Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/GwtYNUf_LGlNGUeFi03EegPMEkc.roa
File: GwtYNUf_LGlNGUeFi03EegPMEkc.roa (raw, json)
Hash identifier: V+AJH0YfcbeYbKD6uFHm5RwiBepdi7jEtaDDD3ww2Mk=
Subject key identifier: 1B:0B:58:35:47:FF:2C:69:4D:19:47:85:8B:4D:C4:7A:03:CC:12:47
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 019424B3C79332440CF20D398C2FECE2C1C3
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/GwtYNUf_LGlNGUeFi03EegPMEkc.roa
Signing time: Thu 02 Jan 2025 01:49:09 +0000
ROA not before: Thu 02 Jan 2025 01:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39344
IP address blocks: 91.205.196.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 06:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c7:93:32:44:0c:f2:0d:39:8c:2f:ec:e2:c1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 2 01:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b0b583547ff2c694d1947858b4dc47a03cc1247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:9b:d2:e9:f0:54:63:1d:b9:e7:89:7b:85:
37:70:b8:2d:57:c3:35:31:d2:96:ee:b6:ec:c3:56:
3c:ec:df:9d:fa:8e:d2:26:77:eb:00:96:da:2e:19:
63:48:1d:8c:3b:d0:69:be:a7:b0:f4:0b:b3:91:2e:
24:a9:de:58:0b:98:03:0f:ea:cd:cb:88:c3:8a:82:
0e:cc:d4:ba:38:3f:c8:df:8c:57:d2:c1:19:04:50:
56:ba:4f:85:35:3f:4d:38:cc:95:23:7d:10:cb:83:
84:99:72:33:6d:7b:70:36:2e:65:49:3a:fe:8f:18:
25:a4:31:74:7f:87:c1:a3:0a:7b:b4:15:91:4e:21:
32:af:c1:ac:e9:67:89:43:74:67:79:ed:24:bc:0a:
64:c9:a9:21:9f:f5:6b:3c:9f:ad:7e:8c:c3:0b:8c:
41:73:45:2c:d1:8b:37:2c:22:24:72:c2:bc:30:5e:
7b:f8:7e:21:b4:a3:7d:a5:e2:6a:5a:19:1f:7f:21:
8d:e0:e0:32:bd:7f:15:d9:27:22:3f:41:9f:b5:8d:
67:ea:4a:39:c0:b3:99:f2:44:94:fc:ce:75:42:91:
d8:fd:ca:b8:80:61:98:75:d9:6b:fe:8a:8b:7f:8f:
d1:e9:42:ff:c8:ba:e4:a7:6c:f7:2e:17:ca:0e:62:
79:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0B:58:35:47:FF:2C:69:4D:19:47:85:8B:4D:C4:7A:03:CC:12:47
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/GwtYNUf_LGlNGUeFi03EegPMEkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.196.0/23
Signature Algorithm: sha256WithRSAEncryption
81:23:d1:78:3c:26:12:8f:fe:3a:de:95:85:09:9e:cb:89:f3:
3e:47:6b:6d:40:ee:cc:d9:86:cb:dc:99:ff:ef:08:9f:d5:f9:
d4:d7:65:70:2b:fb:f4:1c:59:f7:b6:4d:c9:de:e8:79:5e:1e:
54:9e:bd:f8:23:f1:5b:2e:14:d9:57:4f:56:1f:cf:9e:46:bd:
07:44:44:d0:ef:be:9f:93:ec:4b:b2:70:46:10:3e:ba:e5:51:
7c:82:0c:9c:d7:79:8b:33:96:d5:06:84:9c:47:40:b7:43:df:
6b:7a:f7:57:a6:4b:97:28:93:04:85:aa:eb:dd:b6:a8:42:6d:
32:fd:1f:64:61:b9:7b:2e:76:c2:25:08:41:2b:da:68:37:58:
30:97:59:f9:76:1c:ae:ef:f3:f2:17:ed:12:f3:47:30:9c:41:
aa:da:22:a2:4d:cd:a2:f3:bd:c6:fe:22:32:2f:6b:40:a2:58:
94:c1:51:bf:c9:e8:8d:44:5b:bb:0d:f6:9b:57:12:70:cf:59:
47:52:58:4b:b7:ac:c2:c9:11:c7:d1:11:0f:61:5a:4f:a7:f9:
2f:58:fc:a0:cf:f5:93:f6:43:f9:64:f0:6f:1d:87:6a:2a:7e:
1a:2b:56:c2:b7:ee:92:7a:c6:3b:bf:4f:30:76:09:d1:05:30:
06:39:53:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks8eTMkQM8g05jC/s4sHDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjUwMTAyMDE0OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjBiNTgzNTQ3ZmYyYzY5NGQxOTQ3ODU4YjRkYzQ3YTAzY2MxMjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7Ob0unwVGMdueeJe4U3cLgtV8M1
MdKW7rbsw1Y87N+d+o7SJnfrAJbaLhljSB2MO9Bpvqew9AuzkS4kqd5YC5gDD+rN
y4jDioIOzNS6OD/I34xX0sEZBFBWuk+FNT9NOMyVI30Qy4OEmXIzbXtwNi5lSTr+
jxglpDF0f4fBowp7tBWRTiEyr8Gs6WeJQ3Rnee0kvApkyakhn/VrPJ+tfozDC4xB
c0Us0Ys3LCIkcsK8MF57+H4htKN9peJqWhkffyGN4OAyvX8V2SciP0GftY1n6ko5
wLOZ8kSU/M51QpHY/cq4gGGYddlr/oqLf4/R6UL/yLrkp2z3LhfKDmJ5CQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBsLWDVH/yxpTRlHhYtNxHoDzBJHMB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvR3d0WU5VZl9MR2xOR1VlRmkwM0VlZ1BNRWtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW83EMA0G
CSqGSIb3DQEBCwUAA4IBAQCBI9F4PCYSj/463pWFCZ7LifM+R2ttQO7M2YbL3Jn/
7wif1fnU12VwK/v0HFn3tk3J3uh5Xh5Unr34I/FbLhTZV09WH8+eRr0HRETQ776f
k+xLsnBGED665VF8ggyc13mLM5bVBoScR0C3Q99revdXpkuXKJMEharr3baoQm0y
/R9kYbl7LnbCJQhBK9poN1gwl1n5dhyu7/PyF+0S80cwnEGq2iKiTc2i873G/iIy
L2tAoliUwVG/yeiNRFu7DfabVxJwz1lHUlhLt6zCyRHH0REPYVpPp/kvWPygz/WT
9kP5ZPBvHYdqKn4aK1bCt+6SesY7v08wdgnRBTAGOVPv
-----END CERTIFICATE-----
Generated at Thu Apr 17 07:13:21 2025 by rpki-client