Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/0Gaywi1E2rtnWBVTPfrVxeSdbpg.roa
File: 0Gaywi1E2rtnWBVTPfrVxeSdbpg.roa (raw, json)
Hash identifier: FGL1d7RHc3gKX9qklQrGcLEN6K1/bYlEjpdWSYAcfi8=
Subject key identifier: D0:66:B2:C2:2D:44:DA:BB:67:58:15:53:3D:FA:D5:C5:E4:9D:6E:98
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018CD90DC8FFDEDF7498F058C909EDB67AFB
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/0Gaywi1E2rtnWBVTPfrVxeSdbpg.roa
Signing time: Fri 05 Jan 2024 09:56:48 +0000
ROA not before: Fri 05 Jan 2024 09:56:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197730
IP address blocks: 185.235.164.0/24 maxlen: 24
45.135.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 15:22:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d9:0d:c8:ff:de:df:74:98:f0:58:c9:09:ed:b6:7a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 5 09:56:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d066b2c22d44dabb675815533dfad5c5e49d6e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:f7:fe:87:af:9a:6a:08:9e:c0:e9:f8:67:
8b:46:f7:a7:79:e7:8c:43:76:a4:05:e1:5c:ec:ae:
be:4f:8f:b0:a0:99:c2:79:43:94:6f:7d:ab:fe:19:
c6:8b:78:ad:83:48:ba:7d:7b:ca:3d:bd:22:7c:c0:
0a:82:cd:29:17:cc:f7:05:df:ce:19:0b:c4:c2:ad:
92:99:47:10:37:b5:7d:d3:5d:1b:88:14:56:82:4c:
8d:1d:e6:cb:71:44:31:e4:10:48:05:d3:aa:32:bb:
21:75:1f:ba:be:97:c6:f1:cb:ca:9e:27:3c:8a:c0:
19:bb:f6:b2:1a:31:0d:71:ab:04:b8:fa:7b:9b:6d:
aa:43:f9:44:31:ca:28:30:24:fe:6a:e8:f0:0d:56:
29:35:12:15:c5:d2:50:5b:a4:55:ea:40:13:c6:e3:
37:c6:f7:18:f5:f4:5c:13:66:b5:d3:5d:68:53:5f:
2b:fb:39:de:b4:79:95:8e:2f:eb:75:51:00:2d:e2:
2e:bf:f7:b6:db:c1:f6:8b:b1:fc:34:93:0a:17:54:
12:b5:6b:99:85:a1:a6:1a:a8:17:ea:a5:22:c8:95:
b1:ed:96:a9:c3:b0:58:d0:07:5c:f7:6b:ae:e6:84:
9f:3d:e5:b2:cd:94:c7:9e:de:26:ac:e2:ca:01:74:
ce:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:66:B2:C2:2D:44:DA:BB:67:58:15:53:3D:FA:D5:C5:E4:9D:6E:98
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/0Gaywi1E2rtnWBVTPfrVxeSdbpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.238.0/24
185.235.164.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:03:90:d9:84:e6:aa:57:41:f9:db:d2:e7:46:da:28:d2:56:
ba:1b:35:b2:49:c0:f1:12:ba:7d:b9:db:07:ee:9c:1d:75:96:
ff:e5:5e:ef:15:48:fc:2f:44:ce:1c:4d:2a:e2:c3:f6:e3:0b:
12:f3:8b:0d:fc:d9:43:54:40:21:17:65:92:9e:43:2d:b9:cf:
7c:9d:8e:fb:58:0d:0b:a7:6b:0d:29:d5:3a:c0:76:61:22:37:
17:73:53:73:6c:ff:22:20:42:a2:ea:a9:69:f8:6e:60:90:ca:
3e:39:dd:09:aa:3f:46:df:09:1c:ec:05:28:dd:ca:ab:1e:1b:
c5:e6:f2:70:46:05:e6:e9:e5:dd:34:31:cf:dc:e9:a3:2d:c7:
45:43:29:1d:2e:db:b1:67:06:f2:3b:7f:0b:ca:cf:5a:43:e2:
d8:34:12:7b:47:fe:5c:db:1e:cc:82:24:89:39:b7:1f:84:c4:
51:de:52:b3:88:ab:be:05:2b:30:41:7f:c9:2a:9b:97:7f:c3:
ca:9f:14:5b:1f:7b:24:d9:7e:16:55:77:d4:42:ca:9f:18:0d:
32:7a:2e:75:1c:7f:1d:35:c0:38:c3:80:c8:ee:af:e6:a8:ec:
f5:2a:98:a2:25:ec:c0:8a:72:35:3c:2e:1a:4b:1d:83:ed:c8:
8d:50:ae:7b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzZDcj/3t90mPBYyQnttnr7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjQwMTA1MDk1NjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDY2YjJjMjJkNDRkYWJiNjc1ODE1NTMzZGZhZDVjNWU0OWQ2ZTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob33/oevmmoInsDp+GeLRveneeeM
Q3akBeFc7K6+T4+woJnCeUOUb32r/hnGi3itg0i6fXvKPb0ifMAKgs0pF8z3Bd/O
GQvEwq2SmUcQN7V9010biBRWgkyNHebLcUQx5BBIBdOqMrshdR+6vpfG8cvKnic8
isAZu/ayGjENcasEuPp7m22qQ/lEMcooMCT+aujwDVYpNRIVxdJQW6RV6kATxuM3
xvcY9fRcE2a1011oU18r+znetHmVji/rdVEALeIuv/e228H2i7H8NJMKF1QStWuZ
haGmGqgX6qUiyJWx7Zapw7BY0Adc92uu5oSfPeWyzZTHnt4mrOLKAXTOOQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNBmssItRNq7Z1gVUz361cXknW6YMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvMEdheXdpMUUycnRuV0JWVFBmclZ4ZVNkYnBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYfuAwQA
ueukMA0GCSqGSIb3DQEBCwUAA4IBAQDFA5DZhOaqV0H529LnRtoo0la6GzWyScDx
Erp9udsH7pwddZb/5V7vFUj8L0TOHE0q4sP24wsS84sN/NlDVEAhF2WSnkMtuc98
nY77WA0Lp2sNKdU6wHZhIjcXc1NzbP8iIEKi6qlp+G5gkMo+Od0Jqj9G3wkc7AUo
3cqrHhvF5vJwRgXm6eXdNDHP3OmjLcdFQykdLtuxZwbyO38Lys9aQ+LYNBJ7R/5c
2x7MgiSJObcfhMRR3lKziKu+BSswQX/JKpuXf8PKnxRbH3sk2X4WVXfUQsqfGA0y
ei51HH8dNcA4w4DI7q/mqOz1KpiiJezAinI1PC4aSx2D7ciNUK57
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:24 2025 by rpki-client