Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/1GTA3n1w7GGiGlRJhU8utrFMsP8.roa
File: 1GTA3n1w7GGiGlRJhU8utrFMsP8.roa (raw, json)
Hash identifier: xQ3C1V3u45FgJ6LvEQtJR1ztCbfNVAU8fJKc/MYbf04=
Subject key identifier: D4:64:C0:DE:7D:70:EC:61:A2:1A:54:49:85:4F:2E:B6:B1:4C:B0:FF
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 01948EA8FB1B15C6DCDB3058EC378B62B003
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/1GTA3n1w7GGiGlRJhU8utrFMsP8.roa
Signing time: Wed 22 Jan 2025 15:37:06 +0000
ROA not before: Wed 22 Jan 2025 15:37:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200404
IP address blocks: 194.37.93.0/24 maxlen: 24
194.37.94.0/24 maxlen: 24
194.37.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Jan 2025 22:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:a8:fb:1b:15:c6:dc:db:30:58:ec:37:8b:62:b0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Jan 22 15:37:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d464c0de7d70ec61a21a5449854f2eb6b14cb0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:82:62:80:31:a8:f8:f9:76:06:80:4e:c4:38:
4c:5d:63:a2:cb:d6:27:1a:c8:67:16:2c:5e:3a:62:
81:60:74:98:42:c5:17:69:42:7c:b3:7e:2c:07:c3:
89:22:fe:9a:15:66:e7:d9:ec:75:1a:c8:bb:71:f7:
df:e2:da:b2:98:03:da:10:94:ac:2b:d0:cf:ea:b5:
d5:f7:e5:64:51:2f:6a:1e:74:64:de:7d:a1:13:f6:
25:27:b1:c9:cd:0d:7e:09:ba:62:23:8b:9a:f4:eb:
15:16:98:a8:a2:44:fa:2e:a8:10:a2:94:f6:96:bc:
18:bc:58:5c:eb:98:92:fb:69:1c:1a:e0:d5:01:e0:
e8:b6:5d:5f:90:c5:98:4e:8c:63:91:5e:3b:c5:01:
c6:fc:f2:19:88:77:ab:9f:66:4f:12:c6:66:b8:55:
76:eb:5d:e5:df:99:1b:3d:ca:ea:9a:9b:c0:2b:69:
cb:6c:9e:f0:bd:f3:a4:dc:05:84:e7:8d:e6:bf:01:
fc:54:47:1e:9b:53:e3:a0:9a:0e:85:2d:b3:17:af:
a9:97:f7:18:95:8c:23:97:1a:03:1e:0d:cf:ad:0a:
7f:c5:5d:55:f2:4e:d8:9b:c6:da:3a:ed:52:12:2a:
8c:48:d2:9d:22:4b:72:c6:6b:bb:ec:41:9b:ba:92:
7a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:64:C0:DE:7D:70:EC:61:A2:1A:54:49:85:4F:2E:B6:B1:4C:B0:FF
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/1GTA3n1w7GGiGlRJhU8utrFMsP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.93.0-194.37.95.255
Signature Algorithm: sha256WithRSAEncryption
49:db:f9:6e:25:af:45:83:e5:b5:1d:6f:22:9a:37:20:b9:07:
18:d5:c2:df:55:e9:c2:a5:93:ed:1f:69:44:3a:b9:55:c8:83:
86:27:51:e4:74:a5:c0:5c:2c:dd:4d:62:76:c5:5d:81:c0:a4:
aa:99:0d:c6:64:2e:81:be:18:55:76:f9:84:e4:5d:5d:34:7b:
4c:df:89:0f:84:b9:ff:6d:8b:2f:4f:ec:8a:9d:e8:45:fc:54:
2f:1d:fc:8f:b7:13:c7:68:35:6e:33:5a:32:0b:6e:56:cd:6b:
dd:a6:45:56:4e:65:f7:05:2d:d0:46:cc:5e:23:f6:0a:b2:b4:
51:9a:94:5e:d3:b1:8a:f1:73:43:1e:b9:96:b1:a5:d4:ee:e1:
41:db:82:5c:11:f0:13:e6:ee:4e:54:d6:33:00:db:9f:20:21:
f9:34:a1:1e:84:f2:77:3f:ee:89:f7:9c:c1:1b:e9:59:15:1c:
75:f2:4f:30:75:2d:b7:48:51:9c:1a:70:10:39:bc:a9:58:56:
1a:48:31:44:0c:09:a5:75:6b:d0:75:4a:f1:fc:cb:d3:57:3d:
7c:20:b5:8d:67:ef:27:04:55:58:87:99:3e:cc:85:45:dc:5a:
70:bb:e2:62:0a:e7:34:ac:5c:55:cf:7a:02:b7:a6:b4:d7:3c:
b9:e4:03:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:59:48 2025 by rpki-client