Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/Gaw46kzJ7FcUTI7Na1l0YWu9dTg.roa
File: Gaw46kzJ7FcUTI7Na1l0YWu9dTg.roa (raw, json)
Hash identifier: adknisPbz0xY+AVIq2hKRIdBaIpbDL/8laDqsPQfbu4=
Subject key identifier: 19:AC:38:EA:4C:C9:EC:57:14:4C:8E:CD:6B:59:74:61:6B:BD:75:38
Certificate issuer: /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial: 018CC94E6320A7041155E5AF7D31C650AAEB
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/Gaw46kzJ7FcUTI7Na1l0YWu9dTg.roa
Signing time: Tue 02 Jan 2024 08:33:26 +0000
ROA not before: Tue 02 Jan 2024 08:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199554
IP address blocks: 185.164.152.0/22 maxlen: 22
185.164.152.0/24 maxlen: 24
5.57.200.0/21 maxlen: 21
5.57.200.0/24 maxlen: 24
2a01:4540::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:63:20:a7:04:11:55:e5:af:7d:31:c6:50:aa:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
Validity
Not Before: Jan 2 08:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19ac38ea4cc9ec57144c8ecd6b5974616bbd7538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3d:de:11:15:15:e8:fe:61:d8:2a:5f:74:f6:
97:7e:78:68:5a:21:21:1a:41:aa:96:e6:00:2d:21:
a2:fd:b7:bb:b2:7a:6c:76:5b:05:ca:d4:72:4e:68:
e8:82:af:25:90:45:35:0a:b4:ef:80:36:e6:64:01:
d1:71:38:42:c7:81:0c:58:ba:70:f8:a1:42:43:de:
21:71:47:0e:fc:10:da:29:ec:32:8e:ab:6d:e1:1f:
a8:0b:d9:d4:2c:db:1f:2f:b2:92:c2:7c:e4:fa:55:
b4:ce:ac:4d:0e:b6:9a:62:d8:43:81:85:25:6a:fa:
0f:28:b0:91:6d:cb:17:b5:61:91:2e:4f:bb:a6:91:
ed:95:35:ee:43:25:e8:18:07:51:33:a2:89:fa:9b:
37:c0:07:24:84:14:b7:31:53:b8:08:96:3e:43:01:
43:3f:3a:1b:43:0f:56:ab:3f:de:9a:81:f2:5a:88:
4e:e6:9d:9a:4d:04:b1:8d:ad:05:fb:d7:59:2c:92:
46:91:64:5e:7b:7c:f7:6e:44:1b:fd:06:d9:4c:c2:
ad:af:01:dd:fb:17:5a:bd:20:cc:c7:2c:df:fd:7f:
ae:46:21:f7:23:b2:0f:b2:4c:02:f3:58:c4:a2:60:
00:90:63:53:5b:fe:b7:45:9d:a4:c3:da:9b:be:a7:
05:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AC:38:EA:4C:C9:EC:57:14:4C:8E:CD:6B:59:74:61:6B:BD:75:38
X509v3 Authority Key Identifier:
keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/Gaw46kzJ7FcUTI7Na1l0YWu9dTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.200.0/21
185.164.152.0/22
IPv6:
2a01:4540::/29
Signature Algorithm: sha256WithRSAEncryption
46:63:96:66:fc:69:97:97:24:3f:8c:62:82:80:77:41:74:78:
b2:ac:b2:86:e6:2b:b0:a8:c0:db:61:97:9e:37:6c:3a:cc:ec:
88:ba:6a:ce:bd:57:27:0e:14:2e:6b:49:87:a8:b8:7b:cf:d8:
26:ba:73:c1:60:ca:f2:a0:2a:0f:2f:60:ca:56:e9:62:86:22:
da:bd:01:b7:96:b0:f8:cd:14:db:f0:20:08:e8:bc:5e:d1:19:
09:e6:17:00:50:32:05:40:75:d8:a2:02:b2:d0:af:1a:b0:50:
09:2f:a4:53:f7:17:2e:32:ac:02:9a:b4:31:1b:bb:df:59:9d:
19:68:1e:26:0d:72:f3:22:68:fb:2d:f3:ee:42:f8:01:eb:cc:
e2:3a:3c:4f:7d:e3:ff:4a:82:7e:01:e9:98:51:f7:fe:96:d5:
9b:89:df:cf:36:f1:5b:13:84:24:8b:f9:61:dc:43:24:b8:90:
9c:7d:a9:25:ba:62:5f:aa:0a:03:47:06:ed:b1:81:96:a8:b4:
49:c6:60:76:02:c1:c8:a2:7f:30:96:09:fe:dd:f4:f5:82:61:
c7:e9:0b:28:4a:02:0e:ab:25:16:77:72:1e:fe:10:b4:1e:3f:
e8:fb:02:fc:0c:01:ac:5b:66:de:31:6c:28:10:de:ce:62:f9:
60:85:4d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:59 2025 by rpki-client