Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/gqkKmt38vwfJ6biluncMDmQ6oFI.roa
File: gqkKmt38vwfJ6biluncMDmQ6oFI.roa (raw, json)
Hash identifier: UDSYBe5bvEilxbNMLVvfcCEkPTGSwZ7odiWHAs8mFiI=
Subject key identifier: 82:A9:0A:9A:DD:FC:BF:07:C9:E9:B8:A5:BA:77:0C:0E:64:3A:A0:52
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0190EF7696978E405A3C34293806F48BA58B
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/gqkKmt38vwfJ6biluncMDmQ6oFI.roa
Signing time: Fri 26 Jul 2024 14:34:04 +0000
ROA not before: Fri 26 Jul 2024 14:34:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202766
IP address blocks: 45.80.80.0/24 maxlen: 24
45.80.82.0/23 maxlen: 23
45.80.82.0/24 maxlen: 24
45.80.83.0/24 maxlen: 24
45.83.50.0/23 maxlen: 23
45.83.50.0/24 maxlen: 24
45.83.51.0/24 maxlen: 24
80.66.112.0/20 maxlen: 20
80.66.112.0/23 maxlen: 23
80.66.114.0/24 maxlen: 24
80.66.115.0/24 maxlen: 24
80.66.116.0/24 maxlen: 24
80.66.117.0/24 maxlen: 24
80.66.118.0/24 maxlen: 24
80.66.119.0/24 maxlen: 24
80.66.120.0/24 maxlen: 24
80.66.121.0/24 maxlen: 24
80.66.122.0/24 maxlen: 24
80.66.123.0/24 maxlen: 24
80.66.124.0/24 maxlen: 24
80.66.125.0/24 maxlen: 24
80.66.126.0/24 maxlen: 24
80.66.127.0/24 maxlen: 24
89.42.70.0/24 maxlen: 24
89.44.150.0/24 maxlen: 24
89.44.151.0/24 maxlen: 24
91.132.31.0/24 maxlen: 24
94.198.46.0/24 maxlen: 24
94.198.47.0/24 maxlen: 24
178.19.32.0/24 maxlen: 24
178.19.33.0/24 maxlen: 24
178.19.44.0/24 maxlen: 24
178.19.47.0/24 maxlen: 24
185.203.20.0/22 maxlen: 22
185.203.20.0/24 maxlen: 24
185.203.21.0/24 maxlen: 24
185.203.22.0/24 maxlen: 24
185.203.23.0/24 maxlen: 24
185.229.212.0/22 maxlen: 22
185.229.212.0/24 maxlen: 24
185.229.213.0/24 maxlen: 24
185.229.214.0/24 maxlen: 24
185.229.215.0/24 maxlen: 24
185.242.175.0/24 maxlen: 24
194.15.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jul 2024 20:44:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ef:76:96:97:8e:40:5a:3c:34:29:38:06:f4:8b:a5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 26 14:34:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82a90a9addfcbf07c9e9b8a5ba770c0e643aa052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:82:5e:72:a6:c1:ce:60:fe:cb:e1:b1:ff:66:
dd:1e:b8:fe:58:d1:44:2c:25:36:60:94:9c:5d:d1:
93:9c:bf:72:4b:8f:c7:b8:ac:c5:80:c7:bd:ad:43:
c3:0e:b8:26:4a:2e:db:3c:75:01:37:42:19:3c:ca:
70:47:47:75:0f:31:2a:55:69:dd:96:4c:c1:af:26:
26:a3:8f:26:34:21:e3:ea:13:9a:e1:96:fe:83:40:
7f:19:e9:f6:65:12:ae:2a:bb:49:bb:7e:31:37:e9:
bf:b6:bd:6a:cb:02:b9:e3:c6:7c:de:f5:bd:52:9d:
76:d7:5b:64:b6:d4:9f:f4:0b:03:d3:cf:a0:08:85:
db:d8:36:96:b5:54:0e:c2:88:07:20:80:43:8f:9f:
d3:00:0b:90:0f:22:6d:7b:ce:a1:22:50:fc:65:03:
a9:21:9a:aa:bf:41:72:1d:fd:06:eb:77:df:cf:3b:
52:49:ec:db:e2:22:14:8c:cf:bd:99:ec:06:9b:b1:
b2:65:25:a7:b5:00:53:32:32:e9:ce:12:f1:0b:99:
59:47:86:61:8b:fe:94:ca:2e:97:05:fc:76:d0:67:
