Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/3GwRE-OGM_DtGGtP5l5_YtnNHzs.roa
File: 3GwRE-OGM_DtGGtP5l5_YtnNHzs.roa (raw, json)
Hash identifier: vzWfI8HoMm7XZP8CqkvtD0CkQ/t4rjYsUa/AFHBGs0Y=
Subject key identifier: DC:6C:11:13:E3:86:33:F0:ED:18:6B:4F:E6:5E:7F:62:D9:CD:1F:3B
Certificate issuer: /CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Certificate serial: 01857267CC13EBD86E3C330180C0BA32DE0B
Authority key identifier: 05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/3GwRE-OGM_DtGGtP5l5_YtnNHzs.roa
Signing time: Mon 02 Jan 2023 12:14:43 +0000
ROA not before: Mon 02 Jan 2023 12:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34134
IP address blocks: 185.25.144.0/23 maxlen: 23
185.25.146.0/23 maxlen: 23
195.160.212.0/23 maxlen: 23
195.160.214.0/23 maxlen: 23
2a04:15c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:67:cc:13:eb:d8:6e:3c:33:01:80:c0:ba:32:de:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Validity
Not Before: Jan 2 12:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc6c1113e38633f0ed186b4fe65e7f62d9cd1f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:32:fa:99:bf:5a:ee:ba:0b:bd:27:4a:2d:cf:
d2:e3:ac:59:5b:bd:26:33:7d:ca:92:00:d2:dd:ce:
38:a6:31:46:ca:95:ba:9f:ad:35:b6:60:fe:df:c7:
d1:6f:a0:2c:34:ce:27:3e:fa:f2:ae:26:64:dd:ea:
b7:10:af:26:95:f2:90:d1:e2:74:09:18:2d:41:b6:
16:ba:32:5a:ab:3d:46:20:f3:4d:33:5e:03:30:d0:
da:60:85:4d:40:dd:91:91:8b:d9:76:9b:e1:88:f7:
9f:b7:39:2a:59:0f:ad:dc:37:7e:0e:9e:ee:6b:a6:
d0:97:13:40:bb:99:9e:9b:59:4e:23:fc:83:9b:03:
6d:67:f2:81:f7:26:d0:b5:cd:a7:35:be:71:c5:e1:
be:1d:47:06:4c:e8:cf:cd:b2:e1:6d:a5:c5:36:2a:
20:22:ed:f1:7a:46:ff:74:76:0f:ce:52:c0:08:ae:
7d:05:75:22:41:d2:3d:e0:95:a6:2c:2a:8e:4e:34:
a8:d8:16:92:73:51:d1:1b:77:f1:ae:9e:df:31:87:
6b:b4:32:0f:2b:28:64:4d:c2:96:ff:c5:50:0d:be:
c7:24:45:20:16:f3:fb:b9:75:04:22:af:9e:6c:a0:
08:78:a1:84:17:50:76:5e:94:94:4d:eb:c1:2c:40:
b0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6C:11:13:E3:86:33:F0:ED:18:6B:4F:E6:5E:7F:62:D9:CD:1F:3B
X509v3 Authority Key Identifier:
keyid:05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/3GwRE-OGM_DtGGtP5l5_YtnNHzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.144.0/22
195.160.212.0/22
IPv6:
2a04:15c0::/29
Signature Algorithm: sha256WithRSAEncryption
51:62:94:39:7c:54:44:e0:bc:fa:fc:86:7c:fa:67:a2:58:4d:
