Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GRKSDxZ8F9d7FuysSCaYNt3sm9Q.roa
File: GRKSDxZ8F9d7FuysSCaYNt3sm9Q.roa (raw, json)
Hash identifier: oSrp5uAsmitrD/giiuil7498kBdlhMwLo3wE1z38pWM=
Subject key identifier: 19:12:92:0F:16:7C:17:D7:7B:16:EC:AC:48:26:98:36:DD:EC:9B:D4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0196A9C60C68403520542CC50D038EC96846
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GRKSDxZ8F9d7FuysSCaYNt3sm9Q.roa
Signing time: Wed 07 May 2025 08:04:10 +0000
ROA not before: Wed 07 May 2025 08:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209693
IP address blocks: 45.88.88.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
87.121.86.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 13:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:c6:0c:68:40:35:20:54:2c:c5:0d:03:8e:c9:68:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 7 08:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1912920f167c17d77b16ecac48269836ddec9bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:46:b2:89:cb:ad:17:12:f9:6b:9b:49:1b:
83:ce:b2:5f:d2:b2:68:7e:fa:58:94:f1:b2:50:cf:
ac:6c:2e:db:91:9f:8b:3e:35:88:36:16:a8:94:ca:
7a:82:70:3e:e3:4a:bc:10:7f:55:30:ec:fd:a4:88:
70:4c:6f:8c:de:8c:b3:e1:15:e1:1a:1c:cf:bd:14:
50:ea:f2:6c:11:f1:02:33:06:34:17:db:5f:79:17:
11:ce:65:8a:da:be:04:d9:fe:5e:7e:14:88:4b:41:
06:74:78:c7:08:de:5a:67:56:09:c2:de:64:ef:42:
90:a9:80:91:38:da:dc:2c:8b:d3:e8:24:9e:e8:aa:
da:e6:be:77:98:da:35:cf:0f:11:1e:22:11:b8:3d:
9e:09:31:62:f7:8d:88:5a:9b:e4:fa:c7:40:b9:27:
6f:ce:c8:f9:0b:d3:05:2b:dd:f7:b8:13:c0:d2:ee:
a2:ab:f0:eb:77:83:11:26:1c:a6:36:17:ce:30:2c:
84:fd:8b:7e:4f:d2:ee:a9:c3:1c:2c:f0:f0:87:98:
5d:24:fa:6e:e5:fe:1c:7f:65:65:0a:f3:34:5d:fe:
d1:1d:cc:57:b0:c1:10:87:3c:68:a6:9d:60:d0:9e:
d0:7d:27:80:67:df:06:d2:77:e6:92:e1:f4:58:2c:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:12:92:0F:16:7C:17:D7:7B:16:EC:AC:48:26:98:36:DD:EC:9B:D4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GRKSDxZ8F9d7FuysSCaYNt3sm9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.88.0/24
83.219.97.0/24
87.121.86.0/24
87.121.221.0/24
185.252.177.0/24
194.48.250.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:37:0a:1a:c0:df:00:7c:f7:1b:c0:a5:58:8f:5a:6d:1f:a3:
32:70:93:a7:55:e7:e1:19:46:d4:2f:b6:63:be:04:8f:f9:2b:
5e:82:83:2b:4d:3e:fd:fc:49:c6:35:d7:8b:86:cf:ae:70:3c:
4c:2a:3d:65:94:33:c4:9c:84:bb:57:95:61:28:85:9e:73:f6:
1a:b3:53:8b:a9:72:e2:61:f5:f0:89:6f:30:54:a8:af:c6:bb:
a1:ae:05:06:3f:dd:29:3f:b1:b3:48:93:12:b7:91:aa:e2:6e:
fc:0a:44:9b:90:7d:da:7b:19:21:85:fd:cf:a5:30:05:86:1a:
b3:bd:31:49:38:56:dd:8f:c5:33:a4:a7:1a:bf:f8:84:c8:b1:
98:96:ef:68:9d:16:dc:f4:f5:8a:85:b0:2e:2b:22:58:98:ee:
92:f6:58:f0:86:89:d7:0d:6c:d2:01:8d:5b:19:1e:75:4d:43:
08:f7:e9:9b:1f:16:76:f5:0c:a3:65:06:ae:a2:59:a8:de:b7:
f8:0e:bc:a3:b7:82:24:9f:9f:6b:00:c3:af:dc:ce:6c:d2:80:
39:3a:65:9a:bc:16:1f:45:e1:d3:96:40:a9:3e:9f:73:63:9b:
f3:f0:af:a0:df:af:04:20:b2:59:17:65:06:37:dc:87:bf:03:
50:f7:a2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:36:02 2025 by rpki-client