Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/gl9_kBlrXwpaSJuU7RUGgFpsPnA.roa
File: gl9_kBlrXwpaSJuU7RUGgFpsPnA.roa (raw, json)
Hash identifier: U4KgBFHMjFNvJNLna7kZn+S6c2WbQfLhzTL7/b9WJsg=
Subject key identifier: 82:5F:7F:90:19:6B:5F:0A:5A:48:9B:94:ED:15:06:80:5A:6C:3E:70
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 0191E002169E041CF5146A5023FD217B91E3
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/gl9_kBlrXwpaSJuU7RUGgFpsPnA.roa
Signing time: Wed 11 Sep 2024 07:35:18 +0000
ROA not before: Wed 11 Sep 2024 07:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207083
IP address blocks: 193.142.146.0/24 maxlen: 24
2a0f:ca80::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e0:02:16:9e:04:1c:f5:14:6a:50:23:fd:21:7b:91:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: Sep 11 07:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=825f7f90196b5f0a5a489b94ed1506805a6c3e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a9:d3:c2:96:01:6d:a5:05:0f:cd:55:7e:29:
b8:a7:66:f4:f2:ac:40:35:fd:df:61:dd:22:d5:e3:
57:3b:47:2a:19:25:50:e6:51:bf:e9:60:02:2f:dd:
7b:77:90:b0:45:a8:12:d2:16:ea:b0:ee:bf:af:08:
b8:a1:fe:27:ae:a4:73:3a:b2:b6:fd:09:99:39:c3:
08:3f:6e:21:9a:58:16:86:8a:dd:d2:fd:11:fe:95:
ff:0b:38:58:d9:83:12:78:9a:e6:90:53:59:53:14:
ca:01:14:af:05:e2:28:48:73:2f:8c:50:14:e7:30:
83:c9:fd:8d:3a:7f:31:47:7b:b0:32:4d:65:61:4a:
d8:2c:56:77:7c:43:02:e5:61:ca:36:90:c5:93:6a:
72:ac:a5:79:7a:e4:04:ba:11:75:48:38:40:23:1f:
13:ed:5c:74:2e:21:fb:d2:f1:56:3c:ba:8d:8a:cb:
a6:ad:01:da:5b:11:4e:39:28:99:83:11:8d:af:a0:
41:10:b9:27:02:22:36:17:b9:0c:9d:61:dd:5e:8e:
27:31:54:c7:d0:d2:86:48:2e:c0:c3:11:ff:4f:99:
a4:6c:e0:e0:d1:d8:01:c5:2a:a3:79:b0:48:e3:94:
b9:b0:9a:1c:5a:1f:07:63:92:c6:78:55:c0:d8:25:
88:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5F:7F:90:19:6B:5F:0A:5A:48:9B:94:ED:15:06:80:5A:6C:3E:70
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/gl9_kBlrXwpaSJuU7RUGgFpsPnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.146.0/24
IPv6:
2a0f:ca80::/48
Signature Algorithm: sha256WithRSAEncryption
48:ac:01:b1:7c:a5:a1:29:0c:3c:7e:96:a0:aa:57:7a:2b:71:
75:4e:e1:74:87:36:db:2b:4b:88:24:84:80:01:c5:48:a5:34:
b8:83:a8:f5:0e:d1:e7:35:66:85:ee:11:3b:e3:5b:89:c6:0b:
46:35:96:f5:8a:43:2e:99:f1:29:d7:a4:bc:ac:ea:6c:87:95:
54:90:0f:12:4e:6b:9a:12:1d:08:b1:22:47:24:b9:2f:49:73:
00:cb:12:e2:46:3d:f3:0b:9f:8e:22:e8:3e:b0:0a:05:44:65:
26:18:71:8a:30:4d:a8:2c:31:9f:2e:2f:f8:a0:aa:1d:ce:dd:
cb:9d:91:e6:e6:fc:de:3d:f7:74:22:ed:34:b4:bc:8e:0e:a3:
35:6a:2f:c5:20:a4:c0:b4:64:a1:8c:2f:21:43:38:47:b4:14:
b7:0a:17:39:8e:fe:47:21:a3:74:e6:a2:72:a4:c6:d5:52:b4:
55:f4:16:a5:97:87:7f:22:04:48:ac:04:d3:9e:45:dd:df:66:
0c:5f:3c:16:78:02:a8:17:81:c4:66:c6:bc:3f:8b:a7:94:ea:
e9:2c:2c:31:bf:ca:bb:e3:ba:8c:37:5c:33:9f:8e:5c:69:d3:
ab:1e:56:51:95:d1:5d:45:7e:28:7a:02:e3:1b:58:e2:b7:8f:
dd:75:23:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:06 2025 by rpki-client