Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/GvdNAIWAdjb5kRGLOmFTDHR9C7U.roa
File: GvdNAIWAdjb5kRGLOmFTDHR9C7U.roa (raw, json)
Hash identifier: TBldED9i+Mb9N66MvyrM0rKook64XWp68J0zlGZ1RLI=
Subject key identifier: 1A:F7:4D:00:85:80:76:36:F9:91:11:8B:3A:61:53:0C:74:7D:0B:B5
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EA885FED1C94FE9E678F87A762987CF04
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/GvdNAIWAdjb5kRGLOmFTDHR9C7U.roa
Signing time: Thu 04 Apr 2024 09:52:17 +0000
ROA not before: Thu 04 Apr 2024 09:52:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215983
IP address blocks: 178.34.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 06:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:85:fe:d1:c9:4f:e9:e6:78:f8:7a:76:29:87:cf:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 4 09:52:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1af74d0085807636f991118b3a61530c747d0bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e2:30:63:74:47:36:f2:1c:a9:43:82:9e:3c:
7a:64:76:cb:f0:26:d4:68:de:be:30:34:25:ae:83:
ff:b5:be:d0:fe:2c:5d:1f:69:e9:f2:c9:35:44:e5:
3d:f7:5c:f8:d6:4e:0e:89:83:8e:f0:0e:c3:3f:cf:
c8:c4:8e:0d:14:fa:ff:d2:3f:04:9e:b7:e3:76:49:
86:f1:85:06:24:3d:f1:46:75:1b:d8:4b:7f:fb:be:
3f:31:e4:f4:e7:a8:4a:28:9f:d5:c0:d4:19:ad:42:
8d:65:ad:f3:21:16:75:dc:b9:8c:f9:5c:38:68:96:
3f:48:c6:b8:3c:7d:2a:d6:ea:3d:39:f7:8a:dd:e5:
40:13:95:34:ec:d9:f0:bc:8b:22:2e:34:46:a9:82:
11:38:20:8d:17:d5:88:52:ba:d9:b2:61:56:d2:37:
c5:76:de:80:5e:21:87:ec:b5:ad:97:a3:1e:1a:b5:
3c:f3:6e:10:2f:dc:59:69:f9:74:e3:dc:06:57:da:
c1:9e:91:7a:5a:71:bc:60:f0:56:39:ea:13:a3:b7:
0e:63:bc:61:ce:9d:a7:ad:5d:ff:69:53:79:6f:d9:
02:7c:4c:45:37:dc:cb:e4:53:e8:ca:cf:02:95:56:
d6:c9:26:36:71:bd:4d:fa:ea:aa:f3:8e:cc:e7:8a:
3e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F7:4D:00:85:80:76:36:F9:91:11:8B:3A:61:53:0C:74:7D:0B:B5
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/GvdNAIWAdjb5kRGLOmFTDHR9C7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.34.79.0/24
Signature Algorithm: sha256WithRSAEncryption
62:4d:72:d5:07:c0:f6:64:0c:65:0c:f4:28:22:d7:1a:b5:19:
a8:bd:82:14:36:3f:89:2a:3c:cd:5c:1e:7d:ba:49:a3:4d:35:
c7:fb:43:92:9b:67:b4:8e:85:9f:0e:3e:7e:3e:49:92:b7:ad:
ef:fe:ff:3d:19:ed:06:d9:40:aa:e4:c2:be:23:9f:55:97:b1:
27:b4:d6:4d:9e:69:1e:96:92:33:56:d2:32:c7:0e:9b:9d:ab:
35:36:60:36:99:f4:16:64:72:ce:c3:83:74:81:b7:5d:90:57:
94:77:d1:99:36:74:b5:bd:c3:0f:d7:41:62:da:a6:b1:2d:e0:
ae:9c:4a:3f:c3:b7:c8:89:83:90:b8:c4:7d:c1:b8:05:35:69:
b7:3c:e6:6a:18:f8:e1:e8:41:43:e5:ac:6b:10:9d:c9:c4:18:
11:cd:24:ec:62:87:3f:a0:cb:34:55:08:af:5c:be:96:a7:23:
b6:21:27:44:05:c8:b8:0a:83:d2:44:36:69:16:59:cf:f0:22:
81:fe:db:d9:76:53:f3:e5:b5:e9:f5:b2:1a:99:df:f0:16:c7:
bf:78:94:84:6c:6c:dc:7a:6a:72:b4:d2:80:f8:ad:e1:48:cc:
06:84:9f:e6:f4:c6:a0:60:25:3e:c1:62:61:f5:86:08:75:71:
ac:9e:58:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:05:31 2025 by rpki-client