Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/GSUnoOqnRmrD9yCF8Tm0FOPw7so.roa
File: GSUnoOqnRmrD9yCF8Tm0FOPw7so.roa (raw, json)
Hash identifier: DjlbYbapwfToOi29KOfjryym4MBdA1+aTJvW3YNJ/m4=
Subject key identifier: 19:25:27:A0:EA:A7:46:6A:C3:F7:20:85:F1:39:B4:14:E3:F0:EE:CA
Certificate issuer: /CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Certificate serial: 01856E4AFF3227DC3EE96B5535EB61317AE3
Authority key identifier: 7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/GSUnoOqnRmrD9yCF8Tm0FOPw7so.roa
Signing time: Sun 01 Jan 2023 17:04:46 +0000
ROA not before: Sun 01 Jan 2023 17:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49099
IP address blocks: 109.94.166.0/24 maxlen: 24
109.94.167.0/24 maxlen: 24
109.94.166.0/23 maxlen: 23
193.34.246.0/24 maxlen: 24
193.34.244.0/24 maxlen: 24
193.34.244.0/23 maxlen: 23
193.34.245.0/24 maxlen: 24
193.34.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:4a:ff:32:27:dc:3e:e9:6b:55:35:eb:61:31:7a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Validity
Not Before: Jan 1 17:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=192527a0eaa7466ac3f72085f139b414e3f0eeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:f9:67:a6:55:a1:50:04:f2:34:54:f8:1b:
4c:48:91:aa:a3:19:aa:1b:54:c7:97:36:72:fd:98:
8d:a3:9a:fb:e5:0a:a2:27:b3:f3:95:c8:72:b8:33:
f3:89:4f:47:b3:68:47:26:36:01:49:10:d3:4b:1e:
28:74:a9:d3:19:bc:b0:0a:a6:95:d2:4a:ce:16:2a:
da:30:63:62:cb:ed:26:6f:b4:b0:73:d1:4d:56:dd:
15:30:50:f9:8f:05:6c:db:e4:fb:53:55:14:b5:08:
c3:a0:c7:ba:34:ee:44:66:b8:ec:24:43:44:93:c3:
09:3e:92:44:19:4b:a0:55:47:08:d0:3f:33:a5:a0:
be:0b:44:33:5e:05:7f:65:1b:0a:5d:c1:d1:5c:a7:
61:27:92:0a:27:b3:65:cf:3c:66:b0:b4:93:6b:4d:
13:bf:9d:85:62:1e:01:65:2c:e6:8b:cb:bc:5a:f1:
f4:03:1d:90:22:8e:50:1a:29:bd:1f:b5:5d:78:07:
5b:07:3d:41:36:a0:46:a9:f7:f3:a9:02:e0:6d:8b:
70:ac:c2:06:7b:fe:58:63:d5:23:1c:b8:d4:19:2e:
b9:7c:9e:f0:bc:8f:bc:cd:42:3f:e7:81:b6:6d:34:
cf:1a:e7:aa:a9:2c:d6:4f:14:41:97:1a:89:68:53:
40:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:25:27:A0:EA:A7:46:6A:C3:F7:20:85:F1:39:B4:14:E3:F0:EE:CA
X509v3 Authority Key Identifier:
keyid:7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/GSUnoOqnRmrD9yCF8Tm0FOPw7so.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.94.166.0/23
193.34.244.0/22
Signature Algorithm: sha256WithRSAEncryption
22:4d:12:85:fd:85:df:67:e5:49:ac:de:01:c4:c9:d8:7a:73:
1c:77:f8:8c:84:0b:7c:69:96:44:3d:38:ed:f8:5d:38:ea:29:
