Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/GYTS_w6U98IjQF-0z82464i9mzs.roa
File: GYTS_w6U98IjQF-0z82464i9mzs.roa (raw, json)
Hash identifier: M7Jzxo9BepTMs8Tzo0EFW/+qWXOujNN6O0dspG/apgI=
Subject key identifier: 19:84:D2:FF:0E:94:F7:C2:23:40:5F:B4:CF:CD:B8:EB:88:BD:9B:3B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01942827529773AEBC1137614E0FE9619414
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/GYTS_w6U98IjQF-0z82464i9mzs.roa
Signing time: Thu 02 Jan 2025 17:54:13 +0000
ROA not before: Thu 02 Jan 2025 17:54:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 89.37.195.0/24 maxlen: 24
92.114.93.0/24 maxlen: 24
93.114.244.0/24 maxlen: 24
94.177.150.0/24 maxlen: 24
213.134.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 12:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:52:97:73:ae:bc:11:37:61:4e:0f:e9:61:94:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1984d2ff0e94f7c223405fb4cfcdb8eb88bd9b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:21:4a:c7:55:bb:0d:d7:b9:ad:3e:04:98:06:
e8:a6:e1:b3:ff:7a:af:77:0b:e4:0b:21:40:c7:62:
20:55:70:05:0d:a5:1c:ab:13:01:eb:73:63:d0:68:
86:1b:7d:37:45:85:c4:0d:98:32:d2:43:6a:5c:cc:
89:4f:b1:12:8e:97:a4:86:bc:30:de:f2:c1:34:b3:
5f:46:c9:84:d7:81:d6:9b:e0:5e:b3:ac:65:15:97:
65:b3:15:f2:d8:aa:58:16:c4:3c:17:11:ae:bb:d0:
f2:ab:4f:35:ec:b9:5e:e2:2b:92:84:da:af:08:0c:
35:95:62:12:29:1f:24:de:a4:63:01:ca:45:18:b9:
a9:a9:d2:62:8d:22:55:db:21:fa:de:c1:b4:5e:83:
1d:da:ab:d2:95:88:4a:ac:af:0c:31:cd:9a:48:2d:
46:37:22:0e:a4:6d:24:ea:33:5e:70:48:f2:e6:3f:
bc:6a:69:f3:82:b2:9a:41:2a:0a:45:87:3f:cc:91:
fb:5e:7d:df:ea:79:07:75:1a:bc:94:b5:df:1d:7a:
2c:a4:71:20:05:be:dd:31:44:0f:6c:b2:4b:2f:b4:
49:a3:95:1d:6a:e5:4a:d2:a6:58:0d:a0:98:83:cf:
b7:30:a4:f6:7d:bb:5a:95:fa:90:e5:65:9a:99:78:
65:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:84:D2:FF:0E:94:F7:C2:23:40:5F:B4:CF:CD:B8:EB:88:BD:9B:3B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/GYTS_w6U98IjQF-0z82464i9mzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.195.0/24
92.114.93.0/24
93.114.244.0/24
94.177.150.0/24
213.134.11.0/24
Signature Algorithm: sha256WithRSAEncryption
14:bf:25:68:95:e8:46:a3:89:61:e0:7a:9b:15:ec:8d:c6:62:
d7:51:82:a4:79:fe:7e:bc:20:6f:99:af:05:c8:86:04:3d:83:
5f:f7:82:64:89:a1:4b:28:05:c9:a5:23:07:ba:83:f6:d0:29:
5d:35:21:88:51:ff:3b:ad:b3:3e:09:f3:05:d3:db:1b:0a:67:
f7:6b:29:e5:36:24:da:f9:f2:4f:18:2c:5a:81:93:c9:cc:b0:
21:bf:45:3f:80:7c:fe:56:f9:f1:b0:8e:1e:ab:1f:9e:79:00:
b7:66:47:7e:cd:ec:25:02:fe:65:85:79:66:c8:68:eb:63:ec:
47:40:5c:c7:8e:2d:5b:c5:1c:dc:83:8f:6b:30:15:3c:13:4e:
ac:b7:47:43:f2:4f:fa:06:36:7c:c5:3e:15:15:a6:8d:5e:cb:
4c:1f:24:86:4c:5f:cb:e2:d9:c4:75:44:62:11:bb:6e:fe:ae:
71:4c:2a:77:c0:7b:7f:61:51:ac:1e:6f:e9:9a:2d:7a:34:28:
c9:d3:bb:0d:29:9c:49:33:83:77:30:75:70:04:60:aa:ed:34:
eb:08:71:da:12:11:ad:72:cc:ac:b0:02:2e:c4:67:2e:71:f6:
d5:53:5f:d1:a5:16:4c:e1:e9:2e:fe:6e:c6:0c:21:06:9c:bf:
65:34:4c:a6
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQoJ1KXc668ETdhTg/pYZQUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwMTAyMTc1NDEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTg0ZDJmZjBlOTRmN2MyMjM0MDVmYjRjZmNkYjhlYjg4YmQ5YjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CFKx1W7Dde5rT4EmAbopuGz/3qv
dwvkCyFAx2IgVXAFDaUcqxMB63Nj0GiGG303RYXEDZgy0kNqXMyJT7ESjpekhrww
3vLBNLNfRsmE14HWm+Bes6xlFZdlsxXy2KpYFsQ8FxGuu9Dyq0817Lle4iuShNqv
CAw1lWISKR8k3qRjAcpFGLmpqdJijSJV2yH63sG0XoMd2qvSlYhKrK8MMc2aSC1G
NyIOpG0k6jNecEjy5j+8amnzgrKaQSoKRYc/zJH7Xn3f6nkHdRq8lLXfHXospHEg
Bb7dMUQPbLJLL7RJo5UdauVK0qZYDaCYg8+3MKT2fbtalfqQ5WWamXhlFQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFBmE0v8OlPfCI0BftM/NuOuIvZs7MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvR1lUU193NlU5OElqUUYtMHo4MjQ2NGk5bXpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWSXDAwQA
XHJdAwQAXXL0AwQAXrGWAwQA1YYLMA0GCSqGSIb3DQEBCwUAA4IBAQAUvyVolehG
o4lh4HqbFeyNxmLXUYKkef5+vCBvma8FyIYEPYNf94JkiaFLKAXJpSMHuoP20Cld
NSGIUf87rbM+CfMF09sbCmf3aynlNiTa+fJPGCxagZPJzLAhv0U/gHz+VvnxsI4e
qx+eeQC3Zkd+zewlAv5lhXlmyGjrY+xHQFzHji1bxRzcg49rMBU8E06st0dD8k/6
BjZ8xT4VFaaNXstMHySGTF/L4tnEdURiEbtu/q5xTCp3wHt/YVGsHm/pmi16NCjJ
07sNKZxJM4N3MHVwBGCq7TTrCHHaEhGtcsyssAIuxGcucfbVU1/RpRZM4eku/m7G
DCEGnL9lNEym
-----END CERTIFICATE-----
Generated at Wed Feb 5 12:52:29 2025 by rpki-client