Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/GWQm9s5u-zamju13ktUdOKN1W10.roa
File: GWQm9s5u-zamju13ktUdOKN1W10.roa (raw, json)
Hash identifier: q5XfYenOrzYrKI6sQLxvq8d7J70gkoW0MYSC22AGoVE=
Subject key identifier: 19:64:26:F6:CE:6E:FB:36:A6:8E:ED:77:92:D5:1D:38:A3:75:5B:5D
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194FD4F570AF28066D428A45471E21D3FDD
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/GWQm9s5u-zamju13ktUdOKN1W10.roa
Signing time: Thu 13 Feb 2025 03:17:02 +0000
ROA not before: Thu 13 Feb 2025 03:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 128.0.118.0/24 maxlen: 32
185.205.68.0/24 maxlen: 32
Validation: Failed, certificate revoked on Fri 14 Feb 2025 10:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fd:4f:57:0a:f2:80:66:d4:28:a4:54:71:e2:1d:3f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 13 03:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=196426f6ce6efb36a68eed7792d51d38a3755b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0e:c4:d5:14:2b:e4:fa:ba:10:43:79:04:3e:
72:fd:18:c6:62:96:20:99:ca:c4:27:85:63:64:6f:
07:59:17:b0:b6:35:7e:66:38:3a:68:7c:ce:ea:d8:
4e:d2:64:76:68:99:b6:90:66:91:30:06:e0:98:c4:
eb:4f:4b:92:24:1b:a4:e0:86:8d:08:13:ef:7e:28:
44:89:82:5a:65:e9:70:32:f6:26:c5:95:f7:be:1d:
73:de:e9:fb:69:3c:66:94:7f:cb:b1:d4:d9:78:f9:
3a:83:70:fc:b4:d4:75:0b:66:07:d1:df:12:0c:b8:
2d:cd:e2:2b:c5:51:e9:91:53:f4:88:5b:30:26:92:
7a:9c:1f:9b:b2:ca:05:bb:ef:15:e8:4e:31:75:a3:
47:a6:95:6d:ff:72:42:2d:42:78:58:1a:26:27:dd:
3c:f0:fb:5d:6b:67:97:ac:99:b0:b7:39:b5:41:6b:
b2:6e:4f:16:a5:fe:64:97:96:11:81:64:4d:de:f2:
a5:e9:95:2e:ba:1b:38:32:af:f0:19:e4:28:ea:87:
91:19:a3:03:7f:39:6c:6a:00:62:9d:ca:08:e6:d0:
55:54:f3:41:4a:ce:07:68:95:a3:76:65:f8:39:83:
cd:20:a3:25:b0:87:d2:91:83:fb:9d:f3:4c:77:c5:
72:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:64:26:F6:CE:6E:FB:36:A6:8E:ED:77:92:D5:1D:38:A3:75:5B:5D
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/GWQm9s5u-zamju13ktUdOKN1W10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.118.0/24
185.205.68.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:fa:6a:dd:b1:4a:a8:ba:59:6d:33:f4:fd:54:02:79:d3:9e:
5a:4a:bc:48:9f:65:f1:07:b9:34:27:35:93:9d:1a:fb:24:50:
3a:bb:02:81:21:41:aa:0b:ac:69:c2:6e:73:48:6b:a4:e3:ba:
22:84:a4:f8:17:97:54:f9:a3:e3:0c:4e:2f:c0:48:bc:48:fd:
62:54:91:0a:1f:15:a4:06:5b:a9:ad:22:82:a2:57:78:60:42:
b8:ad:81:2a:a8:bf:b0:d7:2f:dd:4d:bc:39:e5:8d:9d:15:bb:
07:a9:33:25:e4:64:b0:15:41:7a:83:ea:0e:5c:62:cf:b1:1a:
a5:34:ce:91:85:d2:90:82:75:a5:fd:d5:82:be:ee:ad:cb:69:
5f:c0:4e:b8:af:74:d9:8a:c1:48:de:66:35:2e:2b:1e:86:b8:
ff:02:a0:26:f5:a5:c5:e8:0a:06:42:b6:6f:36:92:d3:7f:71:
50:ad:d7:a8:4e:88:7e:91:d7:3e:61:e4:04:f3:83:73:10:5e:
39:1e:e6:a7:9a:d5:12:8c:ca:92:bc:f0:35:1f:37:4b:85:a2:
a5:f3:23:0f:1c:55:c6:b0:7c:7b:c2:7d:c0:96:76:df:6c:6f:
60:a7:da:93:da:b3:d7:55:34:f7:26:76:47:2f:1b:a1:78:e7:
2a:79:3d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:35:45 2025 by rpki-client