Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/gkkrhQ-S300JcmIkCA2-ZP1m1eY.roa
File: gkkrhQ-S300JcmIkCA2-ZP1m1eY.roa (raw, json)
Hash identifier: W32MReEgmJVbbxJ619xhoA5euuRTsIo2W7B8p1licDc=
Subject key identifier: 82:49:2B:85:0F:92:DF:4D:09:72:62:24:08:0D:BE:64:FD:66:D5:E6
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 01877F6E82770179EAEBB5A234DAEE61E189
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/gkkrhQ-S300JcmIkCA2-ZP1m1eY.roa
Signing time: Fri 14 Apr 2023 11:02:41 +0000
ROA not before: Fri 14 Apr 2023 11:02:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42313
IP address blocks: 79.106.242.0/23 maxlen: 23
79.106.244.0/23 maxlen: 23
79.106.240.0/21 maxlen: 21
79.106.246.0/23 maxlen: 23
79.106.255.0/24 maxlen: 24
79.106.254.0/24 maxlen: 24
185.171.146.0/24 maxlen: 24
185.171.144.0/23 maxlen: 23
79.106.84.0/24 maxlen: 24
79.106.90.0/24 maxlen: 24
79.106.95.0/24 maxlen: 24
79.106.96.0/19 maxlen: 19
79.106.94.0/23 maxlen: 23
79.106.104.0/24 maxlen: 24
79.106.102.0/24 maxlen: 24
79.106.103.0/24 maxlen: 24
79.106.101.0/24 maxlen: 24
79.106.107.0/24 maxlen: 24
79.106.118.0/23 maxlen: 23
79.106.117.0/24 maxlen: 24
79.106.125.0/24 maxlen: 24
79.106.123.0/24 maxlen: 24
79.106.124.0/24 maxlen: 24
79.106.122.0/24 maxlen: 24
79.106.120.0/24 maxlen: 24
79.106.127.0/24 maxlen: 24
79.106.128.0/19 maxlen: 19
79.106.126.0/24 maxlen: 24
79.106.32.0/19 maxlen: 19
79.106.37.0/24 maxlen: 24
79.106.56.0/22 maxlen: 22
79.106.64.0/19 maxlen: 19
79.106.64.0/24 maxlen: 24
79.106.77.0/24 maxlen: 24
79.106.192.0/19 maxlen: 19
79.106.195.0/24 maxlen: 24
79.106.194.0/23 maxlen: 23
79.106.196.0/24 maxlen: 24
79.106.205.0/24 maxlen: 24
79.106.204.0/24 maxlen: 24
79.106.210.0/24 maxlen: 24
79.106.211.0/24 maxlen: 24
79.106.209.0/24 maxlen: 24
79.106.207.0/24 maxlen: 24
79.106.215.0/24 maxlen: 24
79.106.214.0/24 maxlen: 24
79.106.218.0/23 maxlen: 23
79.106.220.0/24 maxlen: 24
79.106.224.0/19 maxlen: 19
79.106.230.0/24 maxlen: 24
79.106.229.0/24 maxlen: 24
79.106.228.0/24 maxlen: 24
79.106.232.0/22 maxlen: 22
79.106.240.0/23 maxlen: 23
79.106.160.0/19 maxlen: 19
79.106.176.0/21 maxlen: 21
79.106.0.0/24 maxlen: 24
79.106.0.0/19 maxlen: 19
79.106.0.0/17 maxlen: 17
79.106.0.0/16 maxlen: 16
217.24.240.0/21 maxlen: 21
217.24.240.0/20 maxlen: 20
217.24.248.0/21 maxlen: 21
217.24.248.0/24 maxlen: 24
217.24.254.0/24 maxlen: 24
2a05:fdc0::/32 maxlen: 32
2a05:fdc0:3200::/40 maxlen: 40
2a05:fdc0:3100::/40 maxlen: 40
2a05:fdc0:2300::/40 maxlen: 40
2a05:fdc0:2200::/40 maxlen: 40
2a05:fdc2:6000::/36 maxlen: 36
2a05:fdc2:9000::/36 maxlen: 36
2a05:fdc2:1000::/36 maxlen: 36
2a05:fdc2:4000::/36 maxlen: 36
