Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/GM9puCmtkmv6vONJyESSZG4GDCM.roa
File: GM9puCmtkmv6vONJyESSZG4GDCM.roa (raw, json)
Hash identifier: iKEmqT66+uoFq/l3/5ot7zYIZhxOxAJQkqlwzQnHZ1w=
Subject key identifier: 18:CF:69:B8:29:AD:92:6B:FA:BC:E3:49:C8:44:92:64:6E:06:0C:23
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 01928AFFD36B0C5205AF8C25813977EDECAC
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/GM9puCmtkmv6vONJyESSZG4GDCM.roa
Signing time: Mon 14 Oct 2024 12:27:54 +0000
ROA not before: Mon 14 Oct 2024 12:27:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20853
IP address blocks: 185.198.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:ff:d3:6b:0c:52:05:af:8c:25:81:39:77:ed:ec:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Oct 14 12:27:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18cf69b829ad926bfabce349c84492646e060c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:3b:22:c4:15:63:4a:7d:aa:14:00:3c:e9:
a6:ed:6e:a3:07:82:53:66:ab:38:ba:b7:16:a6:f4:
65:60:24:34:e3:1d:ce:de:ed:3d:50:4d:35:77:8c:
37:f6:a8:d5:19:84:b2:26:0d:eb:9b:44:fa:57:d5:
4c:5e:75:83:f5:ac:ab:58:3a:5d:01:44:0a:ed:8d:
90:a0:32:d2:db:48:d0:1c:bc:f9:56:d7:e2:af:a1:
03:da:60:08:e5:e0:97:ff:20:46:6e:60:c7:07:4b:
93:b9:62:3d:f9:2c:a7:58:f3:93:9f:44:c3:6a:0e:
2e:fa:9f:fc:45:c0:31:c1:a7:bc:cb:0a:57:5f:42:
4d:58:d4:fa:b0:73:71:5c:2d:18:be:57:96:37:eb:
2d:b9:c0:fd:9a:04:40:60:03:8b:1c:cc:56:51:41:
8a:a8:d6:ec:04:01:00:18:6b:47:74:53:3d:e6:4a:
88:62:bb:7c:de:23:fd:e0:99:88:2e:73:9a:e2:70:
9b:c3:7f:57:8e:ef:67:73:c5:ed:31:4f:73:88:1f:
94:12:b1:2c:57:e9:f1:fe:cd:80:c1:0d:b9:46:f8:
4b:26:c0:35:ac:03:8b:c2:49:d5:9e:5a:28:a7:c2:
7a:b0:0d:0b:e5:25:0c:a4:5b:3a:95:59:b4:d0:15:
5b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CF:69:B8:29:AD:92:6B:FA:BC:E3:49:C8:44:92:64:6E:06:0C:23
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/GM9puCmtkmv6vONJyESSZG4GDCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.37.0/24
Signature Algorithm: sha256WithRSAEncryption
13:84:45:5e:05:2a:45:4f:ab:0c:09:10:a3:aa:b4:00:1e:d4:
c0:8e:be:f2:f4:f4:d5:eb:42:f6:0f:53:77:e3:2a:7f:07:33:
2b:91:5c:cc:b7:36:cd:01:3f:e9:38:d3:f4:93:a0:16:e1:75:
4b:f0:e2:8b:92:93:92:f4:2a:20:83:72:35:94:16:32:74:a5:
ab:83:7f:2f:3c:fb:a7:77:70:0b:6e:bb:c1:2a:aa:57:30:27:
9f:eb:f4:0f:4b:5c:c2:73:86:20:c3:07:3a:71:e7:24:36:c0:
8b:fe:e6:4b:5f:8c:a1:1a:79:12:5d:b2:f9:40:13:46:eb:00:
09:97:9d:8f:5f:66:80:33:99:5b:bb:be:08:b4:14:08:ce:7c:
72:a4:be:c4:cb:96:e0:4a:1f:c1:7b:96:0a:2d:ad:8c:a6:0a:
91:cf:f6:20:3a:c2:49:7b:f3:24:36:04:64:24:1a:d1:bc:1c:
1c:96:80:ca:ff:4c:c1:50:d3:15:b5:ee:cf:69:65:16:4a:16:
63:00:2d:03:10:08:13:74:f3:3c:c1:3c:d5:98:f6:94:72:15:
c6:cd:0f:87:9e:b3:b1:ce:34:f9:fd:44:79:c6:09:93:91:59:
1b:eb:28:27:48:0b:8d:e8:41:bc:56:9d:4b:9b:c1:2a:7a:dc:
6d:82:1f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:36 2025 by rpki-client