Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/GiZHUtqOkZw-KBEJdaRtc16uLJA.roa
File: GiZHUtqOkZw-KBEJdaRtc16uLJA.roa (raw, json)
Hash identifier: 8BAgXrPza7gM3s899+vO5wQBu024G0aCfKsnwZN73Js=
Subject key identifier: 1A:26:47:52:DA:8E:91:9C:3E:28:11:09:75:A4:6D:73:5E:AE:2C:90
Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial: 018D5A09F92AF103D4CFFE45292265A1F57A
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/GiZHUtqOkZw-KBEJdaRtc16uLJA.roa
Signing time: Tue 30 Jan 2024 11:03:39 +0000
ROA not before: Tue 30 Jan 2024 11:03:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9145
IP address blocks: 194.76.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5a:09:f9:2a:f1:03:d4:cf:fe:45:29:22:65:a1:f5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Validity
Not Before: Jan 30 11:03:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a264752da8e919c3e28110975a46d735eae2c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:90:9b:4e:70:3d:45:a5:ae:4b:71:dd:f3:87:
a5:75:95:1e:5a:ad:ee:81:d2:57:0f:76:9d:17:3b:
f7:92:76:a1:ba:e0:73:2b:7c:9b:f2:e5:eb:e3:91:
5b:a1:95:db:7f:25:a7:7e:0e:43:ad:d0:e7:f8:fe:
ea:c5:d4:df:fa:1d:30:05:9d:ca:f2:fa:fe:12:50:
7d:55:99:06:d0:af:cc:e4:11:57:3d:e9:df:bd:d5:
67:4c:0c:c6:75:54:d3:f2:36:be:51:da:e4:d9:1f:
ec:fb:90:39:85:9b:44:58:1b:ce:97:81:47:0c:b4:
a9:d2:09:64:06:31:69:e7:11:50:44:fb:72:fd:94:
48:59:e2:73:38:8f:fd:6c:26:61:1e:a1:a6:e0:f0:
3e:2a:a8:63:79:77:8a:34:e6:60:c7:09:7a:2d:a4:
38:20:64:5c:ef:25:61:1f:8e:be:00:be:03:f0:5c:
30:65:20:af:ed:f2:cd:cd:79:fb:e5:3e:bb:5a:18:
a4:0e:f2:7a:54:10:09:62:2b:f6:50:dc:9f:68:f6:
f5:ad:88:85:70:a9:e9:55:e1:3a:6c:d2:0a:1d:f1:
64:a7:f4:f0:73:6a:62:64:20:dd:54:44:0a:15:00:
d4:af:3f:c5:f4:27:80:c1:d1:dc:4e:42:18:91:b6:
3d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:26:47:52:DA:8E:91:9C:3E:28:11:09:75:A4:6D:73:5E:AE:2C:90
X509v3 Authority Key Identifier:
keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/GiZHUtqOkZw-KBEJdaRtc16uLJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.211.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:c3:2a:75:61:29:78:a5:9b:9f:7e:b6:63:1b:fc:73:66:e9:
c9:4b:37:13:07:96:bd:b9:ed:69:b5:f1:da:ba:c9:59:fd:b7:
92:dd:c8:4d:03:41:83:8a:5b:41:c6:3b:8b:16:18:ac:be:6c:
ac:61:57:95:3a:87:cb:19:35:0b:7c:84:4e:3e:ed:a0:d8:ec:
35:2b:66:69:23:9c:01:b8:ae:4e:9d:eb:05:19:4d:c3:01:82:
f4:32:61:f3:ef:e7:e3:ce:09:c4:52:24:71:3b:21:32:a2:25:
92:aa:d5:1b:66:2e:0e:65:45:0d:4a:b6:71:0a:e4:e4:3a:e6:
b3:dd:d0:0e:2e:9f:cc:7e:64:bb:d6:00:b0:5b:41:c1:8b:a6:
f4:a7:b6:ef:b6:df:92:31:88:28:8f:5e:60:ad:cc:7a:37:d8:
79:1e:d9:05:56:09:79:e1:14:c5:23:10:47:e7:d5:db:f3:ce:
ab:66:aa:db:ba:3d:87:ce:32:c2:4a:02:e5:e9:bb:c8:17:2f:
de:dd:40:61:b3:32:43:78:d9:58:dd:9b:9e:f7:d5:c7:3f:17:
c3:75:8d:03:44:cb:33:ef:37:03:5e:51:80:b5:40:62:99:5e:
f7:19:1a:32:1d:82:4a:ab:e2:4e:e4:d6:3f:7b:02:5f:48:28:
80:ea:6d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:31 2025 by rpki-client