2a05:fdc2:3000::/36 maxlen: 36
2a05:fdc2:2000::/36 maxlen: 36
2a05:fdc2::/32 maxlen: 32
2a05:fdc2:7000::/36 maxlen: 36
2a05:fdc2:8000::/36 maxlen: 36
2a05:fdc0::/29 maxlen: 29
2a05:fdc1::/32 maxlen: 32
2a05:fdc0:1000::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 14 Apr 2023 12:38:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:6e:82:77:01:79:ea:eb:b5:a2:34:da:ee:61:e1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: Apr 14 11:02:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82492b850f92df4d09726224080dbe64fd66d5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:af:bb:34:32:4c:fe:cd:51:0c:1c:a7:87:
26:7d:12:0b:e2:92:3f:9c:b0:dd:ef:83:64:d6:57:
65:f7:9c:b9:cb:48:c3:84:7a:10:69:ce:73:ff:be:
7d:72:40:2f:a4:b1:48:1d:6a:bd:04:c9:58:fa:5d:
87:6b:25:89:a2:0a:31:e2:2f:3b:98:b1:69:78:c8:
d3:42:4e:9d:bb:a6:4f:9d:a2:3e:e3:41:48:b6:a0:
6e:d6:d5:1d:78:39:42:4a:7d:d1:af:1e:57:82:b2:
08:74:cb:5e:19:e4:31:d2:51:50:a9:4a:bd:77:26:
7a:4d:96:66:82:6b:18:88:01:6e:7a:e6:1d:fe:43:
e8:63:da:2f:48:5d:b6:73:32:92:22:ad:07:3a:ef:
07:53:eb:c3:8d:4e:47:0e:93:f7:c2:29:23:50:34:
57:4b:bb:80:a9:df:dd:bd:ed:31:da:be:9c:ee:be:
82:42:6c:8a:b5:e8:0a:64:3a:04:b4:48:a5:58:4a:
db:18:68:e0:fe:df:51:2a:19:71:26:8f:6b:66:c6:
40:3c:09:14:07:7d:11:52:2e:0d:04:98:34:e8:cb:
68:be:4d:d7:6b:86:13:c5:6c:94:0f:e1:49:9d:be:
de:1c:b0:21:20:b0:7c:8e:f4:28:01:f9:ed:d8:bd:
68:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:49:2B:85:0F:92:DF:4D:09:72:62:24:08:0D:BE:64:FD:66:D5:E6
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/gkkrhQ-S300JcmIkCA2-ZP1m1eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.106.0.0/16
185.171.144.0-185.171.146.255
217.24.240.0/20
IPv6:
2a05:fdc0::/29
Signature Algorithm: sha256WithRSAEncryption
3e:27:08:1c:0c:db:81:aa:57:67:fd:10:76:37:85:44:ae:10:
9c:eb:8b:33:98:6b:59:5c:38:e6:42:2c:e5:d5:15:bd:1a:dc:
d8:ea:c0:2d:5a:5d:b4:9b:5b:e9:a1:14:60:bd:e5:48:87:5a:
56:59:d6:9b:a3:82:33:de:a6:2a:e9:42:d5:04:1b:64:58:3d:
e9:dc:63:87:d2:ff:1f:b6:9b:fc:a2:34:72:f0:53:f5:f8:2c:
3d:02:91:2f:e6:a1:2e:2d:13:f2:95:5b:91:cb:79:05:d5:03:
c4:f6:b3:55:5e:5b:af:0c:98:e7:21:10:20:b3:a0:f1:52:b4:
ee:86:35:a1:f1:ca:de:d2:47:f0:c5:96:f3:69:1f:0f:62:01:
59:92:71:cd:17:db:2c:65:1f:8a:76:20:89:ba:15:67:94:2d:
f3:70:32:28:6b:15:99:6a:5c:93:e6:7b:e9:5a:64:dd:cd:67:
c3:56:a4:dc:9a:ef:a1:1a:5f:f5:70:62:d7:57:bd:5d:e1:ee:
3f:b0:fd:b9:c3:d1:e4:0f:03:73:71:d8:27:3b:4c:2d:ec:a9:
a1:7a:53:49:76:69:a7:d9:81:ee:f9:b7:3f:5a:d5:9e:1c:16:
da:40:96:bf:10:52:24:90:4d:9d:06:5f:c3:ab:7b:e8:f7:cb:
aa:c9:94:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:59 2024 by rpki-client on console-ams.rpki-client.org