Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/GT9-StnviuiTtTOIfKvEWKg_qzA.roa
File: GT9-StnviuiTtTOIfKvEWKg_qzA.roa (raw, json)
Hash identifier: GM1YqklH8C+kYVyB8Jyu6fEnED9WgTaPY+YphYXKTX8=
Subject key identifier: 19:3F:7E:4A:D9:EF:8A:E8:93:B5:33:88:7C:AB:C4:58:A8:3F:AB:30
Certificate issuer: /CN=595b243a7233e571c3c173eb8249111906326019
Certificate serial: 01872B5DF017596BEDB13136762227C5166D
Authority key identifier: 59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/GT9-StnviuiTtTOIfKvEWKg_qzA.roa
Signing time: Wed 29 Mar 2023 03:16:29 +0000
ROA not before: Wed 29 Mar 2023 03:16:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39824
IP address blocks: 79.134.37.0/24 maxlen: 24
79.134.36.0/24 maxlen: 24
79.134.32.0/22 maxlen: 24
79.134.38.0/23 maxlen: 24
79.134.44.0/22 maxlen: 24
79.134.42.0/23 maxlen: 24
79.134.41.0/24 maxlen: 24
79.134.40.0/24 maxlen: 24
46.36.132.0/22 maxlen: 24
46.36.130.0/23 maxlen: 24
46.36.128.0/23 maxlen: 24
46.36.136.0/22 maxlen: 24
46.36.144.0/23 maxlen: 24
46.36.140.0/22 maxlen: 24
46.36.146.0/23 maxlen: 24
46.36.152.0/22 maxlen: 24
46.36.148.0/22 maxlen: 24
46.36.159.0/24 maxlen: 24
46.36.158.0/24 maxlen: 24
46.36.156.0/23 maxlen: 24
185.103.170.0/23 maxlen: 24
185.103.168.0/23 maxlen: 24
185.103.179.0/24 maxlen: 24
185.103.178.0/24 maxlen: 24
185.103.177.0/24 maxlen: 24
185.103.176.0/24 maxlen: 24
185.103.184.0/23 maxlen: 24
185.103.186.0/23 maxlen: 24
185.100.224.0/22 maxlen: 24
62.84.36.0/22 maxlen: 24
62.84.32.0/22 maxlen: 24
62.84.42.0/23 maxlen: 24
62.84.40.0/23 maxlen: 24
62.84.44.0/23 maxlen: 24
62.84.48.0/20 maxlen: 24
62.84.46.0/23 maxlen: 24
109.239.32.0/21 maxlen: 24
185.106.158.0/23 maxlen: 24
185.106.156.0/23 maxlen: 24
81.88.144.0/21 maxlen: 24
81.88.152.0/22 maxlen: 24
81.88.156.0/22 maxlen: 24
212.45.82.0/23 maxlen: 24
212.45.80.0/23 maxlen: 24
212.45.85.0/24 maxlen: 24
212.45.84.0/24 maxlen: 24
212.45.88.0/22 maxlen: 24
212.45.86.0/23 maxlen: 24
212.45.94.0/23 maxlen: 24
212.45.92.0/23 maxlen: 24
185.102.118.0/24 maxlen: 24
185.102.117.0/24 maxlen: 24
185.102.116.0/24 maxlen: 24
185.102.119.0/24 maxlen: 24
185.102.128.0/22 maxlen: 24
80.249.138.0/23 maxlen: 24
80.249.137.0/24 maxlen: 24
80.249.142.0/23 maxlen: 24
80.249.140.0/23 maxlen: 24
80.249.152.0/21 maxlen: 24
213.232.196.0/23 maxlen: 24
213.232.201.0/24 maxlen: 24
109.239.40.0/22 maxlen: 24
109.239.44.0/22 maxlen: 24
185.98.88.0/22 maxlen: 24
213.232.218.0/23 maxlen: 24
213.232.220.0/22 maxlen: 24
213.232.224.0/24 maxlen: 24
213.232.230.0/23 maxlen: 24
213.232.242.0/23 maxlen: 24
213.232.246.0/23 maxlen: 24
213.232.244.0/24 maxlen: 24
