Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/GqvQhwMa2oREHpLPw5lH76FbkzM.roa
File: GqvQhwMa2oREHpLPw5lH76FbkzM.roa (raw, json)
Hash identifier: gze+YQGipOL9WkAu9Z6wCsq3YQU4Hsg49KWzNK7sPzk=
Subject key identifier: 1A:AB:D0:87:03:1A:DA:84:44:1E:92:CF:C3:99:47:EF:A1:5B:93:33
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01957FE26B58B884D0A9136F9FCB2E2AD4F2
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/GqvQhwMa2oREHpLPw5lH76FbkzM.roa
Signing time: Mon 10 Mar 2025 11:48:19 +0000
ROA not before: Mon 10 Mar 2025 11:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Mar 2025 05:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:e2:6b:58:b8:84:d0:a9:13:6f:9f:cb:2e:2a:d4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Mar 10 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1aabd087031ada84441e92cfc39947efa15b9333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:95:c1:44:c3:c0:1d:d9:f0:56:96:3e:66:72:
f6:7a:18:64:5e:e6:10:46:ab:f7:47:f5:62:7d:f0:
a6:b6:34:dc:ad:c5:58:a1:a7:1a:c7:81:57:d8:9a:
6d:ff:86:e0:1d:7a:9c:30:0d:b0:88:af:d2:b8:53:
6d:91:8b:06:99:5c:a2:71:c4:7c:9b:2d:89:5b:7a:
11:7f:25:ee:01:99:18:6e:ad:a6:d3:e8:5d:56:1f:
3e:3d:d7:7e:aa:c0:6e:0e:71:ad:ff:a3:03:99:83:
c6:4e:2d:ea:d0:81:8c:3a:9a:08:95:e4:1a:63:48:
d0:59:26:5d:5f:31:39:46:57:4c:72:dd:5b:da:93:
59:76:a8:92:03:b4:83:cc:76:e2:3d:2b:9e:c8:c8:
fc:fc:f1:c5:0d:9f:14:39:8d:80:de:78:aa:c7:1d:
eb:2c:93:c5:31:0c:3d:70:c5:0d:43:38:54:85:52:
5d:01:a2:0d:75:ab:74:32:47:23:e9:54:47:10:da:
02:c1:bc:ed:20:f5:10:19:58:87:37:c0:77:10:18:
da:8e:ca:9d:5b:70:5f:1a:58:4b:29:34:5f:2b:35:
aa:c6:44:02:e1:7f:36:82:87:5d:8c:a1:82:94:b8:
36:be:5e:f7:b4:2e:fa:4d:72:54:64:ab:fe:5c:46:
f1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AB:D0:87:03:1A:DA:84:44:1E:92:CF:C3:99:47:EF:A1:5B:93:33
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/GqvQhwMa2oREHpLPw5lH76FbkzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:32:6d:e7:a9:48:57:e2:b2:bf:28:05:6e:9a:ee:73:6e:a8:
c7:57:85:73:44:f9:f8:ba:cd:c4:d8:25:47:2a:93:d6:94:3b:
45:a6:57:a8:e2:d4:96:29:8a:a1:75:ef:5e:33:ba:8b:e2:0f:
0b:3d:ee:28:d1:32:3e:a5:62:9d:6a:ae:17:79:64:ff:36:eb:
05:fb:a6:da:c1:92:8d:58:88:cf:4f:ac:fb:5d:46:e9:cb:43:
57:16:c9:f9:26:c2:c2:37:70:cd:a4:fe:4d:12:84:46:4b:1f:
a3:7a:b9:1c:96:fe:81:2b:45:ac:88:57:2f:a7:95:78:86:51:
08:4d:e7:d5:58:c0:ae:f8:a0:07:a9:de:cb:7b:87:3c:8e:07:
41:3e:e2:2d:df:ac:85:c3:5b:57:24:76:7d:de:d2:bb:56:48:
e8:b4:21:a8:43:80:c9:ed:0f:26:e4:e9:0a:25:2c:4e:5d:6f:
c3:40:b4:4c:ba:d7:1d:58:28:c6:eb:c4:40:35:66:f0:fc:2d:
74:74:1f:12:0f:1f:ee:5b:ac:a6:01:52:cd:c2:dc:5e:e2:26:
5d:5b:9d:b5:96:63:06:5f:ad:72:f9:10:52:27:56:72:13:60:
aa:97:8d:16:46:b8:a0:6a:c8:bb:2f:17:d1:56:89:c4:cd:b0:
e9:40:41:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:34:58 2025 by rpki-client