Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/GMgZVU3yS2UmzGHY47GvZCbMxhQ.roa
File: GMgZVU3yS2UmzGHY47GvZCbMxhQ.roa (raw, json)
Hash identifier: uXSF5lfwohR1hTtmhkQoOKUG64AHaQVMmT8Fvuuk0ck=
Subject key identifier: 18:C8:19:55:4D:F2:4B:65:26:CC:61:D8:E3:B1:AF:64:26:CC:C6:14
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 0190F2B06414019D5C0CCBE2B83EBCD66C53
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/GMgZVU3yS2UmzGHY47GvZCbMxhQ.roa
Signing time: Sat 27 Jul 2024 05:36:04 +0000
ROA not before: Sat 27 Jul 2024 05:36:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35766
IP address blocks: 31.184.175.0/24 maxlen: 24
37.130.200.0/23 maxlen: 24
37.130.204.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Aug 2024 13:32:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f2:b0:64:14:01:9d:5c:0c:cb:e2:b8:3e:bc:d6:6c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Jul 27 05:36:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18c819554df24b6526cc61d8e3b1af6426ccc614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:de:93:85:08:9e:e1:1b:d8:22:55:e0:f9:
ef:5e:20:d8:1e:5c:5a:ff:0a:b7:49:dc:57:96:3b:
38:5d:3e:87:66:61:5f:2b:1c:dc:fa:5a:fc:27:3f:
65:64:51:a0:70:d8:42:99:e1:ba:d8:c7:00:af:e0:
87:1c:d3:c1:68:39:e4:53:b4:3c:db:37:8e:dc:8f:
2a:e7:e2:1d:e1:e2:01:f7:6c:f8:55:ca:2e:97:3d:
4b:36:9e:d2:8d:bb:60:6c:72:fe:6c:e4:39:1c:2a:
0c:20:2a:df:5d:8c:01:34:e9:29:74:d8:dd:49:7d:
d9:be:bc:b0:9e:46:21:6d:75:8b:4e:04:97:fa:7d:
bc:d1:81:3d:18:3e:bd:b3:f2:67:db:6e:42:f7:b4:
64:98:66:0f:01:5e:f0:91:ad:78:ac:ef:c4:01:94:
88:44:ca:17:dc:9d:62:88:d6:db:60:a1:58:4c:7d:
6a:3e:d4:bb:af:e1:22:76:53:d1:75:e8:90:b3:81:
ec:f3:f7:ae:62:25:60:44:ae:ef:f8:74:86:d2:6b:
fc:93:5c:45:d4:4e:cb:35:45:6e:b4:4e:da:35:5c:
17:09:e0:a4:c6:d8:06:1d:e9:22:3d:8b:9f:b5:dc:
9b:36:e2:dc:57:d1:40:d5:d7:52:54:bf:94:c7:d7:
04:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C8:19:55:4D:F2:4B:65:26:CC:61:D8:E3:B1:AF:64:26:CC:C6:14
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/GMgZVU3yS2UmzGHY47GvZCbMxhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.175.0/24
37.130.200.0/23
37.130.204.0/22
Signature Algorithm: sha256WithRSAEncryption
69:b9:f5:4f:3b:f2:24:d9:2d:16:1c:af:99:6a:9d:f8:48:26:
52:db:e8:92:ad:75:9a:58:98:3e:fc:ba:90:ca:62:78:5c:d6:
08:0d:71:0e:67:52:1a:14:4f:f9:81:a8:64:83:a2:6e:94:2f:
0a:67:a5:a2:ee:49:b9:19:2f:65:7d:56:fc:4b:90:16:60:92:
1c:64:a2:54:2f:a2:7f:97:08:46:0b:05:32:32:c1:a5:d7:92:
b6:fb:91:60:52:c6:e6:e5:91:05:4b:57:40:5a:7a:bc:fa:5b:
cf:25:e9:4f:f9:81:54:be:15:86:43:1d:b0:03:af:d6:cf:5a:
39:6b:66:0a:85:31:06:9a:74:e4:06:29:6e:51:95:70:e5:29:
76:2e:18:9b:61:a6:b6:4a:a5:69:12:e5:a3:11:d4:51:d6:b6:
80:08:79:78:d5:71:41:8d:72:a3:f8:07:30:8b:03:e6:8c:7d:
e1:62:ee:6b:2e:51:51:4e:06:3a:49:9b:ea:5c:96:c7:dd:66:
a7:8f:08:b7:1f:74:d0:b5:7d:79:85:53:7a:1c:30:7c:c7:44:
e2:80:1a:40:ad:23:54:0d:26:df:bc:6d:5e:9b:2b:e6:e5:99:
11:87:d7:14:55:c0:32:2b:42:ff:cc:7e:55:63:3f:b6:45:95:
22:18:46:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:36:13 2025 by rpki-client