Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gFkOB_qp-Tx36cqFoRKXENY2dKU.roa
File: gFkOB_qp-Tx36cqFoRKXENY2dKU.roa (raw, json)
Hash identifier: 5CMT7qwET5e55FBOJoaknU4dXTBzXR5sYJ/03uZC+As=
Subject key identifier: 80:59:0E:07:FA:A9:F9:3C:77:E9:CA:85:A1:12:97:10:D6:36:74:A5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196175F6FA17D61E758F5F474FA2E656178
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gFkOB_qp-Tx36cqFoRKXENY2dKU.roa
Signing time: Tue 08 Apr 2025 21:47:32 +0000
ROA not before: Tue 08 Apr 2025 21:47:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212824
IP address blocks: 178.18.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Apr 2025 04:15:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:17:5f:6f:a1:7d:61:e7:58:f5:f4:74:fa:2e:65:61:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 8 21:47:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80590e07faa9f93c77e9ca85a1129710d63674a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:af:db:e4:01:d2:80:a3:33:df:92:71:a5:9c:
11:72:bb:a0:71:4a:a7:5b:44:21:f5:6a:f5:a5:f4:
c0:f4:3a:ca:72:00:d0:d8:24:a4:7b:20:a7:73:81:
73:09:54:80:23:67:20:5d:99:e2:69:71:bf:b5:0a:
24:67:7e:82:8d:e8:1f:ea:f5:06:22:e0:c6:28:be:
c0:4f:ea:70:0c:97:0c:b1:40:00:86:6f:00:a0:d4:
78:ba:47:8c:90:5b:6e:89:1a:2a:ae:f2:04:62:d1:
a2:81:25:df:fe:c9:aa:81:f9:d1:f0:99:30:3d:93:
e9:c4:7c:ad:41:70:65:be:17:97:eb:57:a7:2d:b3:
88:5a:71:37:f7:a6:59:03:41:20:6b:3f:40:36:1f:
49:d7:a5:a8:49:5f:28:59:53:a8:08:91:ca:80:88:
74:17:c4:01:43:e8:48:98:33:8f:88:05:3d:f6:7e:
6c:ee:a9:76:8f:a1:68:55:d4:22:d4:d4:1b:e6:3c:
6d:c0:69:d0:39:d4:9a:4b:84:69:c8:10:54:b0:c8:
ae:74:fd:71:48:f5:25:02:fd:72:45:b7:78:94:bf:
0d:4f:33:b9:3a:2e:ca:86:55:48:47:ef:8b:29:ca:
4a:32:2f:2d:c1:00:7d:cc:16:20:76:e9:b1:ba:7c:
9c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:59:0E:07:FA:A9:F9:3C:77:E9:CA:85:A1:12:97:10:D6:36:74:A5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gFkOB_qp-Tx36cqFoRKXENY2dKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.18.151.0/24
Signature Algorithm: sha256WithRSAEncryption
de:c2:3e:b3:03:ca:a9:de:e9:7e:aa:5c:68:2c:7d:88:29:31:
3a:d3:79:07:0b:5f:a3:a0:ff:2c:bb:a1:9e:77:86:36:be:32:
5d:b2:05:e5:e8:b0:a2:48:f9:fe:ed:27:27:a9:80:d5:b0:6d:
78:52:e5:73:8b:b8:cf:a3:34:c3:56:9e:57:45:c5:69:2c:56:
64:c7:14:5a:8e:dd:7c:0b:75:c2:94:3c:3f:f5:53:dc:5e:81:
6c:40:b9:9a:b0:e9:c8:ce:a8:5e:d6:30:24:50:48:04:de:30:
78:6f:42:a3:04:c2:6f:70:bc:2c:61:43:72:34:70:21:ff:3a:
ce:1b:76:9b:39:d7:48:0f:fc:18:2f:86:7c:c0:8a:71:23:00:
c0:5d:4f:88:59:8e:3e:5f:a4:7f:d6:0c:50:d8:06:a9:f7:bf:
4f:fe:17:d8:77:37:ca:68:ee:ba:0f:f7:74:ae:41:61:18:bb:
c2:e1:2f:60:19:24:55:4b:5e:c4:b8:d6:f0:5d:24:10:3e:95:
25:77:fe:d4:bb:36:50:3a:3e:54:d3:7f:cf:18:60:34:08:31:
41:7f:0d:4d:6a:ae:ec:16:f4:cb:d5:f7:3b:54:93:cd:27:43:
0c:dd:a5:25:92:18:97:fb:fb:52:c6:47:8e:b4:93:05:a5:dd:
08:b1:35:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:24:37 2025 by rpki-client