Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/gultSk-ngaWxbYaKhls_3MMuqMo.roa
File: gultSk-ngaWxbYaKhls_3MMuqMo.roa (raw, json)
Hash identifier: /LQFBQVoqCZebzUntQgXWyV9sV6pAp1CKUEe1b78KMQ=
Subject key identifier: 82:E9:6D:4A:4F:A7:81:A5:B1:6D:86:8A:86:5B:3F:DC:C3:2E:A8:CA
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0194AE321B094870F50A3CBEF91291092E51
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/gultSk-ngaWxbYaKhls_3MMuqMo.roa
Signing time: Tue 28 Jan 2025 18:35:06 +0000
ROA not before: Tue 28 Jan 2025 18:35:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199959
IP address blocks: 45.43.147.0/24 maxlen: 24
45.43.152.0/24 maxlen: 24
64.137.110.0/23 maxlen: 23
104.222.191.0/24 maxlen: 24
104.233.56.0/24 maxlen: 24
104.233.58.0/24 maxlen: 24
104.238.24.0/24 maxlen: 24
104.238.28.0/24 maxlen: 24
104.239.47.0/24 maxlen: 24
104.239.66.0/24 maxlen: 24
104.239.74.0/24 maxlen: 24
104.239.79.0/24 maxlen: 24
104.239.83.0/24 maxlen: 24
104.239.89.0/24 maxlen: 24
104.239.100.0/24 maxlen: 24
104.239.102.0/24 maxlen: 24
104.239.109.0/24 maxlen: 24
104.239.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Feb 2025 13:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ae:32:1b:09:48:70:f5:0a:3c:be:f9:12:91:09:2e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 28 18:35:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82e96d4a4fa781a5b16d868a865b3fdcc32ea8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:89:74:eb:b4:c1:f8:e0:4a:52:79:17:c3:
f0:fe:69:92:8b:9a:b5:31:f6:b2:2a:38:f6:c4:84:
30:4d:37:22:66:55:11:99:8a:1b:4d:57:5c:7b:84:
ff:e7:5d:95:f2:5e:eb:67:40:4f:50:2b:e4:d6:33:
0d:b4:f1:43:a6:7d:0f:be:85:7e:46:b5:2b:a0:61:
39:97:86:f4:6c:8e:1c:65:88:fb:54:5b:92:77:6e:
cb:cf:9b:85:bf:0c:11:21:29:9a:3d:6d:5e:01:97:
4b:ef:62:19:f0:dc:cf:c9:da:0b:5d:a1:0c:38:7f:
fa:48:7f:88:01:3b:74:e0:dd:4d:a6:13:56:b0:bb:
6e:eb:17:44:34:9f:de:08:55:c6:5d:a0:e4:d2:43:
d3:36:ae:a7:15:86:cf:e4:90:d6:8f:a6:46:aa:7a:
62:52:89:06:ce:6b:a2:2e:ac:6e:16:72:e5:58:ff:
6f:62:d0:26:62:58:08:07:63:02:bd:6b:b9:fb:f9:
ba:7f:6c:74:3e:a5:6a:98:8c:f9:97:70:f4:09:4b:
d8:a5:f3:6d:4d:05:a1:a9:17:0e:a3:ab:21:0b:8c:
59:8f:4c:a2:95:84:99:68:af:ec:d6:8a:be:a2:19:
ae:81:09:3a:dd:cc:07:4d:41:26:fc:39:68:2d:dc:
ef:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E9:6D:4A:4F:A7:81:A5:B1:6D:86:8A:86:5B:3F:DC:C3:2E:A8:CA
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/gultSk-ngaWxbYaKhls_3MMuqMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.147.0/24
45.43.152.0/24
64.137.110.0/23
104.222.191.0/24
104.233.56.0/24
104.233.58.0/24
104.238.24.0/24
104.238.28.0/24
104.239.47.0/24
104.239.66.0/24
104.239.74.0/24
104.239.79.0/24
104.239.83.0/24
104.239.89.0/24
104.239.100.0/24
104.239.102.0/24
104.239.109.0/24
104.239.127.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:5b:a5:e2:17:9b:63:77:70:2e:79:bc:ff:f3:bb:f3:49:d6:
0b:76:da:10:bf:e3:9c:2a:62:aa:8d:43:43:1e:ce:6e:6e:28:
96:c3:d6:74:02:b8:3b:26:c0:5c:9d:0b:fc:b4:df:a7:b1:f2:
e4:fa:9a:b9:b4:61:8a:69:2e:71:27:b8:e0:a5:d0:6c:eb:63:
f5:c8:ee:46:f1:61:6b:d2:61:30:f6:da:03:09:10:cb:c5:4c:
ca:ca:68:4b:11:a9:d3:70:22:d6:c5:9f:97:2b:be:6f:c5:c8:
86:16:1d:fc:4e:35:05:1a:81:47:f1:e5:0a:8d:4c:d5:72:66:
30:f4:51:bf:e9:1c:d3:c1:db:95:7e:78:cb:e0:a5:24:05:fb:
fe:99:49:09:bf:de:bc:ef:10:1b:68:5c:ad:e5:16:e5:f2:ba:
2e:ea:20:6f:1f:b5:3f:7d:e9:e6:3f:95:78:09:4d:74:18:78:
69:22:74:0b:32:7c:e1:4b:bd:c2:7f:01:ec:7e:4f:60:35:2f:
ce:2d:9f:19:71:54:f2:45:63:02:07:d2:74:e8:be:7a:a7:63:
af:e9:2f:95:75:ba:29:1e:8b:52:1a:4a:68:3b:24:22:38:27:
95:83:07:7f:a6:db:04:ab:4a:10:9d:cb:ee:d0:ec:c5:e6:10:
ca:24:54:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:31:26 2025 by rpki-client