Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/GdsC_bVJWRFMGpm0ybd9408xKdQ.roa
File: GdsC_bVJWRFMGpm0ybd9408xKdQ.roa (raw, json)
Hash identifier: YaVjzI3+pdsFSqQEgRgO2BJF5MyriAkX5iiv++PUQnw=
Subject key identifier: 19:DB:02:FD:B5:49:59:11:4C:1A:99:B4:C9:B7:7D:E3:4F:31:29:D4
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 01917E4787AC5E8535C92F03230E30452E70
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/GdsC_bVJWRFMGpm0ybd9408xKdQ.roa
Signing time: Fri 23 Aug 2024 08:08:22 +0000
ROA not before: Fri 23 Aug 2024 08:08:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 95.214.38.0/24 maxlen: 24
95.214.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Aug 2024 08:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7e:47:87:ac:5e:85:35:c9:2f:03:23:0e:30:45:2e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Aug 23 08:08:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19db02fdb54959114c1a99b4c9b77de34f3129d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:73:4c:0d:b2:71:a8:fb:7b:2c:e1:87:a8:89:
0d:32:1e:8b:32:1a:42:00:59:0f:cc:86:93:07:05:
13:5e:e8:db:0b:5b:42:f7:55:64:7b:62:af:b8:a2:
cf:2f:28:1a:ff:1b:99:66:26:74:1c:8e:50:56:6b:
87:eb:16:80:af:49:11:2c:53:17:8d:1a:82:98:00:
a9:4d:b0:81:a0:b7:b3:1f:46:47:4a:51:67:10:4d:
63:5e:12:b7:09:b0:e0:d5:0d:12:b1:f4:74:99:88:
bf:73:9e:16:1c:41:c0:0e:16:2b:1a:ef:6a:fe:65:
20:71:d8:7a:cf:58:bb:b8:75:e6:bd:c0:31:99:91:
e9:de:7f:47:d8:57:b0:bb:a6:66:f3:fc:04:3b:8f:
f6:08:a6:02:79:52:b3:8b:37:72:96:b0:08:0f:97:
28:f1:46:89:f9:07:5f:cc:93:59:21:15:24:aa:18:
20:06:a0:51:74:97:1f:86:85:80:7c:a4:d3:4e:28:
dc:b4:44:25:b5:90:50:1b:c2:4b:86:32:2e:f3:ed:
3f:d5:a1:e7:ac:33:48:4a:ff:83:9c:33:0b:7f:e2:
82:3b:8a:6a:c6:e6:56:59:57:21:33:2a:5b:ce:39:
f3:64:bd:28:69:53:66:42:c7:76:1c:35:e4:8e:5b:
8f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DB:02:FD:B5:49:59:11:4C:1A:99:B4:C9:B7:7D:E3:4F:31:29:D4
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/GdsC_bVJWRFMGpm0ybd9408xKdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.38.0/23
Signature Algorithm: sha256WithRSAEncryption
90:e1:15:89:ae:ff:6a:2f:95:fb:20:d3:42:ef:d3:44:7c:30:
2b:84:4d:1a:0c:e9:6b:9a:d0:cb:01:a7:d7:34:5e:9e:18:3f:
d5:0c:90:e8:61:1a:d4:07:02:5d:70:3c:4c:b9:f2:df:57:37:
2f:9d:86:9a:e2:9d:6b:56:7e:9d:71:5f:84:8a:48:56:c1:7c:
3f:fe:5b:65:34:dd:4b:d9:73:30:dc:a4:55:dc:a0:07:f9:f9:
da:79:cb:18:7d:c6:ab:ce:75:32:9b:57:2c:06:28:62:55:8e:
78:be:13:62:10:7c:da:0e:5d:71:8d:29:ec:4b:2a:f2:09:1b:
50:68:67:29:36:07:a7:9c:45:a8:81:66:b1:75:8b:de:4c:f9:
77:a9:5e:07:22:8a:f3:1b:28:e9:f5:37:f8:fa:80:24:ad:1d:
dc:d9:8f:b3:78:09:0d:4e:71:0c:06:a7:62:4b:84:84:a7:9c:
93:24:32:25:00:e7:24:0c:2f:f1:90:f6:45:fd:8e:bc:23:da:
0c:21:7f:57:d2:dd:75:24:85:e8:7a:be:1c:1d:b6:06:6a:0f:
7e:fd:b2:61:42:29:03:67:e3:61:4d:2f:0f:e2:38:4e:a3:83:
b8:28:0e:58:7f:03:b2:d8:3c:ef:1d:14:2c:98:d6:0f:5a:08:
9d:b0:ad:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:42:51 2025 by rpki-client