Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/Gkf8LJfUAIwty7LiSIOUV2S44h4.roa
File: Gkf8LJfUAIwty7LiSIOUV2S44h4.roa (raw, json)
Hash identifier: owfKuYWIIoqv4eOcR+1F837CvEtQL194axh+/jIF9QA=
Subject key identifier: 1A:47:FC:2C:97:D4:00:8C:2D:CB:B2:E2:48:83:94:57:64:B8:E2:1E
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 018CC94E5AC2852E67E5A8D9B3044C98D71F
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/Gkf8LJfUAIwty7LiSIOUV2S44h4.roa
Signing time: Tue 02 Jan 2024 08:33:24 +0000
ROA not before: Tue 02 Jan 2024 08:33:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3209
IP address blocks: 194.126.198.0/24 maxlen: 24
185.45.250.0/23 maxlen: 24
185.45.248.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:50:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:5a:c2:85:2e:67:e5:a8:d9:b3:04:4c:98:d7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 2 08:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a47fc2c97d4008c2dcbb2e24883945764b8e21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fd:34:00:cf:0e:42:82:1f:7b:26:1d:86:3c:
80:87:06:52:e7:4f:a3:99:02:06:25:c7:e7:db:f6:
8d:3a:a8:8b:9e:bd:6b:71:b3:79:7d:b0:ee:0b:4f:
f4:40:57:e2:39:46:84:76:71:3b:d8:7b:ac:d8:d9:
01:e5:3f:07:f0:d2:32:8a:a4:e3:51:64:1d:d2:cc:
dc:69:26:62:88:9a:a2:7c:5d:8e:95:12:99:73:a7:
15:25:f7:f2:38:7f:cb:7b:ab:94:e3:f1:93:1d:ff:
85:5a:e2:50:34:f2:fb:fc:2a:f0:38:51:b6:96:a7:
87:f8:01:74:fb:14:73:84:19:1f:94:52:a1:dd:bd:
60:1c:ef:07:11:17:d4:7a:9e:17:2b:e9:d0:03:8e:
5f:c3:52:a8:54:78:9d:45:6d:29:74:fa:90:a8:57:
11:55:24:bd:34:d5:95:aa:71:67:e9:68:b4:71:a5:
cb:43:af:2f:b8:38:92:10:6f:0d:6b:88:e3:a4:1a:
4b:50:18:9c:10:31:4e:f2:bc:a2:44:5a:54:5a:f4:
e0:b1:8c:4d:ee:8f:04:e9:de:b0:3d:67:a7:1e:c8:
6e:52:39:99:f0:b3:05:fc:b1:f7:b7:11:0a:8d:22:
a3:48:42:47:0f:2b:e3:56:ed:0b:a2:63:ab:a5:fe:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:47:FC:2C:97:D4:00:8C:2D:CB:B2:E2:48:83:94:57:64:B8:E2:1E
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/Gkf8LJfUAIwty7LiSIOUV2S44h4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.248.0/22
194.126.198.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:64:8c:36:66:4d:14:8f:c5:92:5c:88:2e:f6:e2:f3:40:92:
82:da:e1:52:4a:79:2f:0a:15:20:fc:36:7a:0f:a8:9e:51:33:
46:fe:c0:0b:3b:70:60:ff:b6:eb:c6:f6:52:92:7f:44:16:dd:
9c:78:76:e5:d9:a8:fe:87:b7:b5:91:a1:1c:76:7f:0f:99:ec:
08:21:04:97:6d:76:74:c9:5c:9d:7b:e2:5f:d3:d7:40:69:63:
6d:d3:06:09:ec:94:42:60:14:8f:89:82:b3:dd:94:60:a6:e1:
21:e7:99:fb:25:fb:5d:e7:13:a3:a3:8d:88:18:ef:83:0a:e4:
10:2c:1e:0e:93:17:df:3b:48:95:4c:8e:6f:cf:32:09:7a:24:
1a:c5:39:5c:2a:14:b8:ea:e5:39:68:a4:69:09:8f:7c:80:2c:
51:d3:84:7e:6b:22:45:c4:c1:e2:6b:bf:6e:f5:16:a3:6d:18:
82:f3:e5:65:6f:0f:ac:3b:44:c5:5e:e4:78:93:8d:a0:0c:2c:
7d:32:ea:b7:19:09:c0:f2:0b:ba:08:29:51:ec:ba:f3:80:55:
cd:c3:3f:e0:4e:f1:d3:ae:56:fc:5c:61:f7:ec:fd:18:a2:6f:
e6:65:f0:df:66:3d:e7:1f:a0:39:d0:03:f2:8c:be:8d:45:1e:
25:d6:59:2f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzJTlrChS5n5ajZswRMmNcfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj
NTBkMjAwHhcNMjQwMTAyMDgzMzI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTQ3ZmMyYzk3ZDQwMDhjMmRjYmIyZTI0ODgzOTQ1NzY0YjhlMjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/00AM8OQoIfeyYdhjyAhwZS50+j
mQIGJcfn2/aNOqiLnr1rcbN5fbDuC0/0QFfiOUaEdnE72Hus2NkB5T8H8NIyiqTj
UWQd0szcaSZiiJqifF2OlRKZc6cVJffyOH/Le6uU4/GTHf+FWuJQNPL7/CrwOFG2
lqeH+AF0+xRzhBkflFKh3b1gHO8HERfUep4XK+nQA45fw1KoVHidRW0pdPqQqFcR
VSS9NNWVqnFn6Wi0caXLQ68vuDiSEG8Na4jjpBpLUBicEDFO8ryiRFpUWvTgsYxN
7o8E6d6wPWenHshuUjmZ8LMF/LH3txEKjSKjSEJHDyvjVu0LomOrpf43IwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBpH/CyX1ACMLcuy4kiDlFdkuOIeMB8GA1UdIwQY
MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt
YTY4NzNiMzc0ZTI2LzEvR2tmOExKZlVBSXd0eTdMaVNJT1VWMlM0NGg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2
LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuS34AwQA
wn7GMA0GCSqGSIb3DQEBCwUAA4IBAQDDZIw2Zk0Uj8WSXIgu9uLzQJKC2uFSSnkv
ChUg/DZ6D6ieUTNG/sALO3Bg/7brxvZSkn9EFt2ceHbl2aj+h7e1kaEcdn8PmewI
IQSXbXZ0yVyde+Jf09dAaWNt0wYJ7JRCYBSPiYKz3ZRgpuEh55n7Jftd5xOjo42I
GO+DCuQQLB4OkxffO0iVTI5vzzIJeiQaxTlcKhS46uU5aKRpCY98gCxR04R+ayJF
xMHia79u9RajbRiC8+Vlbw+sO0TFXuR4k42gDCx9Muq3GQnA8gu6CClR7LrzgFXN
wz/gTvHTrlb8XGH37P0Yom/mZfDfZj3nH6A50APyjL6NRR4l1lkv
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:41:59 2025 by rpki-client