91:c0:27:f2:7b:7b:18:7e:c0:f1:b2:b6:3b:e6:8a:
16:85:61:3c:75:f5:7c:f6:d0:00:b2:d7:8a:64:55:
1a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A9:0A:9A:DD:FC:BF:07:C9:E9:B8:A5:BA:77:0C:0E:64:3A:A0:52
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/gqkKmt38vwfJ6biluncMDmQ6oFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.80.0/24
45.80.82.0/23
45.83.50.0/23
80.66.112.0/20
89.42.70.0/24
89.44.150.0/23
91.132.31.0/24
94.198.46.0/23
178.19.32.0/23
178.19.44.0/24
178.19.47.0/24
185.203.20.0/22
185.229.212.0/22
185.242.175.0/24
194.15.195.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:dd:db:be:46:c2:46:9b:66:19:1a:ab:02:a6:78:ba:05:59:
7a:5a:62:87:88:bf:62:18:aa:59:9b:cb:78:55:f2:6b:18:65:
5d:c7:6f:ac:da:5b:3c:9e:a8:d7:9e:57:46:ee:4e:8d:ad:47:
f3:bf:4d:54:90:26:88:bb:f7:86:33:38:b5:b2:3d:2f:2e:27:
1d:eb:44:c1:df:e6:d4:d7:0d:34:f9:f9:c2:ad:9d:a2:44:33:
d5:d0:9a:1e:d8:3f:81:86:a9:56:a0:49:88:ec:36:8b:41:99:
bb:e1:7c:e3:21:e4:ef:1a:8d:65:13:21:48:8b:71:32:ab:b0:
21:b1:64:c9:e5:86:bf:94:0c:e1:23:63:18:8c:61:3c:dd:a2:
46:64:ee:51:d0:24:d3:57:0d:32:65:b4:94:c6:eb:c7:1a:6a:
41:78:34:32:fb:41:30:a5:b6:cc:83:4d:9d:5d:b3:78:4a:2f:
32:ca:d2:7a:05:b1:62:5b:e0:a1:0e:eb:dd:7d:49:0c:ed:83:
b7:e6:3b:a9:b0:05:9a:e3:18:43:f9:00:df:08:22:65:52:26:
7e:fc:5c:84:a5:fc:2d:9a:cb:f9:de:d9:e9:b0:8b:51:2e:66:
a1:71:9e:4d:35:43:f0:c0:e9:e7:40:f1:10:4e:de:c2:b4:d7:
67:1c:d4:c5
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAZDvdpaXjkBaPDQpOAb0i6WLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjQwNzI2MTQzNDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmE5MGE5YWRkZmNiZjA3YzllOWI4YTViYTc3MGMwZTY0M2FhMDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IJecqbBzmD+y+Gx/2bdHrj+WNFE
LCU2YJScXdGTnL9yS4/HuKzFgMe9rUPDDrgmSi7bPHUBN0IZPMpwR0d1DzEqVWnd
lkzBryYmo48mNCHj6hOa4Zb+g0B/Gen2ZRKuKrtJu34xN+m/tr1qywK548Z83vW9
Up1211tkttSf9AsD08+gCIXb2DaWtVQOwogHIIBDj5/TAAuQDyJte86hIlD8ZQOp
IZqqv0FyHf0G63ffzztSSezb4iIUjM+9mewGm7GyZSWntQBTMjLpzhLxC5lZR4Zh
i/6Uyi6XBfx20GeRwCfye3sYfsDxsrY75ooWhWE8dfV89tAAsteKZFUaRQIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFIKpCprd/L8Hyem4pbp3DA5kOqBSMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvZ3FrS210Mzh2d2ZKNmJpbHVuY01EbVE2b0ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQALVBQAwQB
LVBSAwQBLVMyAwQEUEJwAwQAWSpGAwQBWSyWAwQAW4QfAwQBXsYuAwQBshMgAwQA
shMsAwQAshMvAwQCucsUAwQCueXUAwQAufKvAwQAwg/DMA0GCSqGSIb3DQEBCwUA
A4IBAQAd3du+RsJGm2YZGqsCpni6BVl6WmKHiL9iGKpZm8t4VfJrGGVdx2+s2ls8
nqjXnldG7k6NrUfzv01UkCaIu/eGMzi1sj0vLicd60TB3+bU1w00+fnCrZ2iRDPV
0Joe2D+BhqlWoEmI7DaLQZm74XzjIeTvGo1lEyFIi3Eyq7AhsWTJ5Ya/lAzhI2MY
jGE83aJGZO5R0CTTVw0yZbSUxuvHGmpBeDQy+0EwpbbMg02dXbN4Si8yytJ6BbFi
W+ChDuvdfUkM7YO35jupsAWa4xhD+QDfCCJlUiZ+/FyEpfwtmsv53tnpsItRLmah
cZ5NNUPwwOnnQPEQTt7CtNdnHNTF
-----END CERTIFICATE-----
Generated at Sun Jul 28 22:00:02 2024 by rpki-client on console-fra.rpki-client.org