185.98.76.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2b:5d:f0:17:59:6b:ed:b1:31:36:76:22:27:c5:16:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595b243a7233e571c3c173eb8249111906326019
Validity
Not Before: Mar 29 03:16:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=193f7e4ad9ef8ae893b533887cabc458a83fab30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:aa:b2:c2:be:de:8c:94:09:16:c9:c4:53:9b:
c4:22:1a:dc:7c:e1:17:ed:71:0f:f3:61:3c:01:9c:
8f:87:2b:43:58:bf:dc:46:95:6c:b4:ae:cf:dd:eb:
1c:5d:3f:27:a5:a6:d9:e1:94:0a:60:49:c6:1c:b7:
ae:a5:8c:c8:2f:c1:a5:0c:9b:7e:75:43:5c:ea:30:
c1:fd:5d:4e:9a:ce:64:3b:77:60:45:8c:bb:ce:d4:
a5:e1:88:94:b5:da:95:78:9c:4a:44:e7:e3:52:9e:
77:a4:a0:2b:de:f4:cd:4d:34:7e:91:f4:0a:7a:fe:
fb:5f:23:39:de:17:b3:f7:11:97:8a:36:53:95:33:
67:4a:a8:78:df:08:f0:d9:6a:8a:1a:78:a8:74:03:
1f:41:f3:fb:1a:c4:30:e8:f4:08:4d:3d:a9:7b:8e:
dd:25:65:23:a5:9a:d9:1a:f8:3c:cc:bf:2d:0a:1e:
d7:66:b5:e3:8e:7b:fa:b0:61:d7:a3:d9:6a:4a:50:
b5:10:ac:f6:c9:a4:da:9d:5a:4b:66:97:e2:34:e7:
78:91:a3:df:02:60:20:9e:f9:21:2f:e8:b3:53:f9:
9d:fb:a4:a3:43:48:54:e4:9a:ae:ee:e5:03:76:63:
05:68:86:5e:94:ef:97:60:f1:2c:08:86:95:f1:52:
c5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3F:7E:4A:D9:EF:8A:E8:93:B5:33:88:7C:AB:C4:58:A8:3F:AB:30
X509v3 Authority Key Identifier:
keyid:59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/GT9-StnviuiTtTOIfKvEWKg_qzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.128.0/19
62.84.32.0/19
79.134.32.0/20
80.249.137.0-80.249.143.255
80.249.152.0/21
81.88.144.0/20
109.239.32.0/20
185.98.76.0/22
185.98.88.0/22
185.100.224.0/22
185.102.116.0/22
185.102.128.0/22
185.103.168.0/22
185.103.176.0/22
185.103.184.0/22
185.106.156.0/22
212.45.80.0/20
213.232.196.0/23
213.232.201.0/24
213.232.218.0-213.232.224.255
213.232.230.0/23
213.232.242.0-213.232.244.255
213.232.246.0/23
Signature Algorithm: sha256WithRSAEncryption
89:1b:a8:4f:28:19:50:ee:07:2c:fb:f5:b5:06:9f:59:99:db:
01:e6:b3:55:b4:d7:97:70:8c:18:a4:45:49:96:14:9a:e0:85:
f4:a4:e3:04:0d:23:e8:b4:52:ad:1e:e9:e6:b5:fc:95:53:38:
53:46:cc:a0:02:92:c5:3e:29:68:10:d3:fb:b3:02:03:d1:27:
7d:e2:4f:cc:92:89:50:92:c6:9c:44:fe:77:fc:29:72:12:2d:
73:95:5c:51:05:77:0e:db:88:f0:24:07:48:12:cc:75:4e:c7:
40:dd:c0:16:72:5b:b9:9f:db:a7:aa:65:cb:a8:2b:32:5f:db:
96:01:fa:93:37:38:3a:34:a5:f1:9f:12:5a:84:37:b2:87:80:
ee:73:50:01:af:0a:9e:bf:e8:71:f6:b3:87:d5:56:d8:a5:66:
ae:5a:17:15:d8:52:c1:43:b2:17:44:3f:84:47:99:ac:05:97:
c4:10:be:47:1a:a9:7f:83:98:46:b7:16:f5:0d:08:67:14:b8:
a2:0c:fd:08:1c:c0:66:e8:5f:d8:84:e5:ea:26:b0:ff:e3:31:
e7:bc:b9:00:ad:76:25:ee:3d:4e:9e:fe:e3:c9:f2:db:32:56:
e1:70:b7:e0:24:58:bd:f2:0c:16:07:6e:bc:e2:53:e2:8f:39:
15:6f:50:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 08:07:45 2023 by rpki-client on console-ams.rpki-client.org