Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/G-J9uJEwIv6rwB_jS6143EOuySQ.roa
File: G-J9uJEwIv6rwB_jS6143EOuySQ.roa (raw, json)
Hash identifier: DjZuGeNi2ASvrEicqOIRKscbg47QcZ/CHgKyMo36oV4=
Subject key identifier: 1B:E2:7D:B8:91:30:22:FE:AB:C0:1F:E3:4B:AD:78:DC:43:AE:C9:24
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 019501FDC3643FAA6D927F320E28959C9369
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/G-J9uJEwIv6rwB_jS6143EOuySQ.roa
Signing time: Fri 14 Feb 2025 01:06:02 +0000
ROA not before: Fri 14 Feb 2025 01:06:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.145.17.0/24 maxlen: 24
80.91.221.0/24 maxlen: 24
212.87.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Feb 2025 21:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:01:fd:c3:64:3f:aa:6d:92:7f:32:0e:28:95:9c:93:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Feb 14 01:06:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1be27db8913022feabc01fe34bad78dc43aec924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:61:c2:76:f4:17:72:4d:07:01:88:f6:e4:58:
29:9f:dc:23:ec:16:16:5a:d4:0c:4d:fd:b9:ee:58:
80:08:2f:69:59:e0:cf:bc:23:58:a1:e5:31:d3:8c:
cc:c3:90:73:11:80:6d:aa:ce:27:de:75:8d:86:f8:
9a:ef:4d:02:e4:cd:ab:0c:15:db:d8:a1:ce:7e:48:
7b:4d:57:b9:03:b7:d4:d5:8c:27:83:af:e8:fe:c5:
74:94:a6:18:a4:63:7f:d7:2b:00:23:e7:cd:e0:92:
46:bd:47:34:92:25:7d:1a:47:4a:1f:78:98:1e:f6:
a6:ba:aa:fa:e3:3f:90:f6:00:ad:7b:70:8b:94:b8:
cc:a9:7f:21:41:bf:ae:08:d9:c1:6a:25:c0:97:37:
0f:4a:13:dc:50:38:c0:a0:29:52:49:d3:10:3d:8d:
26:84:12:75:e2:c2:92:b9:70:9f:c0:8b:ee:53:2f:
50:27:70:ba:e4:a2:91:3f:57:dd:5d:14:65:65:ac:
db:96:87:10:ba:ad:16:51:23:ae:2b:6f:24:ca:5a:
ae:a9:fa:56:9f:96:1e:9c:27:b0:1a:7c:b6:ea:cc:
a7:37:7f:88:bf:2d:ab:66:b5:6b:06:21:37:e4:20:
41:34:c0:53:71:60:c1:ee:41:87:6d:df:49:07:dd:
82:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E2:7D:B8:91:30:22:FE:AB:C0:1F:E3:4B:AD:78:DC:43:AE:C9:24
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/G-J9uJEwIv6rwB_jS6143EOuySQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.17.0/24
80.91.221.0/24
212.87.200.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:a5:2d:b2:72:23:5a:3a:f2:ad:74:ad:6c:c0:5a:c2:11:c3:
e9:f3:e1:9d:12:1e:68:e8:27:4b:c3:aa:68:8c:f1:e3:bf:df:
a2:90:25:59:7f:7c:7f:da:9d:80:bd:99:47:ff:75:97:2c:41:
2d:aa:23:ee:6f:83:fc:ff:a6:7d:2d:93:63:fd:a7:5c:9d:8b:
a4:eb:08:ec:35:7b:1a:c7:3c:c2:88:6c:69:24:82:7d:78:9e:
9d:8a:e8:3a:ce:e8:6a:01:2c:bc:3e:66:41:92:61:e7:c0:0c:
11:81:a9:b4:3d:c1:97:33:69:80:07:9c:cd:60:32:cf:64:6c:
08:67:2f:2e:cf:94:c5:9d:05:4c:b4:70:34:9b:30:0f:c7:e6:
66:58:37:d9:8f:6a:8f:d8:1a:c5:b6:5a:68:8d:60:c5:5c:2d:
f4:ba:f6:0b:fd:f2:ca:de:be:7c:13:93:3c:e4:0d:fb:ea:b4:
58:0b:28:05:05:83:25:05:66:f1:d7:03:86:a0:f4:00:2c:e3:
92:04:d0:8a:2d:f9:ed:42:6b:61:01:6e:2b:96:b9:06:04:6d:
b9:b8:e9:e9:e3:2e:ed:18:c4:41:d7:a0:5f:c9:86:dd:23:2c:
04:34:3b:d1:4a:cd:a9:65:2f:40:43:f0:c4:8e:dc:4d:81:b1:
48:c4:14:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:35 2025 by rpki-client