Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/gl8wqbz86fIHlXq5_2RelE5wBzo.roa
File: gl8wqbz86fIHlXq5_2RelE5wBzo.roa (raw, json)
Hash identifier: ejI90b6arCdQdnfBiISp7MtOrVHDfzaReOxxxJz3ejA=
Subject key identifier: 82:5F:30:A9:BC:FC:E9:F2:07:95:7A:B9:FF:64:5E:94:4E:70:07:3A
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 0192B5FF8E18C433113E0CFCF18ACD7AFC82
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/gl8wqbz86fIHlXq5_2RelE5wBzo.roa
Signing time: Tue 22 Oct 2024 20:51:17 +0000
ROA not before: Tue 22 Oct 2024 20:51:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203459
IP address blocks: 185.133.224.0/24 maxlen: 24
185.133.225.0/24 maxlen: 24
185.133.226.0/24 maxlen: 24
185.133.227.0/24 maxlen: 24
2a06:7fc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b5:ff:8e:18:c4:33:11:3e:0c:fc:f1:8a:cd:7a:fc:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Oct 22 20:51:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=825f30a9bcfce9f207957ab9ff645e944e70073a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d4:dc:d2:ce:a9:66:6f:36:c6:74:c6:fc:7a:
3c:77:13:8f:a5:14:c6:95:33:65:99:b5:31:8d:e9:
4e:97:13:a9:c2:2a:e7:f4:e1:d9:da:88:ca:78:41:
20:93:17:3f:c9:a6:4f:b8:de:a1:8a:7c:97:26:73:
45:39:2c:f4:1c:76:0a:96:28:4d:f4:2f:49:23:16:
aa:ac:e4:ae:70:af:5d:c4:dc:2f:41:fc:15:f6:41:
15:ab:0a:c7:13:5d:88:f3:12:51:5b:a6:56:85:61:
f3:67:8d:84:e3:30:9b:a5:9e:7c:d3:16:a1:ad:b8:
03:20:96:05:2d:0d:e1:c6:a2:68:6d:de:38:55:41:
a9:79:1c:3d:58:76:5a:12:dc:ff:08:c7:f2:22:04:
20:c5:a7:af:d7:ff:ed:b2:0c:97:42:d5:0e:d5:c4:
fb:56:27:cc:c0:f9:d8:0b:68:02:df:76:ea:15:73:
8e:18:5d:8e:d5:07:af:f4:69:1f:2a:f3:4d:4e:ef:
48:82:e8:5c:3b:88:c5:a1:fa:51:86:a5:80:87:81:
62:8f:0a:1d:a0:68:3e:2a:05:6b:49:70:91:ee:80:
1f:0b:53:a1:96:9d:19:ea:9d:85:00:40:9b:58:d4:
4d:5d:58:49:b5:46:d4:d5:54:09:4b:d5:b1:81:b5:
7a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5F:30:A9:BC:FC:E9:F2:07:95:7A:B9:FF:64:5E:94:4E:70:07:3A
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/gl8wqbz86fIHlXq5_2RelE5wBzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.224.0/22
IPv6:
2a06:7fc0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:c8:a5:a9:15:60:3d:b0:5f:ee:38:1c:d4:91:38:7f:3b:fb:
a6:6f:7c:30:94:5c:75:03:8d:0c:1b:8c:ac:86:ea:05:b9:bf:
b7:46:99:c1:9b:8f:b7:ac:1f:cc:98:ff:70:6c:12:7b:fa:08:
