Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/GWP30Jb6N4G90fbey7hX1Wke47k.roa
File: GWP30Jb6N4G90fbey7hX1Wke47k.roa (raw, json)
Hash identifier: NWla0IlFuqkifksGaS02wskbol4inVUlVuKoV+28YNU=
Subject key identifier: 19:63:F7:D0:96:FA:37:81:BD:D1:F6:DE:CB:B8:57:D5:69:1E:E3:B9
Certificate issuer: /CN=e23a74630a8424ccd5f5bb0f60220894527d732c
Certificate serial: 018CC5DC7123B57B43889CCE8CE7AAC7148D
Authority key identifier: E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/GWP30Jb6N4G90fbey7hX1Wke47k.roa
Signing time: Mon 01 Jan 2024 16:30:07 +0000
ROA not before: Mon 01 Jan 2024 16:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21217
IP address blocks: 91.199.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:71:23:b5:7b:43:88:9c:ce:8c:e7:aa:c7:14:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23a74630a8424ccd5f5bb0f60220894527d732c
Validity
Not Before: Jan 1 16:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1963f7d096fa3781bdd1f6decbb857d5691ee3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e3:f6:40:75:4e:3e:a7:aa:7a:ad:d3:15:ba:
c7:26:8c:3d:18:85:0a:57:9c:88:25:ee:b2:3e:51:
26:eb:58:ed:14:9d:24:78:66:c1:30:c5:45:b8:c2:
d7:6f:a0:ff:2d:c6:e4:75:13:a1:57:7e:d4:86:42:
76:f1:d7:41:3a:b9:ab:5f:a9:53:ad:1e:2f:50:65:
34:ed:f5:e8:14:42:a3:99:07:d1:9a:ac:3c:b0:9b:
23:0f:22:0b:fa:00:9b:c8:27:b4:84:7e:48:6a:11:
77:e9:cc:27:0a:19:c8:45:12:b4:8f:2b:db:10:f0:
55:97:c7:fd:e2:cc:16:24:77:0a:3f:ee:b3:e8:bb:
a3:d1:6b:d1:34:4b:11:fd:97:c9:80:db:27:2a:ef:
88:4b:27:04:7d:5f:33:c1:06:d7:b9:0b:c5:0f:de:
08:df:fd:64:be:71:70:d5:cf:e7:dc:43:63:07:e6:
a6:72:59:3e:67:c2:50:b3:da:92:e9:98:61:23:9d:
cf:82:36:70:ed:9c:12:dc:26:22:83:43:40:6d:c7:
ef:50:35:3a:2c:cd:48:64:d1:6b:06:fa:d0:28:f2:
a7:98:75:da:1d:67:38:28:8e:f1:5e:d3:4c:7f:ee:
d1:bb:63:c7:67:57:f1:e6:c9:e0:22:89:15:d3:d4:
81:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:63:F7:D0:96:FA:37:81:BD:D1:F6:DE:CB:B8:57:D5:69:1E:E3:B9
X509v3 Authority Key Identifier:
keyid:E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/GWP30Jb6N4G90fbey7hX1Wke47k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.255.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:9f:7a:39:9f:cf:3b:11:be:a8:65:b5:87:e8:a6:61:6a:5f:
6e:b1:9a:14:7c:3a:48:a6:0a:cd:b3:26:9f:fc:9c:e5:1d:eb:
cc:e5:04:34:46:41:a1:71:55:d8:16:df:25:55:e7:24:cf:a8:
ad:66:75:7a:a3:44:61:84:ed:2a:c2:52:fd:65:98:80:cd:7f:
c2:3a:05:d9:d3:2b:49:c2:7a:cd:56:d3:f3:3a:78:f5:a5:71:
c7:94:e8:07:29:ff:e2:1a:a7:a2:22:be:2b:59:65:ab:8d:fa:
01:87:06:93:40:04:fc:ce:d8:c9:f4:97:ab:8f:c7:39:e0:5e:
6c:c3:46:ef:58:b1:0c:be:5d:b3:28:b6:49:aa:59:23:8e:ab:
39:d0:52:27:05:bf:7f:62:b2:91:7c:be:b8:75:13:74:67:f2:
68:6a:76:a6:26:74:7f:74:fc:47:04:54:2a:a5:73:a3:4e:7d:
8d:33:ab:03:c7:a3:c8:ec:12:c2:7d:92:19:fb:b0:bf:6e:4a:
2c:cf:12:a2:24:8c:39:18:e5:58:33:a4:5a:d1:6a:db:fa:9b:
b4:9d:31:cd:49:7b:76:41:6d:f2:40:c3:fd:f3:5b:dc:be:a1:
83:99:68:72:5e:e1:6d:c2:6c:e9:1c:47:a2:3f:ea:f0:c2:03:
b5:91:b9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:03:09 2025 by rpki-client