Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/gtRLDsqvuJIDLkxq0IK2cQWlj9Y.roa
File: gtRLDsqvuJIDLkxq0IK2cQWlj9Y.roa (raw, json)
Hash identifier: 0lP2bcPFyhn23HkTr2aP6QTpOLcGA7p5DtWRZwEpTZA=
Subject key identifier: 82:D4:4B:0E:CA:AF:B8:92:03:2E:4C:6A:D0:82:B6:71:05:A5:8F:D6
Certificate issuer: /CN=f2beed4df207c3609adfded80dddd9316f0a9b45
Certificate serial: 018CC2DB39183ACA5C1C26AE64B71D1682DE
Authority key identifier: F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/gtRLDsqvuJIDLkxq0IK2cQWlj9Y.roa
Signing time: Mon 01 Jan 2024 02:29:56 +0000
ROA not before: Mon 01 Jan 2024 02:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202619
IP address blocks: 176.109.176.0/21 maxlen: 32
176.109.184.0/21 maxlen: 32
176.109.224.0/20 maxlen: 32
193.192.37.0/24 maxlen: 32
193.192.36.0/24 maxlen: 32
94.158.32.0/21 maxlen: 32
94.158.40.0/21 maxlen: 32
185.33.140.0/23 maxlen: 32
185.33.142.0/23 maxlen: 32
194.246.94.0/23 maxlen: 32
176.109.240.0/20 maxlen: 32
194.246.92.0/23 maxlen: 32
2a03:a9c0::/30 maxlen: 128
2a0d:ec4::/30 maxlen: 128
2a0d:ec0::/30 maxlen: 128
2a03:a9c4::/30 maxlen: 128
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:39:18:3a:ca:5c:1c:26:ae:64:b7:1d:16:82:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2beed4df207c3609adfded80dddd9316f0a9b45
Validity
Not Before: Jan 1 02:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82d44b0ecaafb892032e4c6ad082b67105a58fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:ef:53:f9:bf:e2:c4:29:0c:04:44:bd:77:
ab:cb:8a:0b:af:af:c5:ab:00:0b:3d:8c:a5:e0:de:
6c:18:c8:25:3d:4b:32:78:29:46:26:c4:d7:e8:48:
e0:d9:9f:fd:1b:d7:eb:70:e3:b8:2a:15:06:49:fd:
c9:b4:27:6e:0e:b4:64:4a:4b:f1:c3:37:89:76:48:
15:5c:99:e9:78:49:60:65:93:a9:0e:78:e1:92:91:
8b:99:4e:98:26:cd:b9:72:6c:ac:0e:43:53:84:57:
b9:18:0a:77:87:cb:92:3a:cc:ec:fc:1f:5f:cd:17:
a8:b6:e0:b7:c1:6c:9a:3a:d2:42:89:40:85:73:65:
ef:0e:25:29:63:81:0c:65:c4:33:9e:ae:93:89:23:
40:d6:3a:0c:ca:45:89:5c:db:c6:65:e0:5d:16:28:
97:8a:93:5f:4d:c2:b9:36:7a:4f:c5:10:06:88:e5:
1f:49:ce:c0:9b:f1:d8:20:31:e4:75:58:7d:5e:9b:
b1:ee:c1:62:d9:8d:5b:48:1a:a5:d8:70:93:0c:33:
42:00:e7:30:64:06:77:5c:7a:6e:c2:9f:e9:24:03:
a3:b5:62:b4:f5:68:a1:d6:78:ed:f2:0b:73:a7:d1:
20:d6:bf:ca:89:6a:0f:82:6e:27:98:86:66:0f:ae:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D4:4B:0E:CA:AF:B8:92:03:2E:4C:6A:D0:82:B6:71:05:A5:8F:D6
X509v3 Authority Key Identifier:
keyid:F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/gtRLDsqvuJIDLkxq0IK2cQWlj9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.32.0/20
176.109.176.0/20
176.109.224.0/19
185.33.140.0/22
193.192.36.0/23
194.246.92.0/22
IPv6:
2a03:a9c0::/29
2a0d:ec0::/29
Signature Algorithm: sha256WithRSAEncryption
99:98:35:fd:eb:30:ca:91:6d:b9:69:d0:98:ed:8b:23:35:7c:
fd:39:ff:e6:e1:7e:9f:82:73:8e:85:60:0e:3e:33:aa:55:ba:
84:6b:10:9f:61:44:48:22:64:a6:7d:b0:34:fb:5b:a0:a2:2f:
0e:29:b8:f2:fa:9d:a0:25:df:cb:f7:4c:8d:d8:2a:45:06:65:
ff:15:b0:52:d9:52:60:84:b5:6d:2e:2c:f1:10:2d:ca:73:6e:
6c:ce:28:71:6e:97:64:9b:ae:70:3d:b1:87:dc:ab:4d:f2:20:
73:fc:fa:c5:f8:75:79:c8:aa:5c:6f:e4:8d:08:7c:db:cb:d1:
92:d8:9e:0e:95:71:9c:f1:2d:a0:97:b6:95:25:db:43:9c:41:
d7:ad:9b:9f:14:33:dc:b0:2a:aa:14:be:73:8b:06:dc:d4:15:
88:3a:86:c0:2e:2a:dd:33:ef:5a:ff:5b:af:5c:fe:61:71:d9:
5b:cd:e1:31:43:b3:36:29:74:46:5c:a2:88:fa:a4:57:84:0a:
4d:8c:3d:d0:13:b3:78:30:34:b7:ee:38:5e:f7:5e:39:2e:99:
d0:1f:ef:8d:6b:e8:c7:3d:b0:ec:53:8a:62:e6:ea:cd:9e:d2:
b8:15:0a:7e:bc:78:1a:52:a8:61:86:58:f3:c2:c1:36:e8:e9:
00:14:4b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:05:33 2025 by rpki-client