Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/guryBRbSnananAccbAQR00ULHh4.roa
File: guryBRbSnananAccbAQR00ULHh4.roa (raw, json)
Hash identifier: C7wNJnuOO+LPThKq/5nOeB4nSbOuP1x8yMOFYCh2YTc=
Subject key identifier: 82:EA:F2:05:16:D2:9D:A9:DA:9C:07:1C:6C:04:11:D3:45:0B:1E:1E
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019498842CBDCCA58F84EBBDD1B4FF074DBF
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/guryBRbSnananAccbAQR00ULHh4.roa
Signing time: Fri 24 Jan 2025 13:33:06 +0000
ROA not before: Fri 24 Jan 2025 13:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214976
IP address blocks: 2a0a:79c7:f600::/40 maxlen: 40
2a0a:79c7:f7c0::/44 maxlen: 48
2a0a:79c7:f801::/48 maxlen: 48
2a0a:79c7:f802::/48 maxlen: 48
2a0a:79c7:f900::/40 maxlen: 48
Validation: Failed, certificate revoked on Fri 24 Jan 2025 15:44:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:84:2c:bd:cc:a5:8f:84:eb:bd:d1:b4:ff:07:4d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 24 13:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82eaf20516d29da9da9c071c6c0411d3450b1e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bf:fc:65:99:5c:81:02:69:12:b7:1a:79:93:
2b:c0:fa:39:07:09:6a:af:83:9a:40:96:66:94:e3:
38:bb:b0:a8:24:9b:e0:e5:71:06:35:72:3d:de:ec:
b9:d4:ed:c0:24:2e:bb:ba:aa:8e:cc:5e:45:fb:68:
a3:a7:a5:ea:d0:87:f6:f4:5c:04:c3:19:71:0d:a0:
02:aa:3b:be:8b:8a:a9:b1:bc:a8:85:60:4f:be:cf:
9b:b7:b7:08:98:c7:1e:3b:56:e0:55:4e:bc:37:e8:
5e:03:67:33:a2:19:18:5e:59:67:52:cf:b9:2c:97:
f2:2d:4d:12:88:51:04:08:54:87:c8:15:7b:8b:1e:
34:de:26:74:18:35:a1:3b:1a:ce:7b:c2:a3:76:7e:
9e:98:c3:df:e0:85:a9:72:ba:32:a0:fa:1a:47:99:
3f:06:aa:38:7a:17:74:1d:03:ad:c3:6d:03:41:af:
a5:c7:cb:14:15:bf:7f:c2:96:89:95:57:02:d9:94:
d5:5c:6d:51:4d:a7:9f:e8:43:8e:83:48:97:f1:c2:
57:f8:ba:13:c2:90:80:5e:6d:83:5c:49:ca:dd:0d:
1f:31:31:a4:7c:d8:77:f1:c6:81:41:dd:e9:5b:27:
30:e8:37:3c:23:3f:c6:29:43:0e:de:15:4b:b9:aa:
80:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EA:F2:05:16:D2:9D:A9:DA:9C:07:1C:6C:04:11:D3:45:0B:1E:1E
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/guryBRbSnananAccbAQR00ULHh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c7:f600::/40
2a0a:79c7:f7c0::/44
2a0a:79c7:f801::-2a0a:79c7:f802:ffff:ffff:ffff:ffff:ffff
2a0a:79c7:f900::/40
Signature Algorithm: sha256WithRSAEncryption
46:0c:55:8b:49:03:32:3b:e7:4e:bf:af:90:00:be:4a:92:af:
29:75:ec:3a:49:fc:60:5e:df:2b:a7:2f:29:46:cc:03:07:74:
f1:32:19:a4:05:b0:13:d8:32:c5:01:09:12:f2:cd:13:aa:02:
06:f4:70:0e:eb:07:d0:e9:35:e5:4e:c4:15:3d:6d:a7:a0:8f:
cb:3e:20:df:00:b5:61:62:4d:c0:95:67:75:72:46:82:26:87:
97:1d:42:81:1f:ad:06:33:22:cb:46:e7:ab:93:4b:25:4c:62:
36:31:7a:73:6d:e9:02:22:53:e8:25:fc:1c:e1:70:57:e5:3f:
94:1c:d3:9a:b7:21:8d:22:03:c0:cb:b9:20:43:0a:ff:11:ed:
75:fd:05:ef:91:71:6a:26:40:d3:b5:28:95:e7:90:ef:04:f8:
d4:33:33:0b:7d:fa:80:69:88:a0:79:b0:a0:ed:6e:b7:21:d9:
2a:e4:3d:23:86:ac:f5:dd:52:0a:f0:b2:f8:c0:32:40:e8:98:
56:ba:f6:c1:d0:2e:66:ea:e1:05:d3:e5:70:2a:87:06:08:40:
75:ec:ca:ba:9a:0a:da:01:53:c6:0f:d6:9d:c4:ba:cf:56:b6:
96:78:73:55:68:59:ce:6a:8e:6f:cc:fc:89:30:60:05:b4:7c:
c1:00:a7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:46:57 2025 by rpki-client