Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/GQbiOuM9e5dFYwu_hkJdDGM3uJI.roa
File: GQbiOuM9e5dFYwu_hkJdDGM3uJI.roa (raw, json)
Hash identifier: M/dDJ0ylCDgSq7W22vpj7+4sro3lNODzw99woofWfzo=
Subject key identifier: 19:06:E2:3A:E3:3D:7B:97:45:63:0B:BF:86:42:5D:0C:63:37:B8:92
Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial: 01956985FED2ED62F9D1A79EFC09C728DA44
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/GQbiOuM9e5dFYwu_hkJdDGM3uJI.roa
Signing time: Thu 06 Mar 2025 03:35:44 +0000
ROA not before: Thu 06 Mar 2025 03:35:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.69.1.0/24 maxlen: 24
195.42.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Mar 2025 03:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:69:85:fe:d2:ed:62:f9:d1:a7:9e:fc:09:c7:28:da:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
Validity
Not Before: Mar 6 03:35:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1906e23ae33d7b9745630bbf86425d0c6337b892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bf:ed:c7:2b:06:5d:dd:28:28:c4:f2:56:b2:
9f:04:07:78:f3:42:a8:46:13:77:36:11:6b:6e:a8:
9d:45:f6:34:c4:12:30:08:13:9c:c6:60:01:52:db:
5e:7f:6d:c9:d8:44:a7:3f:11:55:bc:c6:56:1c:ad:
74:fd:fc:e7:18:a5:2c:8d:c0:a0:9c:c4:5b:52:fa:
76:cd:ed:df:1c:0c:0a:3d:cb:35:4a:2c:94:2a:6b:
07:40:a7:4e:29:4d:81:ff:6a:75:71:18:ee:e1:80:
a9:7a:b6:98:99:ff:de:19:95:c9:f1:d7:50:67:aa:
48:2b:30:e3:ef:50:c0:1f:80:b3:d4:6e:b3:f1:72:
ec:3a:a2:0a:a5:22:5e:ad:79:ad:9c:7c:59:9b:e1:
f5:4b:02:0c:d2:b2:6a:93:95:b1:f9:c3:54:e2:44:
b3:f3:ed:92:ee:eb:17:53:b0:57:ec:7b:36:1a:2b:
15:bc:91:ad:d7:c3:70:50:f3:56:56:85:0f:b4:2a:
02:9d:32:5a:d1:79:2c:de:f1:a2:92:1e:fd:28:95:
2c:ed:0a:e8:0a:85:9d:34:cc:b5:fc:fa:f8:ab:71:
58:4c:6e:e0:81:4c:2d:95:f2:1f:db:dc:ab:65:e5:
e3:c7:6e:a7:7f:e5:ff:45:70:6c:b2:18:a0:56:4e:
52:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:06:E2:3A:E3:3D:7B:97:45:63:0B:BF:86:42:5D:0C:63:37:B8:92
X509v3 Authority Key Identifier:
keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/GQbiOuM9e5dFYwu_hkJdDGM3uJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.1.0/24
195.42.240.0/24
Signature Algorithm: sha256WithRSAEncryption
44:5c:e9:06:02:55:dd:db:be:50:94:7d:fa:82:1f:06:9e:3e:
72:6e:85:bf:44:f5:c3:73:0c:ad:79:a7:1a:24:0a:7c:a2:5a:
4a:09:af:f3:e9:c2:a8:bf:4a:84:25:25:62:95:23:74:ee:39:
02:95:60:ea:1c:89:7b:55:a7:e3:db:96:0b:35:e6:66:c5:fb:
46:4a:0d:64:38:2f:bb:66:ce:57:1d:d0:00:76:6c:ad:31:16:
f3:90:66:a7:fa:21:9f:19:d1:53:93:65:47:46:75:42:ea:12:
00:e2:cd:bc:97:37:7b:45:99:98:50:76:3a:f6:90:e8:33:10:
37:0e:d3:38:e4:f0:ed:9f:4f:1a:ac:4a:4b:1e:77:0a:02:d7:
3c:7d:5d:1d:f7:df:49:b9:bc:7a:f4:4c:01:27:05:8e:76:82:
ef:fa:be:7d:8f:13:3c:c2:85:8d:f6:de:bf:71:b1:fd:0a:99:
b3:f2:26:f4:b3:be:be:14:72:a4:14:b8:e5:03:90:43:bb:b4:
5a:51:d8:98:8f:9e:2a:3d:05:ca:5d:5f:55:10:c3:c5:03:b7:
0c:68:16:5e:81:6d:f3:21:df:72:05:b2:df:ca:ff:fc:1f:6f:
5c:9c:d4:4a:95:2e:24:a3:ef:8f:bf:0a:3f:cc:59:67:68:ff:
35:4d:3a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:06:01 2025 by rpki-client