c3:d1:68:55:2e:5c:bf:07:6a:15:6e:36:f4:c3:84:f9:ba:e2:
92:02:4e:9a:5d:87:49:13:5d:05:eb:da:6a:5d:63:0e:80:03:
de:09:c2:9a:8b:50:02:7a:77:26:db:b1:ca:49:11:50:1e:eb:
0b:cf:c8:59:54:a9:25:c6:48:68:ca:ec:40:16:ac:48:88:ba:
17:3c:ae:db:c0:6e:ce:2a:b5:8b:84:dd:d1:69:99:b0:51:aa:
66:63:34:b6:af:12:4d:25:a2:85:86:47:61:b9:52:7f:44:70:
51:8e:94:29:ef:cf:7b:29:0b:59:02:ff:6e:a8:24:fb:2e:43:
e6:d7:0b:b5:98:b2:c4:86:d6:9c:a2:27:c1:a5:9e:74:c5:eb:
e9:9f:ca:0d:b1:18:93:77:5f:37:db:d1:0f:b0:62:8f:ff:94:
34:23:b3:54:e5:d7:24:3c:11:5d:24:25:a6:ce:fe:6e:e7:f5:
cf:91:d0:e2:ec:3d:04:ce:19:47:42:7f:a6:75:11:32:d4:02:
e0:c3:a6:c5:60:3a:db:69:12:06:2a:33:cb:ce:91:a2:fd:4a:
59:5c:09:29:54:7d:20:59:7a:46:e4:9b:cd:14:d6:4b:1a:0e:
f7:d1:e0:0e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVyZ8wT69huPDMBgMC6Mt4LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDFlYTFiZjJhZGFhZGQzNmE2MjJlYjNlYTgzNWRjOWJi
NjgxOWIwHhcNMjMwMTAyMTIxNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzZjMTExM2UzODYzM2YwZWQxODZiNGZlNjVlN2Y2MmQ5Y2QxZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjL6mb9a7roLvSdKLc/S46xZW70m
M33KkgDS3c44pjFGypW6n601tmD+38fRb6AsNM4nPvryriZk3eq3EK8mlfKQ0eJ0
CRgtQbYWujJaqz1GIPNNM14DMNDaYIVNQN2RkYvZdpvhiPeftzkqWQ+t3Dd+Dp7u
a6bQlxNAu5mem1lOI/yDmwNtZ/KB9ybQtc2nNb5xxeG+HUcGTOjPzbLhbaXFNiog
Iu3xekb/dHYPzlLACK59BXUiQdI94JWmLCqOTjSo2BaSc1HRG3fxrp7fMYdrtDIP
KyhkTcKW/8VQDb7HJEUgFvP7uXUEIq+ebKAIeKGEF1B2XpSUTevBLECwGwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFNxsERPjhjPw7RhrT+Zef2LZzR87MB8GA1UdIwQY
MBaAFAVB6hvyrardNqYi6z6oNdybtoGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82NGEwNjMtNWM0ZC00MTBjLTg2YWEt
MjRhZmNlZjRmM2Y1LzEvM0d3UkUtT0dNX0R0R0d0UDVsNV9ZdG5OSHpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi82NGEwNjMtNWM0ZC00MTBjLTg2YWEtMjRhZmNlZjRmM2Y1
LzEvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuRmQAwQC
w6DUMA0EAgACMAcDBQMqBBXAMA0GCSqGSIb3DQEBCwUAA4IBAQBRYpQ5fFRE4Lz6
/IZ8+meiWE3D0WhVLly/B2oVbjb0w4T5uuKSAk6aXYdJE10F69pqXWMOgAPeCcKa
i1ACencm27HKSRFQHusLz8hZVKklxkhoyuxAFqxIiLoXPK7bwG7OKrWLhN3RaZmw
UapmYzS2rxJNJaKFhkdhuVJ/RHBRjpQp7897KQtZAv9uqCT7LkPm1wu1mLLEhtac
oifBpZ50xevpn8oNsRiTd18329EPsGKP/5Q0I7NU5dckPBFdJCWmzv5u5/XPkdDi
7D0EzhlHQn+mdREy1ALgw6bFYDrbaRIGKjPLzpGi/UpZXAkpVH0gWXpG5JvNFNZL
Gg730eAO
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:35 2024 by rpki-client on console-ams.rpki-client.org