Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/GYnrHYRBLDxxkunfda7ISel9pXs.roa
File: GYnrHYRBLDxxkunfda7ISel9pXs.roa (raw, json)
Hash identifier: J+Zlirxtcq00RpvuWac6P87Yertq0G11FCTHaJlUtLs=
Subject key identifier: 19:89:EB:1D:84:41:2C:3C:71:92:E9:DF:75:AE:C8:49:E9:7D:A5:7B
Certificate issuer: /CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a
Certificate serial: 0193019C4F3592BBE8F0DE343B99EC3FBAA3
Authority key identifier: B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/GYnrHYRBLDxxkunfda7ISel9pXs.roa
Signing time: Wed 06 Nov 2024 13:14:01 +0000
ROA not before: Wed 06 Nov 2024 13:14:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213913
IP address blocks: 46.102.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 14:09:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:01:9c:4f:35:92:bb:e8:f0:de:34:3b:99:ec:3f:ba:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a
Validity
Not Before: Nov 6 13:14:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1989eb1d84412c3c7192e9df75aec849e97da57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:07:1e:a9:71:c2:87:a2:50:76:84:eb:44:
32:3a:6b:68:f1:e6:49:c3:4b:0e:a9:71:5d:ee:55:
76:32:a8:74:d5:b2:b0:74:20:5c:1a:ee:2c:7b:99:
d2:1f:86:d7:0d:57:99:12:b1:5b:95:52:81:1b:9c:
70:19:53:aa:06:14:93:6e:cf:36:de:d0:01:52:1d:
94:24:dc:b9:7c:83:d6:55:0f:31:f4:38:2d:c2:b8:
8b:7c:6c:ad:96:e0:c8:65:d9:0d:9f:9d:49:3e:a2:
3b:28:9d:fb:cb:c1:78:3c:89:b0:43:b3:47:ea:3f:
bb:02:fd:53:10:89:eb:f2:f0:0a:c4:b5:09:9e:af:
5c:19:d3:b5:c9:2f:63:46:bc:6e:6a:62:79:dd:5a:
f1:b4:9a:c5:cb:66:c8:5c:7f:b5:9c:75:8d:34:87:
85:63:f4:ea:60:36:9c:b2:fe:6d:f4:58:7a:9e:df:
a7:cc:b8:0e:d9:c8:c8:94:0b:6d:93:fd:d8:21:b6:
b9:f1:3a:e9:62:1f:93:f7:64:7f:70:e5:2e:d5:c2:
c8:36:21:70:0d:56:ac:2c:45:eb:30:e1:53:5b:d3:
6c:20:bc:0f:32:84:2c:dd:79:fa:55:9d:13:ae:59:
b4:6c:15:53:ee:b6:c6:66:75:64:39:3e:1e:85:09:
24:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:89:EB:1D:84:41:2C:3C:71:92:E9:DF:75:AE:C8:49:E9:7D:A5:7B
X509v3 Authority Key Identifier:
keyid:B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/GYnrHYRBLDxxkunfda7ISel9pXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.234.0/24
Signature Algorithm: sha256WithRSAEncryption
22:bb:a9:ab:4e:3d:ee:dd:67:ef:99:7a:d4:fe:61:66:05:73:
1f:ee:f3:d8:5e:1b:e7:31:38:bd:1a:f0:e5:97:ba:4b:5b:e5:
a0:a2:8e:d2:b6:25:b1:f6:b3:c7:5a:30:1d:2d:f5:30:13:3a:
ac:9d:17:c8:f8:35:8e:b9:3f:e2:7b:a8:ad:8f:97:18:6e:b5:
8d:4b:3a:6b:46:63:52:19:d6:8e:54:4c:00:9b:9b:b9:8c:1e:
32:74:2c:53:fe:f7:b4:f2:56:6e:85:44:3f:77:88:d9:f5:4c:
07:54:59:66:32:34:4f:20:6e:bf:a5:43:da:00:0d:4d:91:56:
82:bc:05:82:f4:bd:38:bd:e5:4a:09:e8:82:c9:4c:a6:f8:a8:
05:85:5b:84:96:1a:16:6b:b2:3a:86:68:e3:4a:aa:0d:a5:05:
76:f0:33:7a:65:29:c4:a7:bd:b5:e9:a5:66:c6:f6:c4:05:0e:
df:15:1a:1a:64:7a:44:a1:64:fd:d4:ab:5d:b4:bf:ce:8e:0c:
00:94:4e:3e:9c:96:2f:cc:98:18:e2:e3:5d:de:ef:c2:72:04:
54:b7:e9:2a:cd:eb:cf:e0:45:76:a2:6a:7f:28:0c:b2:ae:aa:
af:4b:34:ac:33:99:14:69:a7:ae:d5:37:ac:ad:62:54:5f:b3:
2f:a5:5f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:22:12 2025 by rpki-client