Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/gsJFM9dE34muphhhSvE3bY-cpDM.roa
File: gsJFM9dE34muphhhSvE3bY-cpDM.roa (raw, json)
Hash identifier: MoUklaFkMZkIrl1KPkXoIBOTc+Nv/zOyMg7WBqAezWA=
Subject key identifier: 82:C2:45:33:D7:44:DF:89:AE:A6:18:61:4A:F1:37:6D:8F:9C:A4:33
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 0193F28792B216EF2A26C62B0DDD1D50D0EC
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/gsJFM9dE34muphhhSvE3bY-cpDM.roa
Signing time: Mon 23 Dec 2024 07:59:51 +0000
ROA not before: Mon 23 Dec 2024 07:59:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.39.32.0/20 maxlen: 20
193.193.96.0/20 maxlen: 20
212.43.160.0/19 maxlen: 19
213.147.224.0/19 maxlen: 19
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f2:87:92:b2:16:ef:2a:26:c6:2b:0d:dd:1d:50:d0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Dec 23 07:59:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82c24533d744df89aea618614af1376d8f9ca433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:d8:46:8d:d8:18:d6:5f:29:02:71:64:34:
5f:8e:b5:13:6d:65:ad:05:9f:04:bd:e5:43:52:74:
77:6c:f4:01:2f:ff:63:5f:01:0f:c8:91:c7:31:cd:
55:a2:cd:f7:0c:37:df:4e:11:48:cd:fa:18:e3:1e:
78:cb:d0:33:01:d2:de:d8:92:ac:52:1c:0c:aa:7c:
4c:82:c4:0a:65:f5:69:d3:d7:98:74:16:1e:cd:ed:
ca:73:b8:96:d4:25:ba:20:62:a5:cc:df:9b:5a:6a:
aa:8f:55:f4:7c:f3:5a:2a:1a:50:e9:5b:be:ae:3c:
8e:59:99:63:b7:3d:c8:5f:49:f0:53:72:6f:54:d5:
9b:98:8f:a1:4e:97:79:45:65:bf:b9:84:c6:e6:0a:
f5:f6:25:a1:23:96:9d:d4:4b:86:c1:e1:35:64:ff:
8f:2b:72:cd:38:21:66:4e:68:ff:7d:10:b8:40:0a:
e1:a8:29:77:d3:df:88:5d:3b:39:68:53:58:86:b1:
a7:2c:15:15:fc:a7:ad:3f:44:13:9c:b9:ba:b4:39:
85:5b:97:c3:05:50:96:7c:a7:4b:7a:55:51:7a:01:
fb:6d:41:ed:8e:7a:da:de:76:9d:9e:30:7f:8f:9a:
ba:50:81:1e:8a:f9:2e:2d:1d:3c:bd:41:72:37:e0:
30:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C2:45:33:D7:44:DF:89:AE:A6:18:61:4A:F1:37:6D:8F:9C:A4:33
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/gsJFM9dE34muphhhSvE3bY-cpDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.32.0/20
193.193.96.0/20
212.43.160.0/19
213.147.224.0/19
Signature Algorithm: sha256WithRSAEncryption
58:9d:6e:df:7c:9b:2a:11:24:51:dd:6d:61:3b:d8:24:d6:ed:
cd:23:2b:0b:c2:14:5c:8b:6d:70:c7:2f:0b:9a:bd:9c:d1:bf:
62:b0:72:6c:ff:74:f8:ad:96:fb:39:d9:3e:53:14:11:64:4e:
6e:0c:70:9f:ca:d1:fb:0b:84:09:ce:62:26:6d:74:67:22:fe:
4e:08:17:34:c7:70:9c:80:90:84:ab:72:98:fb:4c:d6:de:ee:
cf:dd:ea:8c:07:43:a2:c4:7c:a0:d9:39:0c:f6:ae:d7:ff:da:
a9:7a:23:84:ea:25:35:df:51:2b:3a:17:7b:73:fe:49:82:39:
db:77:b7:87:6c:85:1a:23:50:9c:63:28:73:c0:7b:8f:44:80:
32:1f:58:82:c8:cf:f9:32:8c:10:ef:d4:be:12:10:27:6b:65:
b1:5b:c8:4b:ee:21:e9:62:68:a2:3f:a8:cc:c6:b3:a3:86:62:
d2:39:d4:cc:05:11:d3:fe:cf:eb:63:e0:03:b5:b8:08:e7:cf:
c1:b5:46:05:03:44:a0:22:7f:50:86:58:74:0a:f6:f2:18:c4:
62:32:39:df:27:d4:b0:90:e5:77:50:9b:da:73:5b:3b:84:ff:
34:97:33:b7:47:f3:4b:52:b5:f6:a6:ad:45:f0:44:d3:98:cb:
32:d2:06:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:36:55 2025 by rpki-client