Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/GHthEJRc3qkOLjE6AzmP_42WwVc.roa
File: GHthEJRc3qkOLjE6AzmP_42WwVc.roa (raw, json)
Hash identifier: i1z7wGTFW68PTZF8q9lDOrI/BCI3ijmnIQcdzaT/zJo=
Subject key identifier: 18:7B:61:10:94:5C:DE:A9:0E:2E:31:3A:03:39:8F:FF:8D:96:C1:57
Certificate issuer: /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial: 019194609354DB05B5EEBE9EB517C5C09604
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/GHthEJRc3qkOLjE6AzmP_42WwVc.roa
Signing time: Tue 27 Aug 2024 15:07:22 +0000
ROA not before: Tue 27 Aug 2024 15:07:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202799
IP address blocks: 89.169.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 17:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:94:60:93:54:db:05:b5:ee:be:9e:b5:17:c5:c0:96:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
Validity
Not Before: Aug 27 15:07:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=187b6110945cdea90e2e313a03398fff8d96c157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:50:7d:2c:6c:f4:eb:e9:95:ed:e7:cd:24:c9:
ed:cd:84:aa:bc:b8:f8:06:f8:d9:85:12:b2:de:30:
1d:70:ae:3c:78:07:28:db:43:f3:8d:65:07:88:cf:
88:28:5a:93:23:7b:2b:a3:ae:01:4e:ea:e3:18:7f:
33:13:d6:09:2c:5d:5b:7b:25:d4:a4:92:f1:08:51:
8e:3a:56:39:09:c0:6e:f4:4e:6f:58:b5:44:69:2a:
6f:97:9d:01:8c:9b:a1:00:cb:28:b4:38:d5:cf:16:
79:10:da:f8:2e:1c:86:4d:37:2d:18:97:e8:03:dd:
e4:2b:51:69:83:c9:40:a5:cf:6e:17:86:72:36:13:
f7:d9:31:1d:01:cd:ce:83:f3:00:95:b3:38:0a:e2:
4d:53:27:9a:64:26:db:52:ce:d1:e0:79:33:62:c4:
72:32:a5:3d:d7:cb:99:06:76:b9:04:83:4a:06:54:
7f:68:0c:8a:fb:9f:90:0b:dc:51:3d:d8:3c:54:96:
56:b1:1a:dc:16:7b:54:e4:21:1a:6a:c3:38:ff:4a:
f7:ff:a9:c1:0d:d3:2b:0a:a6:54:7a:12:a2:c2:b1:
a4:31:a0:1d:e4:cd:76:69:8e:12:a1:1c:85:3a:74:
3f:f2:23:b8:9a:3f:de:dd:63:e6:12:b7:75:10:95:
db:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7B:61:10:94:5C:DE:A9:0E:2E:31:3A:03:39:8F:FF:8D:96:C1:57
X509v3 Authority Key Identifier:
keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/GHthEJRc3qkOLjE6AzmP_42WwVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.169.15.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:87:10:31:78:ee:d1:9a:48:55:8b:31:a2:06:0c:96:d3:4e:
26:af:85:4e:ee:3a:34:a9:c9:4b:f4:b0:68:c0:d6:7e:15:42:
28:07:1e:5a:c4:c6:01:3b:2e:1e:87:8e:e0:6f:a5:0f:be:56:
27:90:84:3f:4d:14:8b:4f:a9:ee:fe:c5:20:35:32:f3:96:41:
2b:e0:0f:e1:90:fe:34:62:37:d7:94:0d:64:6f:b3:55:f7:db:
38:18:ab:03:25:bd:7b:00:5a:a4:52:46:75:88:10:45:9f:e9:
89:3b:33:43:ab:e8:0d:5d:9b:3f:8f:e7:65:e2:33:a2:d9:4c:
5a:ed:9d:23:90:b7:3a:26:0f:7f:a9:85:30:56:65:0b:f7:b4:
68:68:82:a0:d2:d5:d0:94:4d:53:93:d2:ec:8b:ba:37:37:da:
65:08:84:31:73:87:20:74:f3:01:a4:c6:84:58:99:9b:e5:e5:
85:aa:88:36:d1:1d:36:af:ea:42:98:d9:ac:95:d9:87:6f:79:
13:73:7a:aa:b3:50:a5:91:62:fc:4b:07:0a:6c:7e:c3:0a:65:
5e:95:15:a9:71:c2:20:80:83:72:ab:c9:10:b8:5d:49:09:b8:
8f:c0:10:c3:cd:96:8d:c4:14:5a:bd:4b:e4:29:71:7a:cf:ba:
d0:67:b7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:43:16 2025 by rpki-client