Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/GfwpYJRz9ArnXeV6auSRLIwZsCY.roa
File: GfwpYJRz9ArnXeV6auSRLIwZsCY.roa (raw, json)
Hash identifier: HXNIhqgTnoC4VIzBxdQobS0/F/XbLlkwswuMaWEoHuI=
Subject key identifier: 19:FC:29:60:94:73:F4:0A:E7:5D:E5:7A:6A:E4:91:2C:8C:19:B0:26
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0190DA269273F9CA01A2140C715DC99BC029
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/GfwpYJRz9ArnXeV6auSRLIwZsCY.roa
Signing time: Mon 22 Jul 2024 11:14:39 +0000
ROA not before: Mon 22 Jul 2024 11:14:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 45.84.216.0/24 maxlen: 24
45.95.243.0/24 maxlen: 24
45.148.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 11:18:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:da:26:92:73:f9:ca:01:a2:14:0c:71:5d:c9:9b:c0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 22 11:14:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19fc29609473f40ae75de57a6ae4912c8c19b026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:cc:53:6a:ff:b8:7d:49:bd:e9:7b:5f:cf:
c8:2c:75:c5:86:7f:d7:df:62:ce:54:1a:36:3e:a2:
72:7f:ba:be:bc:2a:b4:42:b8:04:78:af:c7:80:b9:
26:c5:4c:aa:c6:8e:57:7e:92:7e:8b:ff:40:35:db:
1c:a8:ef:79:bd:62:5e:68:92:b0:35:d3:d0:56:83:
e2:64:13:e9:da:74:5c:3c:9a:9f:fc:b1:41:dd:3f:
35:f8:55:1c:ff:0b:52:8a:16:e0:6a:59:fc:7b:0e:
61:2a:88:93:9b:1b:c6:7e:10:85:fc:a3:28:f1:50:
7f:1b:84:dc:25:72:64:9b:4a:81:21:33:1e:08:6a:
89:72:05:fb:12:41:0a:4c:9f:a4:fa:41:10:d6:26:
05:1e:57:4b:38:c7:ef:02:23:50:ff:7c:af:06:7b:
ec:ec:73:d9:f3:ce:a4:c1:56:c9:7c:28:f8:6b:74:
16:e2:ef:71:87:9d:9e:ed:e8:52:81:fa:7e:8c:41:
f0:a4:4b:69:cb:fd:77:39:8b:8f:3f:66:7d:0c:7e:
2f:85:4f:1c:a2:c6:01:3f:62:1c:95:bf:b4:06:63:
09:c0:9d:38:74:dd:f5:c7:ee:16:85:d2:44:27:fe:
56:5d:7e:7f:d0:f6:8c:10:fe:9d:12:c3:ad:e5:a1:
ca:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FC:29:60:94:73:F4:0A:E7:5D:E5:7A:6A:E4:91:2C:8C:19:B0:26
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/GfwpYJRz9ArnXeV6auSRLIwZsCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.216.0/24
45.95.243.0/24
45.148.25.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:28:d3:e7:7e:de:56:ef:74:0b:3a:f1:c5:95:20:ad:19:ba:
38:92:b7:69:f1:08:90:be:b4:46:46:29:76:ac:08:ce:97:ce:
3d:0d:46:1e:a4:2b:e8:d8:92:40:f7:9e:35:5c:b5:b8:5f:aa:
5b:ce:9a:9a:fc:fe:b2:3a:1e:0d:4e:c6:e7:c7:cf:4d:48:1b:
d3:a5:ba:ac:79:1c:7d:70:75:bd:7d:0a:c9:95:d3:76:c3:39:
f5:4a:1c:5e:b3:8b:b1:a5:fe:61:30:cb:71:2c:39:ea:2f:61:
a1:80:a4:60:62:14:77:32:9f:f0:00:5a:d3:5b:04:d2:0d:98:
5f:f4:f5:be:b8:3d:94:f3:bd:80:53:52:38:48:c1:b1:62:4d:
a8:41:95:af:91:a4:82:15:e4:df:d8:dc:4f:58:68:6f:b9:02:
7b:99:92:d0:39:c0:1b:59:36:a5:09:e8:6b:d3:d3:57:84:19:
d0:09:d8:97:46:75:3d:a0:9b:9d:83:90:12:13:60:0e:00:92:
15:be:92:2d:38:4f:cc:83:1e:c7:22:63:9e:af:d9:f5:34:ff:
28:6b:ba:33:6b:88:08:7e:1b:b9:d6:56:32:fb:87:d9:a6:cc:
73:ec:d5:7a:0e:5c:4a:d6:df:3f:20:8e:a3:4d:bd:db:7b:e9:
60:16:af:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:57:27 2025 by rpki-client