Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/GtX-LTbXLf9dl75_sUuz-owg3dw.roa
File: GtX-LTbXLf9dl75_sUuz-owg3dw.roa (raw, json)
Hash identifier: 0k5wcct/cCFy9gazIAXh3yvkwxJkwe/c2Zf/IL04GMo=
Subject key identifier: 1A:D5:FE:2D:36:D7:2D:FF:5D:97:BE:7F:B1:4B:B3:FA:8C:20:DD:DC
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 01943F5E197614C6EEE0BCF57663E8AD2328
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/GtX-LTbXLf9dl75_sUuz-owg3dw.roa
Signing time: Tue 07 Jan 2025 06:05:18 +0000
ROA not before: Tue 07 Jan 2025 06:05:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 188.72.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 06:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3f:5e:19:76:14:c6:ee:e0:bc:f5:76:63:e8:ad:23:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Jan 7 06:05:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ad5fe2d36d72dff5d97be7fb14bb3fa8c20dddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:e9:f1:1e:83:2a:26:fb:c6:35:4e:23:2a:
2f:89:cc:98:3f:da:6e:5d:c9:af:36:f8:db:92:18:
92:6a:6a:19:e5:69:84:28:6f:79:ee:c8:e3:2f:04:
76:6c:e3:17:97:bf:00:7f:64:58:2e:10:e4:29:af:
70:0f:8f:03:f0:a7:35:99:6a:72:98:d3:f4:38:41:
d3:d4:6b:ad:5f:96:a2:14:04:28:a4:db:4a:ca:1b:
00:f3:e5:34:e3:a6:b5:27:b6:28:e0:3c:48:95:97:
f5:69:c7:21:db:5b:da:8e:8d:31:6c:2f:40:6c:aa:
3c:e9:7f:25:ba:cb:aa:1c:48:33:0d:90:88:8b:a4:
44:e5:41:08:88:bf:df:26:09:dd:58:50:85:77:f5:
f3:1f:46:67:da:7b:94:e4:21:53:f2:ef:5e:3d:f3:
1e:d9:7a:8e:69:52:73:61:3b:97:40:20:ed:98:7d:
85:3c:c5:ac:90:9c:35:41:ff:64:11:c8:7d:c9:ef:
5f:9a:cb:44:1a:3f:b6:a6:c3:62:49:8f:5c:4e:d0:
60:8d:39:5e:8b:05:4f:ca:6b:e3:0f:30:15:aa:f7:
1c:ca:1c:38:06:48:cd:3a:95:eb:a2:76:d7:2d:f8:
53:e4:26:6d:4e:fd:17:2f:59:a2:f4:a4:d0:f4:be:
99:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D5:FE:2D:36:D7:2D:FF:5D:97:BE:7F:B1:4B:B3:FA:8C:20:DD:DC
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/GtX-LTbXLf9dl75_sUuz-owg3dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.49.0/24
Signature Algorithm: sha256WithRSAEncryption
24:83:2b:22:19:a1:82:f3:6a:73:8d:90:24:45:7e:ca:f1:39:
1d:ba:9e:e4:77:09:e5:6c:a4:44:18:e6:d4:c0:71:39:f2:38:
af:3e:f4:2c:3f:33:5e:06:8f:7a:00:ad:99:67:0e:2f:02:33:
ff:78:1f:32:85:bd:c6:71:5e:bb:46:21:5d:1d:38:5c:31:df:
bc:19:dd:39:a4:9f:d0:3f:09:b5:d4:a7:cd:f4:a3:4a:08:7e:
f7:e8:e0:df:05:b8:ca:27:e4:16:4d:29:f8:d8:b3:02:54:b0:
6b:c8:8f:92:0c:07:b9:47:91:9c:69:2b:8b:ee:d4:ab:58:db:
1c:5a:f9:54:eb:1f:a3:d9:b9:22:6a:c3:86:ef:bb:36:79:9c:
4d:32:56:9b:aa:5d:12:da:b6:e7:43:46:db:41:1a:7d:8f:71:
a9:30:03:b7:3e:e6:60:5b:4f:4a:aa:95:95:64:1e:4c:11:f7:
19:49:fb:a1:91:91:f6:fe:c1:1c:fc:a4:33:53:92:05:94:19:
58:09:dc:8d:71:ba:0c:b8:7f:32:7f:7e:79:7f:07:cb:2e:a8:
d3:16:c5:be:ac:6b:88:1b:a9:f3:d2:55:c7:82:42:16:89:7c:
d3:ae:72:5e:20:9f:0c:b1:23:9a:44:67:2a:1d:4c:19:7c:08:
cc:49:24:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:07:21 2025 by rpki-client