Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/GR0zJ7U2eqPy_BJDoObwKrJUtTE.roa
File: GR0zJ7U2eqPy_BJDoObwKrJUtTE.roa (raw, json)
Hash identifier: 0Djnd91aOnG1rNKbEWJXg3Ew19tVZ4CWCNm/ETHpGnk=
Subject key identifier: 19:1D:33:27:B5:36:7A:A3:F2:FC:12:43:A0:E6:F0:2A:B2:54:B5:31
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 01930D422ED00518414AB543C8919817D9BD
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/GR0zJ7U2eqPy_BJDoObwKrJUtTE.roa
Signing time: Fri 08 Nov 2024 19:31:01 +0000
ROA not before: Fri 08 Nov 2024 19:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9119
IP address blocks: 2.58.48.0/22 maxlen: 22
45.8.0.0/22 maxlen: 22
45.15.44.0/22 maxlen: 22
45.156.140.0/23 maxlen: 23
45.156.140.0/24 maxlen: 24
46.163.0.0/19 maxlen: 19
46.163.32.0/20 maxlen: 20
46.163.48.0/21 maxlen: 21
46.163.56.0/23 maxlen: 23
46.163.56.0/24 maxlen: 24
46.163.58.0/23 maxlen: 23
46.163.58.0/24 maxlen: 24
46.163.59.0/24 maxlen: 24
46.163.60.0/22 maxlen: 22
80.65.160.0/20 maxlen: 20
80.65.160.0/24 maxlen: 24
80.65.161.0/24 maxlen: 24
80.65.162.0/24 maxlen: 24
80.65.163.0/24 maxlen: 24
80.65.164.0/24 maxlen: 24
80.65.165.0/24 maxlen: 24
80.65.166.0/24 maxlen: 24
80.65.167.0/24 maxlen: 24
80.65.168.0/24 maxlen: 24
80.65.169.0/24 maxlen: 24
80.65.170.0/24 maxlen: 24
80.65.171.0/24 maxlen: 24
80.65.172.0/22 maxlen: 22
80.65.172.0/24 maxlen: 24
80.65.173.0/24 maxlen: 24
80.65.174.0/24 maxlen: 24
80.65.175.0/24 maxlen: 24
84.41.0.0/18 maxlen: 18
84.41.0.0/19 maxlen: 19
84.41.0.0/21 maxlen: 21
84.41.32.0/19 maxlen: 19
84.41.64.0/19 maxlen: 19
84.41.96.0/21 maxlen: 21
84.41.104.0/22 maxlen: 22
84.41.108.0/23 maxlen: 23
84.41.110.0/24 maxlen: 24
84.41.111.0/24 maxlen: 24
84.41.112.0/23 maxlen: 23
84.41.114.0/24 maxlen: 24
84.41.115.0/24 maxlen: 24
84.41.116.0/22 maxlen: 22
84.41.120.0/23 maxlen: 23
84.41.122.0/23 maxlen: 23
84.41.124.0/22 maxlen: 22
85.208.172.0/24 maxlen: 24
85.208.175.0/24 maxlen: 24
91.132.74.0/23 maxlen: 23
147.78.216.0/22 maxlen: 22
147.78.216.0/24 maxlen: 24
147.78.217.0/24 maxlen: 24
147.78.218.0/24 maxlen: 24
185.54.128.0/23 maxlen: 23
185.54.128.0/24 maxlen: 24
185.54.130.0/24 maxlen: 24
185.54.131.0/24 maxlen: 24
185.175.0.0/22 maxlen: 22
212.13.224.0/19 maxlen: 19
212.103.128.0/19 maxlen: 19
213.253.64.0/19 maxlen: 19
213.253.96.0/20 maxlen: 20
213.253.96.0/21 maxlen: 21
213.253.104.0/22 maxlen: 22
213.253.108.0/22 maxlen: 22
213.253.108.0/24 maxlen: 24
213.253.109.0/24 maxlen: 24
213.253.110.0/24 maxlen: 24
213.253.111.0/24 maxlen: 24
213.253.112.0/22 maxlen: 22
213.253.116.0/22 maxlen: 22
213.253.120.0/22 maxlen: 22
213.253.124.0/22 maxlen: 22
217.199.128.0/20 maxlen: 24
217.199.128.0/24 maxlen: 24
217.199.129.0/24 maxlen: 24
217.199.130.0/24 maxlen: 24
217.199.131.0/24 maxlen: 24
217.199.132.0/24 maxlen: 24
217.199.133.0/24 maxlen: 24
217.199.134.0/24 maxlen: 24
217.199.135.0/24 maxlen: 24
217.199.136.0/24 maxlen: 24
217.199.137.0/24 maxlen: 24
217.199.138.0/24 maxlen: 24
217.199.139.0/24 maxlen: 24
