Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/GicceGi1ZGqlds2JAG9HvuVxsWA.roa
File: GicceGi1ZGqlds2JAG9HvuVxsWA.roa (raw, json)
Hash identifier: KDsFNO0tUkaJP1p+zcyr11x97Y9a1i4KnGY/JcpuN+Q=
Subject key identifier: 1A:27:1C:78:68:B5:64:6A:A5:76:CD:89:00:6F:47:BE:E5:71:B1:60
Certificate issuer: /CN=bc6c8c06d2d3c2801f05458fc83413db0a5ddfad
Certificate serial: 0185711523927E7279E49B9BEEA067A63D74
Authority key identifier: BC:6C:8C:06:D2:D3:C2:80:1F:05:45:8F:C8:34:13:DB:0A:5D:DF:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/GicceGi1ZGqlds2JAG9HvuVxsWA.roa
Signing time: Mon 02 Jan 2023 06:04:48 +0000
ROA not before: Mon 02 Jan 2023 06:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25251
IP address blocks: 81.94.37.0/24 maxlen: 24
81.94.32.0/22 maxlen: 22
81.94.40.0/23 maxlen: 23
81.94.44.0/24 maxlen: 24
81.94.42.0/24 maxlen: 24
81.94.39.0/24 maxlen: 24
81.94.45.0/24 maxlen: 24
81.94.46.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 13 Jan 2023 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:23:92:7e:72:79:e4:9b:9b:ee:a0:67:a6:3d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6c8c06d2d3c2801f05458fc83413db0a5ddfad
Validity
Not Before: Jan 2 06:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a271c7868b5646aa576cd89006f47bee571b160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:02:5d:d0:5b:6f:6e:c3:8a:93:31:9b:26:
c9:d6:cd:ae:7a:b4:1b:11:fa:18:94:ac:1e:e2:2b:
80:62:4d:c7:cb:80:35:b0:6d:b8:34:34:7d:76:d9:
66:9b:f0:43:ea:70:4b:e4:22:44:eb:62:3a:59:a7:
0d:47:e0:6a:eb:10:d9:2e:d1:82:37:53:f8:9a:7c:
b3:d5:a9:37:49:6e:7c:f4:e5:24:c5:bf:33:2f:62:
75:6f:1d:c8:aa:8f:55:43:ad:b4:a2:4c:71:bd:94:
72:b6:9d:c8:13:5d:a1:b8:31:69:c8:09:d0:12:16:
9e:7a:c5:ba:0a:42:ca:25:c7:00:22:a4:1b:c9:e3:
a2:81:26:dd:fc:64:f5:8a:dd:f4:d5:e5:f8:a2:d1:
12:2d:45:c8:a4:9c:d7:12:bf:8e:74:ba:23:e5:c6:
f1:3f:b0:9a:a7:82:a2:3e:54:eb:2e:26:5a:aa:c6:
ce:39:91:28:29:06:36:6d:e5:f4:01:47:e2:ea:60:
63:6d:4d:ea:5a:c7:28:cd:ff:4e:60:00:51:c1:f4:
dd:68:17:3a:20:53:9b:5f:76:73:51:62:f6:40:a7:
1a:76:2b:2c:04:a5:59:b8:07:b5:f7:66:36:1a:74:
6e:89:6b:6a:73:2d:dc:d3:93:53:1d:b7:1e:8e:bb:
f6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:27:1C:78:68:B5:64:6A:A5:76:CD:89:00:6F:47:BE:E5:71:B1:60
X509v3 Authority Key Identifier:
keyid:BC:6C:8C:06:D2:D3:C2:80:1F:05:45:8F:C8:34:13:DB:0A:5D:DF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/GicceGi1ZGqlds2JAG9HvuVxsWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.94.32.0/22
81.94.37.0/24
81.94.39.0-81.94.42.255
