Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/gvWercLjPIgDte6qdAorE8D1eYs.roa
File: gvWercLjPIgDte6qdAorE8D1eYs.roa (raw, json)
Hash identifier: ZPNxIH6YMNSAITNcsOTMT5v5cGUtlG0UESDA0YhvQWI=
Subject key identifier: 82:F5:9E:AD:C2:E3:3C:88:03:B5:EE:AA:74:0A:2B:13:C0:F5:79:8B
Certificate issuer: /CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Certificate serial: 018CC2DB4CCE4C01E40AE6DEB4D23DD839C3
Authority key identifier: 3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/gvWercLjPIgDte6qdAorE8D1eYs.roa
Signing time: Mon 01 Jan 2024 02:30:01 +0000
ROA not before: Mon 01 Jan 2024 02:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51328
IP address blocks: 195.226.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:4c:ce:4c:01:e4:0a:e6:de:b4:d2:3d:d8:39:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Validity
Not Before: Jan 1 02:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82f59eadc2e33c8803b5eeaa740a2b13c0f5798b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8f:c5:63:da:68:4a:7f:f2:19:a8:ab:28:0e:
58:78:e3:64:b7:c2:43:3b:af:07:71:25:a1:2c:50:
72:38:c4:1a:4b:3e:f6:52:8d:d0:ec:60:79:31:c5:
88:33:c6:3c:c9:0e:1d:6b:d1:64:ff:80:da:dd:19:
23:42:63:b0:5a:3b:7c:ca:af:62:ef:72:77:c7:a7:
71:14:11:bd:ef:18:fe:d6:65:8e:ab:f1:1c:90:6b:
38:61:7b:4e:e2:5b:c2:cd:f7:6d:b2:17:54:a3:fa:
a7:db:67:f0:68:f9:e2:c5:1c:bf:ad:9e:05:7e:87:
7c:55:5b:e2:14:ff:6d:8f:22:ac:2b:59:36:93:6b:
bc:82:e3:b8:aa:d7:9b:c8:0d:c6:5a:b4:d5:f0:82:
cd:85:eb:fa:bd:cc:2d:22:41:40:3f:cb:83:1c:e7:
3d:74:c7:73:85:76:49:a6:82:62:31:50:68:a8:d3:
5a:28:eb:e7:62:a7:fb:b5:04:72:6b:50:52:ee:4c:
10:5b:49:07:77:d7:06:62:90:69:3d:28:dd:c0:3a:
2c:63:f5:9c:4b:d0:4f:ab:b1:9f:0a:b9:4e:9b:ef:
d9:d8:75:47:30:0f:9b:76:cf:37:26:66:25:72:1e:
9f:a8:f9:4d:1a:2c:95:4c:a2:05:d7:0f:56:13:08:
c7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F5:9E:AD:C2:E3:3C:88:03:B5:EE:AA:74:0A:2B:13:C0:F5:79:8B
X509v3 Authority Key Identifier:
keyid:3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/gvWercLjPIgDte6qdAorE8D1eYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.206.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:7b:48:c0:5d:66:a4:97:b1:ef:c5:7c:b9:5b:c3:af:93:91:
a3:46:0b:24:2f:7a:e9:1b:3b:4f:c8:f4:5b:47:b2:a4:7c:94:
3b:f3:09:13:ea:f3:2e:ea:11:0b:1a:1a:24:0b:df:a6:1c:a2:
c3:bf:22:bd:f6:af:14:ab:75:a0:97:28:c9:b9:fa:82:09:15:
74:20:90:47:e1:eb:0a:79:33:e3:bb:ce:cc:47:0b:8c:c6:f0:
61:51:ec:d0:73:0c:20:8e:ae:ad:66:a0:0a:6b:90:69:b1:e6:
2d:9a:45:47:8b:20:b1:c7:3e:c7:f0:d7:53:a6:33:6e:9c:4d:
61:0d:43:51:7f:a3:4f:7a:66:32:24:88:91:4a:ab:b3:2a:88:
d2:f7:82:77:32:ff:c9:da:32:da:a7:86:a7:67:b9:04:c5:11:
81:df:19:73:c3:fc:7e:1a:43:9e:fc:f0:2d:53:e8:75:65:a2:
16:aa:62:8e:7a:16:7e:c6:7b:05:5b:48:95:77:90:8e:ab:43:
fa:6f:60:ba:c9:48:6c:f9:9e:12:0e:7a:a5:f8:6a:c0:a4:6d:
62:71:5a:46:f9:4b:98:57:9c:35:a1:97:05:5f:c7:86:92:e4:
85:a6:a4:7a:e3:d7:0c:9c:29:a4:ab:48:01:8d:79:be:97:54:
6a:11:cb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:33 2025 by rpki-client