Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/GGE6eu-bBMaQjVepC_SDe4m3gzg.roa
File: GGE6eu-bBMaQjVepC_SDe4m3gzg.roa (raw, json)
Hash identifier: G/rP+U++XwwTThzo8Bsne1JjHXb/kSsKGxZdngYhVUI=
Subject key identifier: 18:61:3A:7A:EF:9B:04:C6:90:8D:57:A9:0B:F4:83:7B:89:B7:83:38
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01946A353CAC826D0401D02246DBF2675651
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/GGE6eu-bBMaQjVepC_SDe4m3gzg.roa
Signing time: Wed 15 Jan 2025 13:44:21 +0000
ROA not before: Wed 15 Jan 2025 13:44:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215727
IP address blocks: 45.136.0.0/24 maxlen: 32
45.136.1.0/24 maxlen: 32
45.136.2.0/24 maxlen: 32
45.136.3.0/24 maxlen: 32
128.0.119.0/24 maxlen: 32
185.117.20.0/24 maxlen: 32
185.117.21.0/24 maxlen: 32
185.117.22.0/24 maxlen: 32
185.117.23.0/24 maxlen: 32
185.211.48.0/24 maxlen: 32
185.211.49.0/24 maxlen: 32
185.211.50.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 15 Jan 2025 17:57:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:35:3c:ac:82:6d:04:01:d0:22:46:db:f2:67:56:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 15 13:44:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18613a7aef9b04c6908d57a90bf4837b89b78338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:eb:6f:59:48:3d:96:aa:b1:b2:9f:90:43:
e1:bd:07:e5:1b:44:55:f4:dd:09:90:d4:64:90:9d:
04:2f:33:51:48:89:fd:19:06:b6:43:86:9a:26:b6:
ee:88:61:42:54:5a:90:57:b6:96:59:2c:45:86:46:
4f:98:4e:88:ab:93:82:9e:5c:f4:d9:c9:7d:6b:e0:
2d:ff:e3:d3:f3:b9:a7:be:2f:63:7f:fb:93:c8:63:
f6:76:be:5c:b2:a6:a1:33:6a:fe:8a:aa:cc:76:d5:
9f:a0:fd:9d:42:a5:c6:d8:77:08:b7:6e:57:88:bb:
25:65:b5:3d:41:52:44:6b:3c:d7:9e:09:0f:ba:9d:
0a:9c:b4:7d:b4:77:3e:cc:24:68:25:40:b4:59:20:
4a:3e:7d:8a:f9:98:e7:fe:e4:39:05:31:18:46:43:
65:7c:bf:d8:70:5b:6c:22:b2:dd:d2:e2:4d:34:cc:
b0:15:f1:11:4a:ed:43:45:e2:8b:bb:ba:ab:fc:35:
41:e7:6d:85:9b:25:e8:dd:f7:28:db:a1:a4:ef:1f:
59:2a:0e:e8:b6:72:88:13:bd:1b:b1:a3:4e:10:35:
cf:be:c2:11:c1:f4:89:57:ad:c5:50:a2:5f:38:cd:
16:2d:e3:49:f7:04:68:ce:58:91:be:f2:0a:bd:48:
8f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:61:3A:7A:EF:9B:04:C6:90:8D:57:A9:0B:F4:83:7B:89:B7:83:38
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/GGE6eu-bBMaQjVepC_SDe4m3gzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/22
128.0.119.0/24
185.117.20.0/22
185.211.48.0-185.211.50.255
Signature Algorithm: sha256WithRSAEncryption
83:6e:cc:6f:1b:b8:d0:9f:50:75:ae:7b:3c:c9:13:37:89:19:
f3:c2:24:cf:1f:12:54:d1:f8:a3:fb:25:87:69:74:3f:87:70:
99:5a:5d:ba:3c:17:32:71:2a:6f:3d:81:c4:55:44:2d:11:bd:
57:74:43:48:ed:b5:3b:e3:00:8d:e8:1a:55:2d:a7:49:82:99:
1a:5c:64:2e:ab:67:49:54:5f:45:6b:7c:b9:4d:f3:ac:9c:e0:
0b:e2:f4:56:77:bf:bb:50:9f:07:42:e8:e5:a9:98:f6:c5:b8:
1a:fe:ad:67:d7:1d:2b:2f:cb:06:85:86:f2:57:55:d9:7e:94:
ff:20:4b:d4:9a:10:52:89:3f:25:c0:c1:eb:5a:d1:56:6c:fb:
da:53:ef:85:af:89:18:97:32:d5:fc:e5:a4:4e:25:d6:75:6b:
ac:13:14:7b:ea:50:24:e8:02:5b:8b:50:22:9b:2f:a4:34:88:
f9:81:14:61:5c:63:2d:f4:4e:50:4a:1f:18:b5:47:57:bf:ae:
19:e5:b0:db:a1:b0:e0:e7:c1:5d:9b:0c:be:27:59:43:89:5b:
d5:72:ca:9d:f7:e1:a4:7a:d0:b7:3c:7a:43:fc:e6:e6:31:3c:
0d:cd:8c:2e:2a:9b:05:89:81:aa:fa:1f:6c:4b:9d:7e:01:c2:
89:10:e0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:40 2025 by rpki-client