Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/GKeWe091DtA-2rawmuCNeSZk-yU.roa
File: GKeWe091DtA-2rawmuCNeSZk-yU.roa (raw, json)
Hash identifier: 05jKrIbatlXAn50XvlT2uEx0juuXJvgbimPi+4fPTrc=
Subject key identifier: 18:A7:96:7B:4F:75:0E:D0:3E:DA:B6:B0:9A:E0:8D:79:26:64:FB:25
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01910405F3F597B6331283F3BA00F04A2D81
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/GKeWe091DtA-2rawmuCNeSZk-yU.roa
Signing time: Tue 30 Jul 2024 14:23:04 +0000
ROA not before: Tue 30 Jul 2024 14:23:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 18:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:04:05:f3:f5:97:b6:33:12:83:f3:ba:00:f0:4a:2d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 30 14:23:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18a7967b4f750ed03edab6b09ae08d792664fb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:65:dc:a8:15:13:79:62:65:e5:2b:d4:5a:
68:b4:6c:4c:4f:63:f2:42:f2:79:50:b4:a1:dc:5a:
c4:5c:14:de:48:aa:22:b0:4f:b6:67:03:59:16:3a:
4d:da:eb:99:ea:8a:b7:cb:05:e9:d3:d0:11:6c:c5:
e8:3c:f9:cb:19:e6:91:82:5f:aa:17:c3:93:22:96:
5c:fc:f8:56:39:7c:4a:77:20:7f:8b:70:d7:fc:ad:
62:64:9c:d5:e6:e1:6d:10:98:19:fb:be:ae:99:aa:
59:b4:7b:a1:76:c1:64:27:6b:ef:71:b6:49:a0:2a:
dc:5e:a2:91:12:2b:32:cd:c2:84:76:9b:37:93:f7:
47:44:21:65:f6:d9:2a:12:7b:60:ec:d9:77:4f:8d:
b5:94:69:e2:1f:59:d6:a1:39:07:02:a5:01:cd:58:
84:4a:1c:9c:01:30:1b:73:14:98:a1:98:07:88:98:
44:0e:f6:2a:f7:ea:d2:f3:a8:6e:f4:07:de:eb:92:
3a:7e:42:2f:9d:d7:2b:34:92:c3:7a:b0:3e:af:66:
ed:f8:60:10:98:35:0e:48:1f:46:a4:ab:f4:42:49:
e9:fa:a7:fd:d8:e1:a3:58:39:8d:3d:10:aa:0e:8f:
98:ac:94:e0:3c:0f:c6:16:bd:bf:c4:8c:4f:09:32:
1d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A7:96:7B:4F:75:0E:D0:3E:DA:B6:B0:9A:E0:8D:79:26:64:FB:25
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/GKeWe091DtA-2rawmuCNeSZk-yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
46.102.237.0/24
89.34.106.0/24
91.132.51.0/24
93.114.183.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ad:d7:ff:fc:95:88:21:d7:12:8f:2c:92:64:63:ce:41:c0:
d7:0a:67:01:b5:c8:40:04:92:19:08:a6:af:5a:f5:13:d5:57:
84:46:74:8c:62:bf:32:1f:60:9b:03:f5:88:0f:ec:04:f5:bf:
cd:f6:4b:b8:c8:02:60:84:95:b4:0d:0c:12:e8:b8:2d:69:3d:
1b:fe:d0:d0:77:57:f3:37:2d:45:87:1e:6d:e7:f3:cc:75:54:
fc:b0:f1:11:39:ca:f6:db:15:07:b1:3e:12:ef:3f:53:8f:3d:
04:55:da:6f:a3:59:b1:6e:51:42:34:62:c1:e5:c1:8e:dc:3f:
67:ba:77:9e:32:40:be:00:03:35:37:67:f1:1a:bd:e4:4a:b5:
02:89:1f:42:ca:d8:4f:da:49:2e:7c:30:a9:cf:21:bd:03:df:
66:d3:38:e0:a9:50:1f:f8:b4:fd:01:7a:2b:9b:75:ae:fd:ed:
82:9a:38:13:39:0d:cc:f1:a5:93:04:84:42:0f:56:bf:44:83:
89:60:44:bd:50:a0:ec:17:09:aa:64:02:c1:10:da:4f:e4:5b:
a2:9a:22:a6:35:a4:2e:32:8f:c2:85:a8:aa:fb:9a:51:a8:da:
a2:34:be:60:f4:f8:e5:6c:a3:f8:c0:c3:32:a1:72:61:a6:48:
65:6d:6f:af
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZEEBfP1l7YzEoPzugDwSi2BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwNzMwMTQyMzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGE3OTY3YjRmNzUwZWQwM2VkYWI2YjA5YWUwOGQ3OTI2NjRmYjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J1l3KgVE3liZeUr1FpotGxMT2Py
QvJ5ULSh3FrEXBTeSKoisE+2ZwNZFjpN2uuZ6oq3ywXp09ARbMXoPPnLGeaRgl+q
F8OTIpZc/PhWOXxKdyB/i3DX/K1iZJzV5uFtEJgZ+76umapZtHuhdsFkJ2vvcbZJ
oCrcXqKREisyzcKEdps3k/dHRCFl9tkqEntg7Nl3T421lGniH1nWoTkHAqUBzViE
ShycATAbcxSYoZgHiJhEDvYq9+rS86hu9Afe65I6fkIvndcrNJLDerA+r2bt+GAQ
mDUOSB9GpKv0Qknp+qf92OGjWDmNPRCqDo+YrJTgPA/GFr2/xIxPCTId/QIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFBinlntPdQ7QPtq2sJrgjXkmZPslMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvR0tlV2UwOTFEdEEtMnJhd211Q05lU1prLXlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBLYe2AwQA
LmbtAwQAWSJqAwQAW4QzAwQAXXK3AwQA2RMEMA0GCSqGSIb3DQEBCwUAA4IBAQAq
rdf//JWIIdcSjyySZGPOQcDXCmcBtchABJIZCKavWvUT1VeERnSMYr8yH2CbA/WI
D+wE9b/N9ku4yAJghJW0DQwS6LgtaT0b/tDQd1fzNy1Fhx5t5/PMdVT8sPEROcr2
2xUHsT4S7z9Tjz0EVdpvo1mxblFCNGLB5cGO3D9nuneeMkC+AAM1N2fxGr3kSrUC
iR9CythP2kkufDCpzyG9A99m0zjgqVAf+LT9AXorm3Wu/e2CmjgTOQ3M8aWTBIRC
D1a/RIOJYES9UKDsFwmqZALBENpP5FuimiKmNaQuMo/Chaiq+5pRqNqiNL5g9Pjl
bKP4wMMyoXJhpkhlbW+v
-----END CERTIFICATE-----
Generated at Wed Jul 31 19:41:23 2024 by rpki-client on console-fra.rpki-client.org