Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GDXn-QPSn2Se12X2UtuIZxuce8I.roa
File: GDXn-QPSn2Se12X2UtuIZxuce8I.roa (raw, json)
Hash identifier: 9kWYgIqmwMXYCIogihBg3BTUQoVLdLkN1rwMSmdfYCE=
Subject key identifier: 18:35:E7:F9:03:D2:9F:64:9E:D7:65:F6:52:DB:88:67:1B:9C:7B:C2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019407FFE952DC27E586D002EF21F6C4CB18
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GDXn-QPSn2Se12X2UtuIZxuce8I.roa
Signing time: Fri 27 Dec 2024 12:03:19 +0000
ROA not before: Fri 27 Dec 2024 12:03:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 45.129.127.0/24 maxlen: 24
93.190.246.0/23 maxlen: 23
2a0f:1e84:10::/48 maxlen: 48
2a0f:2ec0::/29 maxlen: 29
2a0f:31c0::/29 maxlen: 29
2a12:ecc0:200::/48 maxlen: 48
2a13:8c86:150::/48 maxlen: 48
2a13:fc00::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:ff:e9:52:dc:27:e5:86:d0:02:ef:21:f6:c4:cb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 27 12:03:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1835e7f903d29f649ed765f652db88671b9c7bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:1f:c3:f5:97:23:69:db:ac:11:3c:4a:61:7f:
db:b1:0b:8d:dd:ca:30:28:b8:9e:5f:f7:5d:88:f8:
98:8a:2f:cb:7b:a5:7f:17:f2:48:86:75:36:11:77:
90:05:e6:02:8c:9e:a1:3c:c5:15:f0:1e:e0:40:8a:
96:19:3a:20:cb:11:7f:36:f6:eb:2e:d4:85:41:9f:
a0:72:b1:e3:84:af:f9:46:8b:76:66:7f:23:0f:fe:
75:1d:a7:cd:d7:21:1b:2f:b0:8e:c9:db:64:eb:8d:
dc:3e:45:14:5e:dc:43:5c:26:c0:48:30:fa:07:32:
ab:cb:4e:76:3d:e6:b4:c3:87:d7:99:6a:82:bf:d8:
f8:a8:61:1b:4b:1d:74:b4:0e:aa:70:53:c9:1a:93:
df:f7:52:b4:5a:9c:b2:46:e5:30:a8:3b:a3:fe:c4:
72:5d:bc:dc:cf:f7:1b:69:cb:c6:4d:81:47:91:94:
42:6c:bb:86:55:51:cb:5d:2d:53:ec:f4:96:53:99:
45:57:1e:5d:a5:f7:3e:70:ef:af:50:44:32:f7:18:
06:4f:fe:3f:0b:41:d3:5e:7f:8d:64:cf:6f:b6:e5:
d1:c5:15:64:30:1e:a2:41:16:a8:f0:0e:69:57:ab:
89:9f:fe:3a:de:bd:dd:7e:74:ea:bd:c5:12:1f:55:
e1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:35:E7:F9:03:D2:9F:64:9E:D7:65:F6:52:DB:88:67:1B:9C:7B:C2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GDXn-QPSn2Se12X2UtuIZxuce8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
93.190.246.0/23
IPv6:
2a0f:1e84:10::/48
2a0f:2ec0::/29
2a0f:31c0::/29
2a12:ecc0:200::/48
2a13:8c86:150::/48
2a13:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
95:84:4b:69:04:9c:8d:9d:07:d4:a7:4b:96:02:62:f4:88:43:
e5:45:cd:d8:7e:ba:70:5e:3d:6d:ff:50:dc:77:23:3e:5e:2f:
42:cc:a6:43:2c:7f:0d:cb:a3:5c:13:55:a4:de:97:0f:47:dc:
e6:34:c9:08:9d:8b:c8:1c:00:18:0e:99:61:cc:3f:f5:d0:c6:
c7:78:b4:bd:1f:68:f9:cd:4a:a8:1a:57:92:0c:5a:e6:21:26:
67:10:28:2b:5e:04:35:75:7f:3e:79:98:d2:fa:70:77:3e:b1:
ef:a4:da:b4:55:57:44:7b:66:86:12:4b:25:1f:6e:2f:5c:21:
a1:fb:c1:20:cc:4e:7f:7e:a0:37:14:73:df:f8:df:b1:9f:aa:
52:85:f5:49:8d:11:55:55:06:b6:c1:f2:9d:40:df:d5:3a:ee:
25:89:07:78:20:2b:dc:58:6c:ac:34:32:8c:e5:4a:b2:0d:29:
84:8c:a1:b4:06:18:62:3a:61:1e:c6:2b:f7:66:ab:84:d5:ad:
ca:ad:25:ad:8c:dd:93:f3:7a:87:0c:65:2b:53:5d:05:a2:63:
ed:34:44:8a:c1:7b:35:f7:73:27:21:f8:e6:8b:e6:83:c2:d5:
63:26:be:fd:b7:83:74:3a:0e:6b:67:45:1e:ec:cd:2b:be:c4:
55:06:8e:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:33:28 2025 by rpki-client