Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GpJdcT-fE8suhUQ7zRCfefsRghM.roa
File: GpJdcT-fE8suhUQ7zRCfefsRghM.roa (raw, json)
Hash identifier: 4AA9mIAaNQSRsGM6UXoREsQNelUTOJ9g5WM4SGl4Krs=
Subject key identifier: 1A:92:5D:71:3F:9F:13:CB:2E:85:44:3B:CD:10:9F:79:FB:11:82:13
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01937CA380A8140046AD8CFC91A9EEAFCFAA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GpJdcT-fE8suhUQ7zRCfefsRghM.roa
Signing time: Sat 30 Nov 2024 10:35:10 +0000
ROA not before: Sat 30 Nov 2024 10:35:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.152.198.0/24 maxlen: 24
103.114.40.0/24 maxlen: 24
2a0e:1a84::/32 maxlen: 32
2a0e:f600:5f::/48 maxlen: 48
2a0f:1e80:100::/48 maxlen: 48
2a0f:1e80:1986::/48 maxlen: 48
2a0f:3d80:bac::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a0f:e6c6:5532::/48 maxlen: 48
2a13:2b40::/29 maxlen: 32
Validation: Failed, certificate revoked on Thu 19 Dec 2024 08:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7c:a3:80:a8:14:00:46:ad:8c:fc:91:a9:ee:af:cf:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 30 10:35:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a925d713f9f13cb2e85443bcd109f79fb118213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1e:ee:bc:22:90:82:32:3c:5a:3d:46:e7:a0:
8d:ca:87:13:7d:7b:98:d3:a5:0b:5c:9d:ec:a5:29:
a1:46:c4:cc:51:c3:65:91:39:da:12:5b:32:d1:d4:
92:53:84:93:91:59:d5:2a:0d:77:91:20:01:ca:72:
8f:98:85:18:be:0e:ea:7f:1f:f2:71:9c:5c:6c:85:
57:e1:5f:a7:5a:20:d5:e9:ad:67:98:fb:9e:09:f5:
fe:86:1a:c5:ca:ac:17:1e:d2:50:7f:f5:1f:a5:9b:
b5:94:4b:83:9a:cd:98:99:62:07:01:e1:ae:96:67:
16:bd:06:2c:74:c3:3f:ca:58:be:76:9f:99:0c:39:
66:75:6f:26:11:6e:2f:6a:7e:ed:cf:fe:00:96:1b:
a2:e1:27:60:64:d7:a6:fc:e7:45:26:b4:25:ef:3e:
da:da:30:3f:9b:33:b6:b6:52:dc:c4:9b:54:80:9a:
d9:a0:60:57:96:1f:50:da:bc:9f:f6:d1:69:9c:59:
4b:42:e4:4c:70:8a:00:14:ea:10:4c:07:61:28:6f:
1c:a6:ca:74:3d:b3:74:22:6d:e0:09:2c:86:62:ce:
96:5e:37:a6:00:f9:95:a5:4d:65:7b:95:81:fc:b2:
c1:26:5d:75:1d:6a:f8:f8:61:b1:93:65:c4:0a:16:
a4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:92:5D:71:3F:9F:13:CB:2E:85:44:3B:CD:10:9F:79:FB:11:82:13
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GpJdcT-fE8suhUQ7zRCfefsRghM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.198.0/24
103.114.40.0/24
IPv6:
2a0e:1a84::/32
2a0e:f600:5f::/48
2a0f:1e80:100::/48
2a0f:1e80:1986::/48
2a0f:3d80:bac::/48
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a0f:e6c6:5532::/48
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
7e:be:e4:1c:5d:c3:1e:52:c2:a6:72:0f:65:eb:f5:fb:3a:d4:
6f:bf:a4:24:f9:0e:b9:3c:a8:52:56:0c:76:87:92:10:29:37:
48:bd:b0:f0:85:0f:cd:d5:f5:88:38:0f:99:fc:97:37:79:b3:
a5:a7:19:75:17:c1:c0:56:7f:96:0f:3c:7b:8d:64:49:9c:2b:
94:62:61:3a:0d:1b:97:03:4b:63:50:9b:27:00:59:7c:2c:13:
c6:af:e5:58:df:66:63:4d:0a:60:70:e2:ef:23:b9:8f:66:1d:
e6:bd:53:05:33:1f:78:c7:e6:f7:72:d7:a0:91:14:8b:a4:d1:
a4:8f:02:6d:df:93:4b:92:83:6e:cb:80:59:6e:14:db:75:38:
14:a9:2d:ae:39:c9:ad:a3:06:ff:10:84:a3:ba:4b:13:00:0e:
26:76:cd:02:b8:a3:20:57:0a:cc:38:c8:db:5b:bd:19:78:3c:
e4:92:71:a1:3d:23:93:0d:ee:c0:84:86:38:74:5c:7b:cd:97:
d2:8b:5b:8e:bb:c7:63:1f:0c:10:a2:a3:21:6a:49:54:ec:31:
21:11:f0:d2:f5:88:1e:bc:a0:58:4c:dd:a1:8e:3d:86:2d:82:
1b:59:02:b5:c1:0e:6d:e6:65:fe:b2:69:a6:2e:70:ce:a5:45:
d5:46:35:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:00:03 2025 by rpki-client