Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GgdGRDs15qxgUf0niCQMQoWYmVQ.roa
File: GgdGRDs15qxgUf0niCQMQoWYmVQ.roa (raw, json)
Hash identifier: 5EHJgoVpHS9zaEVfigkkOj0lxL02AYtgrqjRFN9Yun8=
Subject key identifier: 1A:07:46:44:3B:35:E6:AC:60:51:FD:27:88:24:0C:42:85:98:99:54
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019642496F0F144C2FAB1E31A743BC92F666
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GgdGRDs15qxgUf0niCQMQoWYmVQ.roa
Signing time: Thu 17 Apr 2025 05:47:10 +0000
ROA not before: Thu 17 Apr 2025 05:47:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213622
IP address blocks: 5.175.236.0/24 maxlen: 24
77.90.18.0/24 maxlen: 24
185.121.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Apr 2025 04:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:49:6f:0f:14:4c:2f:ab:1e:31:a7:43:bc:92:f6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 17 05:47:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a0746443b35e6ac6051fd2788240c4285989954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:06:71:32:d2:1e:01:92:3e:13:2c:e1:e5:
bd:6e:4c:9c:a7:2d:16:88:51:16:a2:27:d7:da:3f:
a0:76:20:9c:74:8e:31:ae:a6:50:5c:65:d0:4b:d3:
00:9c:9e:5c:fe:ac:c8:38:f4:bf:7b:82:05:65:98:
fb:b6:f5:58:9e:31:14:45:93:96:69:89:74:70:ca:
7f:b6:7c:76:9c:8e:a6:88:0a:9a:f0:46:af:ac:88:
38:35:b1:b9:92:f0:42:b2:af:10:a9:54:fb:31:4b:
69:0a:97:6d:e4:a2:90:44:5d:66:6d:3b:ae:d6:27:
58:f2:96:f5:2c:ac:80:86:5d:34:ff:5c:db:33:cf:
9a:44:39:1b:4f:1f:5c:15:d0:6b:70:33:5a:43:e1:
0d:60:94:91:b7:66:00:5e:12:23:0b:cb:b4:0d:e9:
34:0e:6b:40:61:47:98:ab:92:7e:0e:97:9a:ff:42:
fd:60:93:94:c6:96:32:94:5a:75:47:c2:10:0d:e0:
09:45:75:27:17:ca:8a:7f:64:a5:c3:ec:0c:bf:59:
91:fd:8c:95:35:63:e6:8e:2d:0c:2c:b8:f9:08:27:
a5:e5:bb:14:09:8a:e6:08:72:bf:40:48:b4:39:07:
8f:a6:4a:d0:9b:f4:a2:9c:07:86:41:28:3b:ca:e3:
51:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:07:46:44:3B:35:E6:AC:60:51:FD:27:88:24:0C:42:85:98:99:54
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GgdGRDs15qxgUf0niCQMQoWYmVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.236.0/24
77.90.18.0/24
185.121.69.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:fb:08:67:fa:ae:7f:67:b2:6a:69:24:78:16:86:f8:39:d3:
22:bc:3d:fa:3e:4a:78:b4:8b:8b:26:51:dc:53:06:91:38:94:
48:0f:5e:bf:6f:7f:f0:c1:12:63:3c:79:b5:c8:e0:ff:c1:f3:
1f:d3:f1:9b:f8:86:ba:bb:59:2c:55:14:59:fe:31:20:d7:03:
80:a7:6b:21:58:56:e9:46:a2:7d:bc:d9:20:f5:58:a2:2f:e6:
ee:d7:75:67:0c:f8:4f:47:27:69:57:b4:b9:f2:71:c5:cc:47:
4f:e6:58:fe:3c:18:65:44:3e:92:76:fd:9b:35:0d:9c:bf:91:
f6:07:ca:53:bd:f2:7e:82:e7:92:0c:c7:34:4a:6d:57:eb:21:
86:24:d1:74:99:42:a2:2d:25:15:70:3a:48:44:1f:44:d3:ab:
a7:15:a3:3c:ea:29:56:4c:6d:7b:bc:29:dd:6c:5a:34:26:9c:
30:7c:3f:49:c8:c5:7d:2f:78:82:97:00:e4:f1:cb:90:a3:f3:
bd:e8:e1:33:7d:4d:97:95:b6:ce:4c:90:4d:b4:0f:b4:5b:38:
c7:ea:68:4e:de:66:c2:0a:a5:22:34:6b:8f:fe:8f:84:e4:4a:
54:e9:29:07:60:5e:24:86:89:35:46:02:da:21:23:6f:e3:07:
94:2f:cb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:10:00 2025 by rpki-client