217.199.140.0/24 maxlen: 24
217.199.141.0/24 maxlen: 24
217.199.142.0/24 maxlen: 24
217.199.143.0/24 maxlen: 24
2a02:800::/32 maxlen: 32
2a02:801::/32 maxlen: 32
2a02:801::/33 maxlen: 33
2a02:805::/33 maxlen: 33
2a09:e140::/29 maxlen: 29
2a0b:c300::/29 maxlen: 29
2a0b:c306::/32 maxlen: 32
2a0b:c307::/32 maxlen: 32
2a0e:1e80::/29 maxlen: 29
2a0e:2e00::/29 maxlen: 29
2a0f:2180::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0d:42:2e:d0:05:18:41:4a:b5:43:c8:91:98:17:d9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Nov 8 19:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=191d3327b5367aa3f2fc1243a0e6f02ab254b531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0b:87:66:42:a8:8c:7c:f2:49:5b:d6:c4:46:
d9:fe:eb:cf:3b:41:17:f3:04:24:9c:71:de:0a:b4:
e8:12:b9:17:15:b5:b6:96:b8:3b:52:66:01:e4:c7:
f4:cd:38:85:5f:af:8e:1f:c5:a5:9d:e9:7c:91:bc:
7d:5c:aa:e4:49:8a:6b:4b:94:6e:7e:a7:3e:2f:fc:
e8:2b:a1:7c:80:d8:1f:8a:9a:81:d2:0c:95:00:07:
26:11:69:34:0e:7c:ca:de:a3:2f:1e:3e:cb:51:8d:
d7:4a:f9:2f:3d:51:59:7e:07:51:5e:81:be:d2:97:
ad:2e:a9:b0:bb:da:2b:fa:80:3c:5c:b5:37:26:34:
67:7a:5a:10:9d:c6:89:4f:cc:7e:de:26:a4:04:e4:
5c:7d:98:75:08:26:70:c2:75:52:40:63:f8:15:51:
38:64:70:df:db:86:ee:81:b1:4e:39:bb:3a:b1:92:
2f:4a:49:85:3d:38:c6:26:0e:2e:31:ac:42:2f:70:
25:41:7a:57:99:7f:79:15:ff:d1:bc:b1:19:2d:a4:
87:68:88:f8:25:bc:e9:eb:25:ec:14:fe:51:75:40:
98:bd:af:22:76:67:36:45:1f:68:ca:28:4a:6f:29:
a0:96:8f:52:58:5b:da:b4:16:74:08:cf:d5:76:d8:
9e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1D:33:27:B5:36:7A:A3:F2:FC:12:43:A0:E6:F0:2A:B2:54:B5:31
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/GR0zJ7U2eqPy_BJDoObwKrJUtTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.48.0/22
45.8.0.0/22
45.15.44.0/22
45.156.140.0/23
46.163.0.0/18
80.65.160.0/20
84.41.0.0/17
85.208.172.0/24
85.208.175.0/24
91.132.74.0/23
147.78.216.0/22
185.54.128.0/22
185.175.0.0/22
212.13.224.0/19
212.103.128.0/19
213.253.64.0/18
217.199.128.0/20
IPv6:
2a02:800::/31
2a02:805::/33
2a09:e140::/29
2a0b:c300::/29
2a0e:1e80::/29
2a0e:2e00::/29
2a0f:2180::/29
Signature Algorithm: sha256WithRSAEncryption
6c:e2:5c:aa:22:d1:b6:e1:77:f7:89:e9:d5:8a:2f:9d:c9:3a:
e8:eb:02:89:1a:55:ed:c1:5e:bc:25:cf:4a:0c:c4:cc:75:7b:
21:b4:d5:e6:36:a9:3d:64:e9:e7:db:f2:9c:d6:9b:cb:9a:75:
b1:51:06:4f:2c:0d:8d:9a:e7:43:3c:e5:af:89:b7:57:70:7a:
db:a3:01:4e:86:87:db:22:15:6b:a3:04:f1:48:e8:a4:55:b1:
76:81:83:12:e4:35:1a:84:66:48:0d:b6:43:77:f8:7d:c6:1a:
18:02:b1:65:02:76:12:fc:2a:5b:44:cd:a2:b4:16:fa:cd:45:
9c:99:4b:ab:c1:bb:e1:19:84:29:2c:68:b4:08:65:e0:58:8f:
2d:e1:83:5f:47:c2:81:4b:83:0a:ae:2d:0c:b9:2b:d1:19:76:
4f:ef:88:77:79:ad:6f:05:28:20:ae:7f:9a:5f:5e:81:45:76:
d7:57:84:3f:2d:73:2b:cd:99:a6:86:e4:01:3e:4e:af:45:43:
75:3b:14:0e:9b:a4:08:8c:03:a6:9c:17:77:b3:f3:c6:e8:1b:
02:ba:e1:14:11:46:b3:9e:c8:fb:ad:a1:e8:be:26:0d:89:0a:
02:f6:3d:7d:c5:a2:79:07:6a:95:7c:1a:52:f4:a6:a9:6c:1c:
0b:56:a2:f1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:11:21 2025 by rpki-client