09:5a:5c:ec:9f:d3:20:e2:19:83:ba:26:13:b2:4f:86:5c:06:
0a:52:4f:a8:b2:e2:65:d4:84:51:97:63:d0:43:a8:e7:ce:64:
f2:0f:66:9f:41:bb:04:d4:96:e3:1d:2d:ba:6c:35:1e:b5:db:
dd:3b:b2:2c:1b:a2:2e:ed:4c:76:5b:68:0c:06:15:86:10:b9:
0b:6b:7a:80:4c:fd:c4:74:10:b2:d3:2d:df:d4:3e:c1:9a:3b:
f0:38:69:9f:97:a1:7d:3b:04:56:d0:75:a9:23:85:6d:2b:9c:
4d:21:3a:38:1d:2a:cc:4b:21:e3:3a:fa:8a:e8:78:5b:54:88:
50:84:5b:b6:e0:6c:c1:67:d6:40:2b:ba:96:b4:b7:fe:23:7f:
ab:e4:06:03:4b:f7:f4:da:c9:57:b9:e0:90:4a:99:f9:8d:fc:
9e:9c:30:6e:6e:09:62:8f:0d:f8:97:e9:f2:f0:89:3a:0f:bd:
b7:83:3e:5b:2c:d0:44:4c:d3:ea:81:d2:b2:f4:fc:e5:09:b2:
c5:a4:cc:9a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZK1/44YxDMRPgz88YrNevyCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyM2MzZGU2MTAxMWRlMDcxMDFlMTRkYzA3MjczOTUxNzFj
YjAzYWIwHhcNMjQxMDIyMjA1MTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjVmMzBhOWJjZmNlOWYyMDc5NTdhYjlmZjY0NWU5NDRlNzAwNzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9Tc0s6pZm82xnTG/Ho8dxOPpRTG
lTNlmbUxjelOlxOpwirn9OHZ2ojKeEEgkxc/yaZPuN6hinyXJnNFOSz0HHYKlihN
9C9JIxaqrOSucK9dxNwvQfwV9kEVqwrHE12I8xJRW6ZWhWHzZ42E4zCbpZ580xah
rbgDIJYFLQ3hxqJobd44VUGpeRw9WHZaEtz/CMfyIgQgxaev1//tsgyXQtUO1cT7
VifMwPnYC2gC33bqFXOOGF2O1Qev9GkfKvNNTu9IguhcO4jFofpRhqWAh4Fijwod
oGg+KgVrSXCR7oAfC1Ohlp0Z6p2FAECbWNRNXVhJtUbU1VQJS9WxgbV61QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIJfMKm8/OnyB5V6uf9kXpROcAc6MB8GA1UdIwQY
MBaAFBI8PeYQEd4HEB4U3AcnOVFxywOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWp3OTVoQVIzZ2NRSGhUY0J5YzVVWEhMQTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yMjk2NTAtOGEwMS00MzcwLTk5MWUt
YjUwNGM5YWU5YmJjLzEvZ2w4d3Fiejg2ZklIbFhxNV8yUmVsRTV3QnpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yMjk2NTAtOGEwMS00MzcwLTk5MWUtYjUwNGM5YWU5YmJj
LzEvRWp3OTVoQVIzZ2NRSGhUY0J5YzVVWEhMQTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYXgMA0E
AgACMAcDBQMqBn/AMA0GCSqGSIb3DQEBCwUAA4IBAQB+yKWpFWA9sF/uOBzUkTh/
O/umb3wwlFx1A40MG4yshuoFub+3RpnBm4+3rB/MmP9wbBJ7+ggJWlzsn9Mg4hmD
uiYTsk+GXAYKUk+osuJl1IRRl2PQQ6jnzmTyD2afQbsE1JbjHS26bDUetdvdO7Is
G6Iu7Ux2W2gMBhWGELkLa3qATP3EdBCy0y3f1D7BmjvwOGmfl6F9OwRW0HWpI4Vt
K5xNITo4HSrMSyHjOvqK6HhbVIhQhFu24GzBZ9ZAK7qWtLf+I3+r5AYDS/f02slX
ueCQSpn5jfyenDBubglijw34l+ny8Ik6D723gz5bLNBETNPqgdKy9PzlCbLFpMya
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:22 2025 by rpki-client