0:
29:fa:59:7e:e4:c8:7a:e9:fe:6a:21:e8:72:da:ac:43:0f:98:
c8:2b:cb:7f:81:7a:21:27:3f:b5:91:d1:38:1d:3e:58:d7:4f:
4a:3e:69:86:ea:fa:94:88:c6:10:d2:b0:30:e2:d3:d2:be:00:
7b:65:be:5c:37:d5:27:46:8b:fc:4d:c6:27:4a:42:4e:f1:96:
ef:e0:1d:f6:69:ab:cf:db:25:ad:fa:aa:bc:c8:8d:b3:74:a3:
f2:7e:30:4f:fe:63:c1:7f:55:53:68:43:75:7b:55:36:13:88:
64:d5:e9:65:1c:dc:ef:15:53:3f:18:98:4a:08:6c:19:10:9c:
b3:df:de:59:ed:ff:a5:19:a4:c3:81:33:80:34:df:b8:a7:ad:
ca:d5:01:c5:39:cd:1b:0e:c8:ef:bd:55:65:ae:6d:55:32:cf:
a2:2b:c1:fe:b2:24:39:63:f2:e2:c9:cd:40:55:73:82:54:8d:
6a:21:30:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:47:08 2025 by rpki-client