Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/gaL-froc-ePMogA16UjR-T7HtL4.roa
File: gaL-froc-ePMogA16UjR-T7HtL4.roa (raw, json)
Hash identifier: BZVkgidtYZBrjRQGTwK0zbKol+MshMssae5HZODm1mM=
Subject key identifier: 81:A2:FE:7E:BA:1C:F9:E3:CC:A2:00:35:E9:48:D1:F9:3E:C7:B4:BE
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 018D2BBD21D939885A9335798EEF9D76B5C0
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/gaL-froc-ePMogA16UjR-T7HtL4.roa
Signing time: Sun 21 Jan 2024 11:17:11 +0000
ROA not before: Sun 21 Jan 2024 11:17:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/18 maxlen: 18
5.201.128.0/21 maxlen: 21
5.201.138.0/24 maxlen: 24
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.144.0/23 maxlen: 23
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
5.201.162.0/24 maxlen: 24
5.201.168.0/22 maxlen: 22
5.201.174.0/24 maxlen: 24
37.156.16.0/21 maxlen: 21
37.156.24.0/22 maxlen: 22
37.156.30.0/23 maxlen: 23
37.156.31.0/24 maxlen: 24
89.37.0.0/20 maxlen: 20
89.37.0.0/24 maxlen: 24
89.37.8.0/22 maxlen: 22
89.37.8.0/24 maxlen: 24
89.37.12.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
89.37.15.0/24 maxlen: 24
89.43.0.0/21 maxlen: 21
89.43.4.0/22 maxlen: 22
89.43.8.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.12.0/23 maxlen: 23
92.114.16.0/20 maxlen: 24
92.114.20.0/23 maxlen: 23
92.114.20.0/24 maxlen: 24
92.114.21.0/24 maxlen: 24
92.114.22.0/23 maxlen: 23
92.114.24.0/21 maxlen: 21
92.114.25.0/24 maxlen: 24
92.114.28.0/22 maxlen: 22
94.101.128.0/20 maxlen: 24
94.101.128.0/21 maxlen: 21
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
185.22.30.0/23 maxlen: 23
185.103.84.0/22 maxlen: 22
185.103.84.0/24 maxlen: 24
185.103.85.0/24 maxlen: 24
185.135.228.0/22 maxlen: 22
185.136.100.0/22 maxlen: 22
185.162.40.0/22 maxlen: 22
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
185.176.32.0/22 maxlen: 22
185.182.220.0/22 maxlen: 22
185.182.220.0/24 maxlen: 24
185.182.221.0/24 maxlen: 24
185.182.222.0/23 maxlen: 23
188.213.64.0/20 maxlen: 21
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
2a00:5ca0::/29 maxlen: 29
2a00:5ca0::/31 maxlen: 31
2a00:5ca0::/32 maxlen: 32
2a00:5ca2::/31 maxlen: 31
2a00:5ca4::/31 maxlen: 31
Validation: Failed, certificate revoked on Mon 22 Jan 2024 17:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2b:bd:21:d9:39:88:5a:93:35:79:8e:ef:9d:76:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jan 21 11:17:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81a2fe7eba1cf9e3cca20035e948d1f93ec7b4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f0:67:68:9d:07:82:3b:13:ef:57:67:07:1b:
f8:03:77:21:0d:d2:41:1c:20:63:2d:b8:e1:19:d7:
81:82:26:bd:e8:c4:f8:16:9d:75:0e:44:54:33:f7:
2d:cd:6e:e8:8d:a3:9e:5e:d5:e1:d5:f1:70:e6:c9:
53:28:c5:c1:e9:29:f1:52:03:2f:1c:c6:14:8d:ce:
db:ee:2f:8e:34:58:dc:ab:ea:87:f1:58:d8:c9:73:
1a:d9:e5:35:e4:61:ce:1c:3c:bf:bd:33:27:f3:a9:
4f:f3:da:a9:7e:6a:61:a5:62:9a:d1:30:a9:39:b1:
19:f7:40:25:c7:4c:fa:df:b9:f4:65:8f:c2:7d:55:
b1:46:2a:a6:69:6c:34:22:36:31:57:ad:d3:40:d6:
b1:1d:fb:64:97:82:91:79:2a:4f:cc:bd:0f:25:a5:
e5:4e:ef:92:cc:07:1d:07:df:10:7c:04:81:57:12:
4a:c4:bf:d7:b5:d3:f3:a9:69:68:5d:bb:4d:55:90:
41:d3:04:4a:32:63:4e:0f:a8:8b:80:38:35:67:9c:
ff:38:f2:9e:43:0c:a7:49:c7:90:7a:d5:f7:53:ce:
c2:cb:72:08:12:33:95:b7:25:65:5d:38:c8:e0:9b:
47:8c:4c:35:0f:71:f5:92:c1:9a:ff:4c:b5:45:23:
e6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A2:FE:7E:BA:1C:F9:E3:CC:A2:00:35:E9:48:D1:F9:3E:C7:B4:BE
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/gaL-froc-ePMogA16UjR-T7HtL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0-37.156.27.255
37.156.30.0/23
89.37.0.0/20
89.43.0.0-89.43.13.255
92.114.16.0/20
94.101.128.0/20
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
188.213.64.0/20
IPv6:
2a00:5ca0::/29
Signature Algorithm: sha256WithRSAEncryption
8d:0b:af:67:0e:06:88:91:d7:7b:c8:16:d3:10:2f:e1:5e:ba:
1e:39:e4:47:5d:ad:79:81:d9:d5:e7:86:82:72:a4:1b:a1:b7:
25:9c:54:62:c2:48:f8:ac:c3:26:25:4e:31:34:df:22:53:d4:
94:b4:92:34:69:40:0b:f4:2b:c7:54:ef:6d:7d:a8:4c:e4:ac:
fc:04:00:1e:8b:10:9c:9b:91:84:35:3e:34:eb:19:e8:61:0b:
d7:b5:51:bb:d6:44:48:26:7f:78:1e:d6:8d:f0:c3:db:b4:cc:
5d:fa:2e:0c:76:74:2d:52:87:73:7f:2e:9d:22:cf:54:0b:a6:
fa:d5:ce:f0:a0:62:08:62:b6:6b:1f:7f:bc:3b:e8:db:1e:50:
c4:b6:ee:b1:07:90:6a:b3:a4:e1:b5:12:35:1d:86:7a:85:72:
0f:b2:4a:81:17:c3:38:05:9d:10:13:2e:59:fe:3b:72:54:1c:
f1:a0:da:40:6a:66:72:6e:e4:39:d4:e1:c0:c8:6c:f9:15:60:
ff:52:98:5d:15:5b:ee:67:45:8b:a1:f1:73:59:d7:ba:6c:31:
97:b8:6a:ec:99:90:ae:ec:e4:77:56:c8:69:c4:90:d8:a4:6a:
69:46:e6:f4:89:bd:6d:3e:5b:88:61:62:a6:02:2b:3f:d0:7b:
de:9d:4c:29
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAY0rvSHZOYhakzV5ju+ddrXAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4
OTk1YWIwHhcNMjQwMTIxMTExNzExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWEyZmU3ZWJhMWNmOWUzY2NhMjAwMzVlOTQ4ZDFmOTNlYzdiNGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/BnaJ0HgjsT71dnBxv4A3chDdJB
HCBjLbjhGdeBgia96MT4Fp11DkRUM/ctzW7ojaOeXtXh1fFw5slTKMXB6SnxUgMv
HMYUjc7b7i+ONFjcq+qH8VjYyXMa2eU15GHOHDy/vTMn86lP89qpfmphpWKa0TCp
ObEZ90Alx0z637n0ZY/CfVWxRiqmaWw0IjYxV63TQNaxHftkl4KReSpPzL0PJaXl
Tu+SzAcdB98QfASBVxJKxL/XtdPzqWloXbtNVZBB0wRKMmNOD6iLgDg1Z5z/OPKe
QwynSceQetX3U87Cy3IIEjOVtyVlXTjI4JtHjEw1D3H1ksGa/0y1RSPmGwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFIGi/n66HPnjzKIANelI0fk+x7S+MB8GA1UdIwQY
MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt
NDBiNmQ2N2ZjZDk0LzEvZ2FMLWZyb2MtZVBNb2dBMTZValItVDdIdEw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0
LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGZBggrBgEFBQcBBwEB/wSBiTCBhjB1BAIAATBvAwQGBcmA
MAwDBAQlnBADBAIlnBgDBAElnB4DBARZJQAwCwMDAFkrAwQBWSsMAwQEXHIQAwQE
XmWAAwQBuRYeAwQCuWdUAwQCuYfkAwQCuYhkAwQCuaIoAwQCua9MAwQCubAgAwQC
ubbcAwQEvNVAMA0EAgACMAcDBQMqAFygMA0GCSqGSIb3DQEBCwUAA4IBAQCNC69n
DgaIkdd7yBbTEC/hXroeOeRHXa15gdnV54aCcqQbobclnFRiwkj4rMMmJU4xNN8i
U9SUtJI0aUAL9CvHVO9tfahM5Kz8BAAeixCcm5GENT406xnoYQvXtVG71kRIJn94
HtaN8MPbtMxd+i4MdnQtUodzfy6dIs9UC6b61c7woGIIYrZrH3+8O+jbHlDEtu6x
B5Bqs6ThtRI1HYZ6hXIPskqBF8M4BZ0QEy5Z/jtyVBzxoNpAamZybuQ51OHAyGz5
FWD/UphdFVvuZ0WLofFzWde6bDGXuGrsmZCu7OR3VshpxJDYpGppRub0ib1tPluI
YWKmAis/0HvenUwp
-----END CERTIFICATE-----
Generated at Mon Jan 22 20:33:39 2024 by rpki-client on console-fra.rpki-client.org