Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gpsi-5Qnq8qQiy2k8Y9iHCOSa4k.roa
File: gpsi-5Qnq8qQiy2k8Y9iHCOSa4k.roa (raw, json)
Hash identifier: gNNfJ25rxjqMDocQECjUkHh6d0Tb/ZZ5FkJ5Js6Fzzk=
Subject key identifier: 82:9B:22:FB:94:27:AB:CA:90:8B:2D:A4:F1:8F:62:1C:23:92:6B:89
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEF62EDAA2F0D41ED99C3418E2E0D4
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gpsi-5Qnq8qQiy2k8Y9iHCOSa4k.roa
Signing time: Tue 26 Nov 2024 13:35:16 +0000
ROA not before: Tue 26 Nov 2024 13:35:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396568
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:f6:2e:da:a2:f0:d4:1e:d9:9c:34:18:e2:e0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=829b22fb9427abca908b2da4f18f621c23926b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:8a:8d:57:06:32:71:17:11:4a:bd:0e:00:
36:3a:d2:76:4a:97:19:6d:a7:d0:ee:89:ed:8b:93:
c8:41:65:bd:65:20:a8:e9:b0:af:57:43:e9:c2:92:
f5:6c:7f:1a:26:90:42:c3:69:3b:dd:1b:0c:60:67:
1f:c4:a4:0b:04:68:3f:3a:35:5d:0c:d4:c4:ed:97:
d5:da:f7:50:c1:95:0f:15:ed:01:f6:7b:01:c6:94:
29:40:b0:60:26:38:74:49:d5:5e:3c:15:79:a3:9f:
ee:30:5c:e1:96:cc:28:9a:46:c0:58:3c:88:04:1d:
1c:c1:75:c7:a2:cf:da:19:7a:69:6a:65:64:a9:a3:
b0:a8:16:6c:20:f1:bd:8a:2f:da:e7:db:d4:62:61:
53:44:b6:86:ed:0f:bb:4a:bf:5b:5e:99:54:36:a6:
d2:ae:06:63:80:8e:e9:84:e9:3e:32:1e:2e:fe:63:
4c:1e:ed:99:60:a4:c2:5c:e0:97:03:25:29:11:ba:
d3:d3:d2:b3:de:92:a7:34:0c:e7:a3:16:b8:9d:cc:
09:7b:3e:52:53:c8:eb:9c:43:b2:d5:22:4a:68:66:
d3:29:f5:d8:30:c4:5c:b3:d3:71:92:00:f6:d4:ed:
e8:5f:f9:2b:2f:03:b0:6b:e3:c3:13:f8:77:d7:4c:
63:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9B:22:FB:94:27:AB:CA:90:8B:2D:A4:F1:8F:62:1C:23:92:6B:89
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gpsi-5Qnq8qQiy2k8Y9iHCOSa4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
c0:7b:4e:c5:21:f6:34:c9:ce:96:73:1d:d1:1f:66:f9:92:8d:
e8:f5:fb:63:c4:e0:14:8a:78:14:63:49:8e:01:84:91:53:ee:
14:2b:6d:05:ed:9a:cc:c0:a9:4d:d1:01:52:d2:3f:93:d7:72:
6a:44:ed:45:de:ec:88:7f:d0:08:8f:4c:52:bc:c4:52:cc:7c:
27:ee:4c:92:18:98:7c:d9:0c:6f:5e:4a:6c:0b:f4:e9:8c:ce:
bc:59:16:7a:84:ed:26:8c:57:c2:ee:db:55:ad:18:73:53:4a:
44:27:8d:b9:72:58:8a:3f:38:87:bb:86:2d:d8:8b:94:45:1a:
9d:86:4c:31:7b:a8:50:b7:15:ca:cd:9c:b7:17:ec:d8:ff:dd:
54:6c:88:56:72:44:73:50:f0:e8:b2:ea:a8:2f:4a:aa:30:89:
97:e1:8a:56:ec:52:e3:4f:fd:fd:38:6c:09:55:e4:c9:82:db:
7c:3d:48:5a:26:17:bc:bc:d1:88:fe:f3:f4:46:d4:36:4a:3c:
43:0d:13:e0:49:02:4b:0b:cd:83:cb:99:d8:10:e1:03:e6:57:
c5:8f:c3:2f:6a:8c:fd:ad:36:5f:b8:38:d4:fa:78:b0:66:c4:
1b:4e:8c:be:d8:37:17:c6:f5:77:27:24:ef:56:2c:f1:6c:c9:
fe:36:1b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:34 2025 by rpki-client