Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/Gkzy6PsJmteNXZZTOfeQH_3iLgw.roa
File: Gkzy6PsJmteNXZZTOfeQH_3iLgw.roa (raw, json)
Hash identifier: WAeLZGzpW/DQhVyB9fciJ1oJLMDEBBugdR1N7W8mMHk=
Subject key identifier: 1A:4C:F2:E8:FB:09:9A:D7:8D:5D:96:53:39:F7:90:1F:FD:E2:2E:0C
Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial: 018CC4930C52A151FC5B1A3C89F9CAACD4B4
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/Gkzy6PsJmteNXZZTOfeQH_3iLgw.roa
Signing time: Mon 01 Jan 2024 10:30:20 +0000
ROA not before: Mon 01 Jan 2024 10:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.134.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 18:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:0c:52:a1:51:fc:5b:1a:3c:89:f9:ca:ac:d4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
Validity
Not Before: Jan 1 10:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a4cf2e8fb099ad78d5d965339f7901ffde22e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f6:16:62:a8:10:f0:1d:45:2a:3a:63:e7:22:
09:ca:7c:cf:49:6e:5c:ad:a0:71:fc:54:f3:3f:c3:
7d:95:52:91:cd:5e:8c:ce:b6:7f:21:19:aa:1a:e6:
84:fd:e9:32:44:80:82:92:0b:ca:01:b5:5e:c6:bd:
9d:91:91:9f:65:e5:c1:4b:63:3b:7b:95:10:f5:81:
06:40:77:de:b8:43:33:45:d8:9c:b7:57:19:2e:a0:
a1:28:6e:f8:9f:e5:55:3b:d1:9b:1e:f0:e4:3b:d7:
20:19:36:2a:ef:54:94:d2:dc:80:0f:c0:ee:86:63:
48:63:79:e1:b1:ac:68:df:b5:73:4e:e1:a7:75:62:
e9:17:dc:13:20:c7:d5:76:b4:05:ed:18:18:22:4e:
b7:a5:58:e4:50:19:b4:ec:b2:da:5d:6c:b4:78:7c:
25:87:30:bb:7a:63:8e:cc:77:3d:b0:83:a3:91:e2:
cc:26:b2:a5:31:6d:e6:24:06:4d:70:6a:e8:a9:37:
1b:65:3f:34:17:42:40:52:cf:aa:ea:07:a0:1b:46:
dd:66:e7:28:8a:81:d7:f1:b2:e5:d8:66:37:e9:7d:
a6:d4:7b:84:b5:58:7b:30:1c:68:37:07:84:e8:f3:
3f:c9:91:c4:30:12:b0:51:67:a6:0d:d3:35:ed:0e:
af:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4C:F2:E8:FB:09:9A:D7:8D:5D:96:53:39:F7:90:1F:FD:E2:2E:0C
X509v3 Authority Key Identifier:
keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/Gkzy6PsJmteNXZZTOfeQH_3iLgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.9.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:0f:19:ab:94:88:c9:31:87:22:4a:de:86:5e:07:8a:de:6b:
60:24:4d:8c:78:0e:87:b8:e2:8a:29:e0:71:fa:f2:07:e9:47:
56:bf:d3:24:0a:03:18:8a:53:77:48:59:cf:9f:b6:bf:40:ae:
03:0a:90:1b:d0:e7:19:31:b1:c8:31:49:39:07:fa:61:e9:fc:
c7:b0:ae:34:15:2c:99:40:cd:49:6b:7f:92:e0:72:e8:ec:83:
a0:35:7b:c5:f8:03:1c:4e:ef:c3:31:0e:77:fd:08:0a:f8:7f:
cd:a9:14:17:53:79:ba:e6:16:42:ee:d0:01:bf:69:07:d1:74:
9b:cd:9d:a5:8f:00:e4:1a:46:36:e5:83:37:a3:2b:a3:14:0b:
87:82:62:2c:12:64:f1:49:7d:15:68:c9:36:10:cf:4b:ab:5a:
5a:1a:69:d3:ae:9b:c0:8b:b7:e5:10:fb:f4:e0:04:95:d6:34:
fc:74:da:6b:42:4a:c5:42:41:c2:a2:e3:9a:db:5f:02:ed:3d:
4e:37:7d:6d:7c:e3:59:9f:14:c0:ca:86:6a:f5:65:9b:49:be:
21:50:3d:4d:48:0b:a4:59:af:15:0e:9d:98:fe:14:7f:58:fa:
52:64:ec:e3:ba:a3:15:71:02:ee:a9:6c:40:3d:15:90:b2:88:
e8:d6:67:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkwxSoVH8Wxo8ifnKrNS0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMTlkNDUzNWM3ZTYyYjkyMWU4NTllNjU1N2I4MjFmMjc4
ZTcxNmEwHhcNMjQwMTAxMTAzMDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTRjZjJlOGZiMDk5YWQ3OGQ1ZDk2NTMzOWY3OTAxZmZkZTIyZTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPYWYqgQ8B1FKjpj5yIJynzPSW5c
raBx/FTzP8N9lVKRzV6MzrZ/IRmqGuaE/ekyRICCkgvKAbVexr2dkZGfZeXBS2M7
e5UQ9YEGQHfeuEMzRdict1cZLqChKG74n+VVO9GbHvDkO9cgGTYq71SU0tyAD8Du
hmNIY3nhsaxo37VzTuGndWLpF9wTIMfVdrQF7RgYIk63pVjkUBm07LLaXWy0eHwl
hzC7emOOzHc9sIOjkeLMJrKlMW3mJAZNcGroqTcbZT80F0JAUs+q6gegG0bdZuco
ioHX8bLl2GY36X2m1HuEtVh7MBxoNweE6PM/yZHEMBKwUWemDdM17Q6vaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBpM8uj7CZrXjV2WUzn3kB/94i4MMB8GA1UdIwQY
MBaAFL0Z1FNcfmK5IehZ5lV7gh8njnFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTct
YzEzMzFmNDlmYzA5LzEvR2t6eTZQc0ptdGVOWFpaVE9mZVFIXzNpTGd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTctYzEzMzFmNDlmYzA5
LzEvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYYJMA0G
CSqGSIb3DQEBCwUAA4IBAQCNDxmrlIjJMYciSt6GXgeK3mtgJE2MeA6HuOKKKeBx
+vIH6UdWv9MkCgMYilN3SFnPn7a/QK4DCpAb0OcZMbHIMUk5B/ph6fzHsK40FSyZ
QM1Ja3+S4HLo7IOgNXvF+AMcTu/DMQ53/QgK+H/NqRQXU3m65hZC7tABv2kH0XSb
zZ2ljwDkGkY25YM3oyujFAuHgmIsEmTxSX0VaMk2EM9Lq1paGmnTrpvAi7flEPv0
4ASV1jT8dNprQkrFQkHCouOa218C7T1ON31tfONZnxTAyoZq9WWbSb4hUD1NSAuk
Wa8VDp2Y/hR/WPpSZOzjuqMVcQLuqWxAPRWQsojo1mcj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:52 2024 by rpki-client on console-fra.rpki-client.org