Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/gGIgTPma96D8e7BgwPD1Mp_6yuw.roa
File: gGIgTPma96D8e7BgwPD1Mp_6yuw.roa (raw, json)
Hash identifier: kN0m8+y8/N8BA6a47+56priINIlLP3Q5UIvwr2mxVSk=
Subject key identifier: 80:62:20:4C:F9:9A:F7:A0:FC:7B:B0:60:C0:F0:F5:32:9F:FA:CA:EC
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 0191312B91E8457D8B936076C78C7B90CE90
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/gGIgTPma96D8e7BgwPD1Mp_6yuw.roa
Signing time: Thu 08 Aug 2024 08:47:04 +0000
ROA not before: Thu 08 Aug 2024 08:47:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.200.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 06:09:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:31:2b:91:e8:45:7d:8b:93:60:76:c7:8c:7b:90:ce:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Aug 8 08:47:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8062204cf99af7a0fc7bb060c0f0f5329ffacaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:24:6c:a7:59:6d:19:63:09:1d:3f:ae:7d:e6:
9f:8f:51:9d:76:9b:76:5a:7b:85:c9:55:b9:2d:d8:
22:c6:bb:bb:ad:4c:f3:f3:27:dd:77:8b:57:83:ea:
ae:0b:16:f4:40:ca:6d:21:fb:97:82:ac:4c:25:87:
8c:f3:c4:5f:3d:47:63:91:fe:e4:28:b2:57:88:b8:
f2:92:0b:e2:fe:ea:e4:f4:10:36:cc:0c:da:cc:7f:
f2:10:39:7b:13:57:85:fe:90:81:f4:7f:ea:af:f2:
15:76:8b:ea:ea:5d:b3:1a:e6:9a:3a:d9:30:93:67:
c5:1d:da:af:68:f2:02:8c:2b:5d:65:d3:8a:8b:c2:
58:e5:ab:30:16:fc:cb:53:48:fe:ee:2a:b5:c3:cc:
0f:37:9e:31:5e:b1:cd:db:7a:2c:91:06:1b:3d:9c:
ff:17:f0:ae:61:80:23:28:75:11:7d:69:66:f6:40:
e9:9f:22:32:1d:ef:fe:36:ab:4f:7f:41:2e:13:81:
f6:49:84:2c:be:e0:23:74:a9:22:12:fc:e7:6a:17:
16:1b:35:75:e6:d7:ab:c3:a4:c8:29:59:3a:3a:ec:
6b:62:23:de:57:34:a6:4a:94:fe:31:c5:b3:46:e1:
94:b9:9d:99:db:4c:8c:a2:83:e0:81:34:a3:19:7e:
67:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:62:20:4C:F9:9A:F7:A0:FC:7B:B0:60:C0:F0:F5:32:9F:FA:CA:EC
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/gGIgTPma96D8e7BgwPD1Mp_6yuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.253.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:db:3d:12:9d:e8:2c:0e:2b:6f:97:79:33:b7:14:24:c3:e8:
5a:a6:55:24:98:e7:e3:69:cd:c7:68:fa:0e:df:9b:86:0a:d0:
68:0e:5c:81:2c:d3:49:86:88:aa:64:4e:30:cb:79:0e:33:eb:
a2:b4:d0:1b:e0:d3:6b:71:95:96:cf:01:c0:dd:03:28:2c:2f:
b4:83:9b:fc:1f:66:5a:42:4e:00:ee:a2:c0:05:d2:0d:4a:6a:
44:76:17:ad:b8:dc:1a:e0:68:93:2d:fb:4c:1f:4c:a9:02:91:
d7:74:a3:b8:1f:5d:e1:61:e5:2e:55:fa:c4:97:f1:fd:de:1d:
61:03:96:6d:b5:e1:2a:83:49:9f:47:f7:70:7e:3a:fc:15:04:
81:11:d1:c6:e1:bd:45:46:03:b3:89:d4:2d:e3:34:32:ce:2d:
2f:3a:8c:d3:b7:22:45:4b:46:00:6f:10:d3:3c:3b:e0:a5:bf:
53:b9:66:cc:47:7c:ac:c5:dd:71:84:97:1d:12:a2:bc:1f:15:
c4:69:11:1d:b5:df:99:4f:89:e6:11:07:7e:a2:61:9a:9f:e8:
01:e5:27:fe:3b:48:22:75:19:ad:59:e7:3d:b1:17:f9:1c:38:
e4:a4:64:bc:e3:06:71:2a:70:35:18:43:5f:c3:76:b6:2a:08:
a1:d0:c0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:41:46 2025 by rpki-client