Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/GjHnqYXBvoH6PeWLUIMUSkIsD-s.roa
File: GjHnqYXBvoH6PeWLUIMUSkIsD-s.roa (raw, json)
Hash identifier: sOnU/4y2vc+TxmRYCv9cwyO8pknUs+Qu39qnLnkrphI=
Subject key identifier: 1A:31:E7:A9:85:C1:BE:81:FA:3D:E5:8B:50:83:14:4A:42:2C:0F:EB
Certificate issuer: /CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Certificate serial: 018CC94E6E8815492845EDCBC8916957B67F
Authority key identifier: 94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/GjHnqYXBvoH6PeWLUIMUSkIsD-s.roa
Signing time: Tue 02 Jan 2024 08:33:29 +0000
ROA not before: Tue 02 Jan 2024 08:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47332
IP address blocks: 93.191.44.0/24 maxlen: 24
93.191.41.0/24 maxlen: 24
93.191.42.0/24 maxlen: 24
93.191.43.0/24 maxlen: 24
93.191.40.0/24 maxlen: 24
93.191.45.0/24 maxlen: 24
93.191.46.0/24 maxlen: 24
93.191.47.0/24 maxlen: 24
185.153.244.0/24 maxlen: 24
37.148.240.0/24 maxlen: 24
37.148.241.0/24 maxlen: 24
37.148.247.0/24 maxlen: 24
195.13.34.0/24 maxlen: 24
195.13.32.0/24 maxlen: 24
195.13.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 22 Sep 2024 16:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6e:88:15:49:28:45:ed:cb:c8:91:69:57:b6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Validity
Not Before: Jan 2 08:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a31e7a985c1be81fa3de58b5083144a422c0feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9a:b1:c3:1f:fb:fa:8c:1e:0f:16:9e:c6:74:
63:0a:8a:24:34:22:f8:f6:4a:f5:f8:54:43:90:5f:
2b:13:49:d4:a1:90:5d:ff:77:a9:0f:c1:1c:a3:8e:
e0:00:3c:fd:ef:37:92:ab:91:c6:67:56:25:e5:e9:
4f:05:cb:fe:77:33:bc:e0:f1:89:2e:c9:dd:70:9c:
22:d3:9c:6f:f0:5e:bd:36:ee:60:89:7a:8a:75:87:
36:28:97:dd:a7:24:48:5e:57:b8:e5:77:79:60:82:
3d:87:fb:a1:e8:6b:fa:32:56:e8:ab:eb:ae:be:f0:
ce:9f:ee:a9:7f:dc:6d:5d:11:08:49:b4:19:94:af:
bd:ce:ce:e2:eb:91:61:7d:88:62:15:93:de:92:0b:
d5:11:22:3b:2d:98:54:a0:b1:c6:29:74:fc:ea:ed:
c4:59:42:7c:6b:45:ac:24:a4:37:9d:68:bf:96:39:
f9:d3:23:cc:ee:f1:b9:51:30:82:c2:21:26:c0:45:
5c:0b:83:1d:19:c6:54:74:3a:48:45:96:ab:8f:4a:
d1:26:b4:81:23:09:d1:51:f7:a6:40:12:48:2e:38:
e0:f8:fa:85:1c:94:ae:5f:c2:9a:5f:6f:e1:08:32:
ee:72:c1:61:5d:f2:ef:0e:73:6c:ff:77:e9:0c:6f:
07:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:31:E7:A9:85:C1:BE:81:FA:3D:E5:8B:50:83:14:4A:42:2C:0F:EB
X509v3 Authority Key Identifier:
keyid:94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/GjHnqYXBvoH6PeWLUIMUSkIsD-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.240.0/23
37.148.247.0/24
93.191.40.0/21
185.153.244.0/24
195.13.32.0-195.13.34.255
Signature Algorithm: sha256WithRSAEncryption
04:cc:26:e1:7b:8b:26:0e:31:5a:af:eb:3d:34:d6:1b:4e:66:
75:59:d3:0e:b9:01:b9:a4:88:65:36:75:b3:4b:28:f4:4e:fd:
c7:0d:57:70:a4:87:ab:99:83:c0:25:f6:1e:ab:b2:1e:3c:00:
8d:c1:79:d4:c9:e0:b2:b1:3f:d3:62:1f:6a:3d:c1:43:60:9f:
b7:2d:e2:97:1c:38:51:14:0c:4d:be:96:28:53:d7:c8:54:38:
ca:27:4b:17:b4:3b:44:53:a1:53:c2:62:15:c9:bd:ee:cf:4b:
a4:28:de:a5:7e:f2:6f:c8:6c:da:bc:5a:b2:2d:eb:ef:25:b1:
64:05:2a:7a:d4:77:9d:b1:db:8c:26:8b:6b:37:aa:ea:4d:94:
1c:64:72:cc:f8:30:df:be:a9:c1:f8:3b:e2:c6:25:8b:e5:af:
cf:a4:66:8d:af:e4:3c:19:07:70:e5:5a:b3:ba:51:8b:95:8e:
ec:be:27:2d:45:ee:b1:a0:87:c9:b2:84:52:9b:79:f4:59:82:
5b:f3:b0:0e:10:2d:16:53:62:58:f7:25:9f:3b:bf:66:0f:54:
72:e9:48:42:2d:20:a1:0b:37:2f:38:e7:b6:56:63:bc:ed:97:
6d:95:29:0a:bc:f1:1d:9d:4e:8c:33:aa:5d:ad:ed:cd:c8:f7:
8a:c0:40:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:15:18 2025 by rpki-client