81.94.44.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:51:77:d3:7e:4e:e0:89:00:2e:b1:65:8c:c8:a3:b7:94:ad:
72:62:04:2f:07:69:7a:5c:71:f0:ea:a2:db:4b:d2:bf:f4:7c:
35:c9:2d:a4:07:eb:14:58:c8:cd:a9:37:56:1d:b5:1a:49:01:
3e:c6:65:e4:c6:0a:fa:50:df:c2:52:8d:c4:d5:c7:2c:40:1d:
91:a9:0f:ea:da:51:7d:06:2c:c5:e4:6c:56:28:fb:dd:91:c1:
61:4d:9f:34:16:04:38:42:82:21:7d:2c:9d:e8:69:71:dd:31:
03:1d:c8:75:59:fa:35:b6:f7:5b:79:d7:6e:71:d3:13:a9:a8:
3d:02:92:9b:8e:a4:75:e0:02:11:44:e6:03:ef:bd:c5:b7:9e:
e8:bf:1a:4b:80:81:c7:bf:a6:d4:af:a4:43:de:5f:0a:19:d3:
39:df:83:a1:a2:49:8c:6c:34:fb:49:c7:78:21:b4:84:10:21:
29:2c:53:15:52:56:7c:90:b4:fc:f6:6f:49:f5:3c:52:4a:48:
c6:7c:49:11:de:ab:1c:6d:34:c3:f3:d9:94:3f:c9:9e:e4:ec:
1d:1a:95:15:29:2c:da:c6:9b:7f:4a:06:9a:b9:15:df:6a:40:
eb:85:4a:37:3f:cf:c4:32:ef:7c:f7:b3:b7:01:5b:f3:46:e6:
41:a4:7d:b6
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYVxFSOSfnJ55Jub7qBnpj10MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNmM4YzA2ZDJkM2MyODAxZjA1NDU4ZmM4MzQxM2RiMGE1
ZGRmYWQwHhcNMjMwMTAyMDYwNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTI3MWM3ODY4YjU2NDZhYTU3NmNkODkwMDZmNDdiZWU1NzFiMTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE0CXdBbb27DipMxmybJ1s2uerQb
EfoYlKwe4iuAYk3Hy4A1sG24NDR9dtlmm/BD6nBL5CJE62I6WacNR+Bq6xDZLtGC
N1P4mnyz1ak3SW589OUkxb8zL2J1bx3Iqo9VQ620okxxvZRytp3IE12huDFpyAnQ
EhaeesW6CkLKJccAIqQbyeOigSbd/GT1it301eX4otESLUXIpJzXEr+OdLoj5cbx
P7Cap4KiPlTrLiZaqsbOOZEoKQY2beX0AUfi6mBjbU3qWscozf9OYABRwfTdaBc6
IFObX3ZzUWL2QKcadissBKVZuAe192Y2GnRuiWtqcy3c05NTHbcejrv2zwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFBonHHhotWRqpXbNiQBvR77lcbFgMB8GA1UdIwQY
MBaAFLxsjAbS08KAHwVFj8g0E9sKXd+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkd5TUJ0TFR3b0FmQlVXUHlEUVQyd3BkMzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xN2FkZGYtZDMyNS00YWE3LTk3YTct
NGI0M2E0NzM4MmI2LzEvR2ljY2VHaTFaR3FsZHMySkFHOUh2dVZ4c1dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8xN2FkZGYtZDMyNS00YWE3LTk3YTctNGI0M2E0NzM4MmI2
LzEvdkd5TUJ0TFR3b0FmQlVXUHlEUVQyd3BkMzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCUV4gAwQA
UV4lMAwDBABRXicDBABRXioDBAJRXiwwDQYJKoZIhvcNAQELBQADggEBAC9Rd9N+
TuCJAC6xZYzIo7eUrXJiBC8HaXpccfDqottL0r/0fDXJLaQH6xRYyM2pN1YdtRpJ
AT7GZeTGCvpQ38JSjcTVxyxAHZGpD+raUX0GLMXkbFYo+92RwWFNnzQWBDhCgiF9
LJ3oaXHdMQMdyHVZ+jW291t5125x0xOpqD0CkpuOpHXgAhFE5gPvvcW3nui/GkuA
gce/ptSvpEPeXwoZ0znfg6GiSYxsNPtJx3ghtIQQISksUxVSVnyQtPz2b0n1PFJK
SMZ8SRHeqxxtNMPz2ZQ/yZ7k7B0alRUpLNrGm39KBpq5Fd9qQOuFSjc/z8Qy73z3
s7cBW/NG5kGkfbY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:06 2024 by rpki-client on console-ams.rpki-client.org