Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gpBUPA6P1sE8MGhdUtI7d2khD2o.roa
File: gpBUPA6P1sE8MGhdUtI7d2khD2o.roa (raw, json)
Hash identifier: irugFMpofMZMKsWhUuYP//maX/8BhtsIN0btsfYBhh4=
Subject key identifier: 82:90:54:3C:0E:8F:D6:C1:3C:30:68:5D:52:D2:3B:77:69:21:0F:6A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0192FDB1CF6B3ABFB8CD0FE79DE575D735B9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gpBUPA6P1sE8MGhdUtI7d2khD2o.roa
Signing time: Tue 05 Nov 2024 18:59:01 +0000
ROA not before: Tue 05 Nov 2024 18:59:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214927
IP address blocks: 45.137.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 10:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fd:b1:cf:6b:3a:bf:b8:cd:0f:e7:9d:e5:75:d7:35:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 5 18:59:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8290543c0e8fd6c13c30685d52d23b7769210f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f1:72:e3:cf:14:12:55:ac:9f:a1:be:4b:08:
8a:7e:d5:08:2e:ed:92:36:03:d8:86:ae:2d:0c:1e:
38:06:3d:17:6a:6c:ac:b7:ee:7e:d5:59:1a:5b:08:
81:39:0c:91:dd:5a:47:56:f3:00:83:32:5d:6a:83:
c8:91:7d:f8:2d:10:c6:70:b4:30:27:42:2e:ae:45:
84:59:5c:c4:a6:e9:f1:29:b6:4d:8e:d3:b7:58:77:
d9:60:32:e7:0d:3d:1b:92:c2:4f:88:5b:a8:9b:56:
b1:57:f6:26:5a:dc:f2:de:62:75:79:2a:0a:f5:65:
49:94:e7:99:7b:f6:3b:3b:13:0d:c4:08:e3:42:f6:
59:0e:3c:a5:6f:a8:61:0b:cc:1b:bf:42:64:7a:04:
27:92:0f:61:2e:dd:5c:1b:b6:a3:83:8e:d8:86:9c:
09:d8:17:80:01:c0:3c:87:70:fc:1f:77:38:50:e7:
4a:44:e1:3c:ed:8a:ee:30:21:3d:79:71:3d:13:46:
1c:24:e0:e1:d4:1f:30:f7:9c:21:b3:12:d6:c4:00:
c2:08:13:15:76:cf:c5:2c:b2:44:bb:b8:ba:be:14:
f1:be:e0:f0:17:d0:3a:00:59:9c:64:7a:a3:c1:a3:
ba:30:3a:bd:3a:c3:22:a5:8d:7f:9d:0c:f3:ec:0d:
d0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:90:54:3C:0E:8F:D6:C1:3C:30:68:5D:52:D2:3B:77:69:21:0F:6A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gpBUPA6P1sE8MGhdUtI7d2khD2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.81.0/24
Signature Algorithm: sha256WithRSAEncryption
56:9d:58:5d:64:ad:db:41:5a:5d:a8:96:58:88:1c:a2:6d:5a:
04:84:ac:c9:d1:2e:3b:55:76:18:d5:08:74:b3:51:1c:1c:25:
ad:d8:e7:6f:01:9e:1e:26:ae:0d:0c:22:bb:f8:02:73:03:22:
91:58:e4:61:da:73:8c:87:96:8b:0c:33:69:d6:11:c6:4a:51:
af:05:54:84:89:47:29:25:d9:cc:0f:ba:58:c2:89:c6:d1:c8:
2f:b5:93:40:67:ee:9f:99:f5:e9:77:ec:a5:80:02:82:ea:34:
9f:cf:81:72:2d:5d:e4:62:c0:49:ad:4c:38:3d:31:e0:f4:ef:
4f:ed:80:24:79:00:99:40:f6:a0:af:fd:65:9e:ff:8a:25:41:
50:63:76:6a:a7:b9:9a:6f:08:60:1c:dd:08:b9:05:c6:fc:51:
88:25:4b:5c:f4:fb:a3:89:49:da:00:f4:cc:f6:d8:ef:8b:70:
e9:54:4d:50:97:94:e2:0e:37:54:d8:6f:d3:b9:22:09:5e:01:
f9:59:89:fa:2a:ef:1e:e3:1f:b3:7f:68:b4:16:af:48:f0:43:
c6:34:07:7f:87:26:14:27:a5:80:14:f6:12:c3:01:fe:0d:bb:
a8:d5:8e:23:02:b2:1e:49:ad:e5:42:25:a1:02:6e:22:03:df:
f4:a0:b0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:08 2025 by rpki-client