Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/GWX-IhVQJ83lqDn0UE5vXGZyTOQ.roa
File: GWX-IhVQJ83lqDn0UE5vXGZyTOQ.roa (raw, json)
Hash identifier: P8pHNWg/hIpr1Dh3woFZ2nw4IBpCudQzFjhhvN2tkvI=
Subject key identifier: 19:65:FE:22:15:50:27:CD:E5:A8:39:F4:50:4E:6F:5C:66:72:4C:E4
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 019391D8930EC4FD7F3187C425BFA01A1E56
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/GWX-IhVQJ83lqDn0UE5vXGZyTOQ.roa
Signing time: Wed 04 Dec 2024 13:25:09 +0000
ROA not before: Wed 04 Dec 2024 13:25:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62000
IP address blocks: 93.127.158.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:91:d8:93:0e:c4:fd:7f:31:87:c4:25:bf:a0:1a:1e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Dec 4 13:25:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1965fe22155027cde5a839f4504e6f5c66724ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:3a:96:c5:a9:79:b4:d8:21:c3:c9:d3:0a:
4e:df:f0:4f:df:85:27:4d:ba:9b:74:e1:cf:cd:94:
6b:75:f1:10:65:fd:40:6b:2a:f2:ab:5d:6f:7b:74:
46:fa:d1:66:96:75:d6:0d:16:68:5e:76:b6:3f:35:
23:5c:3a:e2:21:92:dd:e0:a5:c0:90:6b:5c:9d:2c:
4d:67:6c:9f:81:3f:63:25:af:d9:1f:7b:28:08:94:
a8:75:33:85:37:cf:46:cd:e5:0c:19:a7:2f:59:be:
63:07:54:7a:96:6b:e2:74:43:49:d2:c1:72:ea:9e:
5f:4e:28:3b:df:fc:62:a9:50:00:81:68:84:51:cc:
35:81:04:a2:3c:3d:bf:2e:a5:e1:6a:6f:78:cd:e0:
fe:d4:8e:e1:4d:da:c5:31:72:e6:6e:96:7a:47:ea:
c6:20:ca:7c:4e:e9:45:4d:5f:53:54:1e:b2:ec:89:
73:61:05:42:c2:4a:6c:2c:80:44:af:65:75:07:7f:
e9:26:7d:44:21:d0:9c:fe:d3:ed:96:7a:d9:1d:0d:
15:aa:09:07:4c:7f:64:f4:68:81:d9:60:86:a4:66:
e7:6b:75:a2:68:ae:23:48:d3:24:cc:a2:e4:7c:e8:
c1:61:22:2f:d4:33:3c:81:63:03:29:e2:94:14:e6:
0c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:65:FE:22:15:50:27:CD:E5:A8:39:F4:50:4E:6F:5C:66:72:4C:E4
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/GWX-IhVQJ83lqDn0UE5vXGZyTOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.158.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:92:22:1b:ce:ba:ef:65:dc:4d:39:99:17:2a:59:85:58:f8:
1d:5b:ea:a2:b6:87:e5:3b:33:9c:bf:9a:51:13:3d:9d:95:8b:
25:cd:62:99:f8:70:d7:6c:4a:b2:12:25:01:58:5f:c9:6d:58:
dc:5b:5a:23:30:57:1c:4f:9a:a5:eb:98:4e:50:47:49:b9:4a:
a3:1e:ba:73:a2:79:3c:3a:74:68:94:da:05:8d:ab:c3:99:cc:
a6:f7:5b:51:6e:4a:62:b8:2b:6a:f4:cf:ec:9e:11:9e:ac:55:
42:f3:69:d6:1c:90:e0:00:f5:80:c8:f6:ee:29:33:4d:d9:2f:
dc:60:39:da:61:cf:67:e8:e9:72:de:ec:0a:f4:49:17:1e:69:
de:b4:03:53:8c:04:cc:64:78:49:73:79:41:e2:25:3f:16:64:
0b:ce:f5:30:1c:9e:1c:6f:50:e8:0a:1b:20:ad:c8:fd:15:3d:
4d:fd:63:98:b5:d9:ab:7b:b5:b4:56:07:51:88:9c:08:40:2d:
dd:93:d1:48:e4:ca:5f:19:66:56:62:f0:f7:c5:45:be:18:26:
63:01:a5:d5:73:7b:35:db:9d:47:7c:2c:c4:53:f3:2a:69:16:
cf:d1:52:21:fb:e5:40:46:88:a1:b9:db:53:2a:14:a8:3c:06:
7b:f0:18:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:29:00 2025 by rpki-client