Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/GsaRECilr3f5WvvSEwAx_pW0Teo.roa
File: GsaRECilr3f5WvvSEwAx_pW0Teo.roa (raw, json)
Hash identifier: kMHtaZ879kZ2NwF5Xx4ySfI4xKltFNpE7N6+ni0773s=
Subject key identifier: 1A:C6:91:10:28:A5:AF:77:F9:5A:FB:D2:13:00:31:FE:95:B4:4D:EA
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01973730DA1921F9E64A13850909DC3506C9
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/GsaRECilr3f5WvvSEwAx_pW0Teo.roa
Signing time: Tue 03 Jun 2025 19:07:17 +0000
ROA not before: Tue 03 Jun 2025 19:07:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213355
IP address blocks: 45.129.196.0/24 maxlen: 24
88.214.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 19:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:37:30:da:19:21:f9:e6:4a:13:85:09:09:dc:35:06:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jun 3 19:07:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ac6911028a5af77f95afbd2130031fe95b44dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a2:26:fe:00:35:78:ec:9a:e4:00:ae:27:0b:
fb:9e:ec:32:dd:86:82:4e:08:dc:24:a8:e3:65:2c:
75:b9:8a:25:0a:d2:40:44:6a:7c:73:dd:4b:4f:bf:
45:64:5e:54:b2:92:92:da:2f:36:bb:0e:13:f3:7e:
19:4d:fb:05:83:f5:e5:66:ae:21:e9:ff:43:24:94:
26:6f:b4:b8:4b:32:7f:ca:0c:78:12:07:eb:55:fd:
99:ba:42:f4:39:a9:6b:08:29:0f:fc:78:fb:d2:50:
42:01:a9:20:57:0d:03:ed:64:d6:65:b5:c2:d1:09:
f5:1d:cc:c6:e9:af:27:49:c9:21:82:06:cb:d1:e2:
74:d2:57:dd:69:d0:df:29:a4:ab:f6:0c:6d:94:9f:
48:a7:97:52:16:4b:24:cc:93:3c:77:a7:d0:38:16:
21:01:a6:24:0b:b8:67:85:cd:28:1a:be:3d:0e:0d:
24:e1:c6:20:e0:03:9e:5b:d4:15:1a:8b:66:a8:e6:
8d:bf:57:35:b6:33:b3:dc:07:2d:24:aa:56:57:2b:
a6:e6:b6:0c:96:c8:9c:e2:44:c8:f8:80:8d:cd:b3:
0b:4d:0f:4c:10:14:22:a7:2e:32:fa:7f:aa:f0:11:
cf:14:d7:c7:e8:7e:e4:1f:c1:70:2e:dd:4f:ca:d6:
9c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C6:91:10:28:A5:AF:77:F9:5A:FB:D2:13:00:31:FE:95:B4:4D:EA
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/GsaRECilr3f5WvvSEwAx_pW0Teo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.196.0/24
88.214.48.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:f2:41:69:49:de:97:33:77:22:7e:c7:b5:2b:44:80:cc:16:
40:15:91:e9:5e:6f:6f:a7:05:e3:ad:34:de:b4:a3:e3:4c:b1:
b6:5c:0a:93:8e:e8:23:c0:6b:65:9f:28:86:74:22:6e:e3:a5:
cf:1d:cd:14:dd:7f:1d:40:2d:18:66:b1:0d:61:bb:16:ab:a3:
78:98:ad:88:28:c1:83:7b:49:e0:4d:23:ee:c4:82:9d:c6:db:
af:ec:6d:b5:a7:dd:00:5c:a0:2c:15:be:33:03:7b:39:11:02:
e5:75:53:50:56:c9:cd:5f:eb:c3:d8:3b:59:ab:31:c7:b9:02:
29:06:ec:f9:0a:16:c4:6a:57:89:2c:e7:8a:0d:4b:77:2b:a3:
8e:16:92:8d:18:a6:21:8c:27:d5:c6:78:f7:f9:94:bc:79:c3:
34:a0:d1:6a:de:ca:32:6a:fe:de:b8:35:ef:6b:fa:ff:79:ee:
34:43:e2:ed:b1:6c:44:6d:30:fa:49:7f:09:ea:81:fc:34:cb:
f5:0d:1b:d8:1f:1e:62:67:a2:c0:a8:b4:7f:35:2c:93:c8:94:
4e:e0:25:9d:a3:6b:6e:5b:dc:9b:56:2b:f9:3e:93:84:42:46:
c3:9d:3d:a5:2f:b5:40:56:36:09:47:50:b9:79:ca:11:60:50:
8b:c9:f1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:33:31 2025 by rpki-client