c8:14:40:62:7f:30:cc:d3:33:cb:0c:0b:61:d4:07:24:86:fa:
f2:3e:1f:f6:77:cf:0a:33:bb:27:5c:68:0a:31:61:4f:30:77:
21:9d:b3:57:a7:f3:53:23:1a:ce:7f:e4:29:28:13:bd:49:2d:
6f:29:f2:c7:e5:85:8b:30:24:a0:06:da:a3:ac:3b:f4:c6:d8:
87:12:80:13:d0:43:85:42:72:ce:d9:db:20:b2:82:9e:45:fa:
14:58:67:1c:a9:9b:4a:90:8d:5c:27:ed:30:88:93:5f:2b:6a:
29:ef:f9:d2:c6:e6:45:4f:72:c0:e3:ff:a1:02:72:27:3a:c1:
64:cf:27:32:06:de:1f:bb:2d:10:10:3e:31:32:7a:2a:b0:3a:
dc:50:53:00:af:08:ab:04:39:55:66:89:21:6a:a0:e2:d1:b8:
9e:63:a0:b7:84:f6:8e:06:d4:a2:f7:88:91:54:dd:97:83:d7:
69:47:86:9c:20:cb:36:63:2a:d8:38:4a:33:31:c6:0c:df:a6:
56:a1:08:f5:09:ce:a5:ae:96:f9:4e:46:8e:4a:dd:62:22:13:
e9:a5:e8:d6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVuSv8yJ9w+6WtVNethMXrjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNzVkMzcyMDM5YjFhYjJkNDE2YWQ4M2JmNjkxNDA1ODQx
MWMyYTIwHhcNMjMwMTAxMTcwNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTI1MjdhMGVhYTc0NjZhYzNmNzIwODVmMTM5YjQxNGUzZjBlZWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaH5Z6ZVoVAE8jRU+BtMSJGqoxmq
G1THlzZy/ZiNo5r75QqiJ7PzlchyuDPziU9Hs2hHJjYBSRDTSx4odKnTGbywCqaV
0krOFiraMGNiy+0mb7Swc9FNVt0VMFD5jwVs2+T7U1UUtQjDoMe6NO5EZrjsJENE
k8MJPpJEGUugVUcI0D8zpaC+C0QzXgV/ZRsKXcHRXKdhJ5IKJ7NlzzxmsLSTa00T
v52FYh4BZSzmi8u8WvH0Ax2QIo5QGim9H7VdeAdbBz1BNqBGqffzqQLgbYtwrMIG
e/5YY9UjHLjUGS65fJ7wvI+8zUI/54G2bTTPGueqqSzWTxRBlxqJaFNA8QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBklJ6Dqp0Zqw/cghfE5tBTj8O7KMB8GA1UdIwQY
MBaAFHt103IDmxqy1Batg79pFAWEEcKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTNYVGNnT2JHckxVRnEyRHYya1VCWVFSd3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85NTZlN2QtNmI5My00MmZiLTk5M2Yt
NmIwMDM4ODc1YTE0LzEvR1NVbm9PcW5SbXJEOXlDRjhUbTBGT1B3N3NvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85NTZlN2QtNmI5My00MmZiLTk5M2YtNmIwMDM4ODc1YTE0
LzEvZTNYVGNnT2JHckxVRnEyRHYya1VCWVFSd3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBbV6mAwQC
wSL0MA0GCSqGSIb3DQEBCwUAA4IBAQAiTRKF/YXfZ+VJrN4BxMnYenMcd/iMhAt8
aZZEPTjt+F046inIFEBifzDM0zPLDAth1AckhvryPh/2d88KM7snXGgKMWFPMHch
nbNXp/NTIxrOf+QpKBO9SS1vKfLH5YWLMCSgBtqjrDv0xtiHEoAT0EOFQnLO2dsg
soKeRfoUWGccqZtKkI1cJ+0wiJNfK2op7/nSxuZFT3LA4/+hAnInOsFkzycyBt4f
uy0QED4xMnoqsDrcUFMArwirBDlVZokhaqDi0bieY6C3hPaOBtSi94iRVN2Xg9dp
R4acIMs2YyrYOEozMcYM36ZWoQj1Cc6lrpb5TkaOSt1iIhPppejW
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:18 2024 by rpki-client on console-ams.rpki-client.org