Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/GYaHGE7fb0WfLO38spuMM6TI9uk.roa
File: GYaHGE7fb0WfLO38spuMM6TI9uk.roa (raw, json)
Hash identifier: MqpJNJyu8URd7U47Gf1YvDQsrXM0IITZ02U5ceR5n6g=
Subject key identifier: 19:86:87:18:4E:DF:6F:45:9F:2C:ED:FC:B2:9B:8C:33:A4:C8:F6:E9
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 019377DA85F4DADEE237856168C30E36B630
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/GYaHGE7fb0WfLO38spuMM6TI9uk.roa
Signing time: Fri 29 Nov 2024 12:17:10 +0000
ROA not before: Fri 29 Nov 2024 12:17:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 93.127.160.0/24 maxlen: 24
93.127.161.0/24 maxlen: 24
93.127.164.0/24 maxlen: 24
93.127.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:77:da:85:f4:da:de:e2:37:85:61:68:c3:0e:36:b6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Nov 29 12:17:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=198687184edf6f459f2cedfcb29b8c33a4c8f6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:22:36:0f:fe:e1:56:86:b8:a1:fc:c4:b3:
98:b6:7b:45:9b:a3:ba:20:b2:47:5d:8b:69:70:55:
c8:fd:44:dc:fb:89:c7:e2:56:54:b3:6a:2c:d1:1a:
06:91:88:84:3e:f0:f6:03:58:f4:1a:22:27:e6:0e:
4e:47:54:5d:44:e7:f7:e7:01:98:fc:e3:99:3a:63:
b2:9f:9a:5a:f6:10:80:2f:71:28:88:82:cb:a8:7f:
ba:42:d4:49:65:8b:8c:cc:da:f1:54:01:53:ae:44:
73:93:9a:17:95:c9:0e:10:32:81:76:3e:c2:36:e9:
1a:34:a9:9a:7f:2b:1d:2b:8b:31:a6:3c:37:d0:1e:
98:c5:61:ad:53:2a:44:ec:ae:b9:df:aa:43:0a:e2:
c6:4d:a7:c6:90:51:dd:b5:2f:4e:47:32:de:33:37:
87:1e:a6:c1:b5:ac:47:cb:f8:7e:17:00:45:c7:3e:
cd:9b:72:f3:18:fb:b7:36:25:c9:a7:ba:7a:15:43:
57:58:78:6b:6b:38:62:e3:87:dd:88:52:20:3f:83:
e3:56:16:40:86:86:a6:fb:75:5a:cb:99:2b:fd:d0:
89:c1:da:9f:5d:0c:86:1a:94:f6:30:23:ab:0f:1a:
4d:a3:da:c0:6e:6f:59:45:0f:f9:6f:cc:7b:c1:a8:
ec:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:86:87:18:4E:DF:6F:45:9F:2C:ED:FC:B2:9B:8C:33:A4:C8:F6:E9
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/GYaHGE7fb0WfLO38spuMM6TI9uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.160.0/23
93.127.164.0/24
93.127.184.0/24
Signature Algorithm: sha256WithRSAEncryption
40:fc:9a:9f:08:e6:26:75:2f:0d:e2:d8:ad:16:b2:c0:68:33:
8d:e4:20:c4:08:97:cd:d1:e3:89:67:b5:d8:0f:56:b2:e7:21:
a3:70:2d:70:41:cf:d8:49:f4:74:a9:b0:e6:17:65:e7:55:82:
2b:30:31:c4:56:e5:7e:aa:28:04:aa:e4:98:06:73:b8:2f:3b:
ec:e8:27:5e:14:38:74:b6:e6:d6:f0:1c:0d:84:8e:32:64:61:
b4:6f:75:41:10:2d:e5:f7:7c:77:e3:40:15:d3:ee:5c:49:e0:
ba:ad:30:ea:b7:48:56:7c:d5:53:00:77:fa:bd:4d:30:89:90:
89:71:af:1b:9f:7c:71:06:fc:3f:35:e1:91:64:f4:36:70:4a:
a9:be:26:c4:1f:9c:84:ab:ff:f9:79:2d:37:b6:96:a5:d6:dc:
90:8e:9e:c1:60:d1:b2:1e:47:1d:0d:b1:02:50:56:88:ec:0c:
18:f7:9c:f9:a6:4d:4a:76:11:e1:fc:85:06:77:eb:4a:1b:4a:
71:90:63:32:89:1e:4f:6f:3f:27:ab:13:ca:23:38:2e:90:3a:
b4:61:1f:b4:cb:ab:76:b3:0a:11:95:03:a9:30:25:df:3c:be:
17:fd:ac:a2:23:88:a7:4f:e4:d5:8b:a7:3b:25:0b:a7:70:76:
e3:4d:d8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:33:23 2025 by rpki-client