Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/GDnc0gIANZsxiOS-yf01uH2s5bo.roa
File: GDnc0gIANZsxiOS-yf01uH2s5bo.roa (raw, json)
Hash identifier: WqPUAaq7NhG2/pIhhDEzImpCAFYtbXCJNJugOePM7lY=
Subject key identifier: 18:39:DC:D2:02:00:35:9B:31:88:E4:BE:C9:FD:35:B8:7D:AC:E5:BA
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC6B64CCFEA7F5EF973F8EB3AB0B5C
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/GDnc0gIANZsxiOS-yf01uH2s5bo.roa
Signing time: Thu 02 Jan 2025 07:48:06 +0000
ROA not before: Thu 02 Jan 2025 07:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.139.6.0/23 maxlen: 24
46.249.110.0/24 maxlen: 24
82.115.28.0/23 maxlen: 24
89.251.10.0/24 maxlen: 24
159.255.32.0/22 maxlen: 22
159.255.36.0/22 maxlen: 22
178.173.240.0/20 maxlen: 24
185.231.172.0/22 maxlen: 24
188.209.156.0/22 maxlen: 24
188.253.8.0/21 maxlen: 24
202.133.90.0/23 maxlen: 24
212.90.100.0/22 maxlen: 24
213.173.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Jan 2025 01:17:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:6b:64:cc:fe:a7:f5:ef:97:3f:8e:b3:ab:0b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1839dcd20200359b3188e4bec9fd35b87dace5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:0f:95:50:d8:48:9c:83:14:40:10:04:db:
b4:62:4c:41:50:fd:11:a0:bd:75:e1:a3:f4:3d:05:
02:45:1f:b5:be:56:d0:4b:2a:36:8a:97:69:7d:6e:
c7:6b:91:5c:52:06:d4:1f:2e:8e:e8:9d:08:a4:37:
8b:14:99:ae:7e:2f:3d:d2:ac:55:99:2a:41:d4:97:
b7:3a:c3:2a:7f:bf:fc:93:62:24:58:a9:52:0d:ed:
ce:37:29:ff:88:3a:45:04:51:c6:df:90:5c:54:76:
e4:48:46:31:75:37:96:e6:a5:0e:dc:d0:c1:b0:41:
6f:da:79:25:10:57:b7:f8:42:7e:b4:f7:1d:76:0f:
d5:0b:50:e3:b9:21:bb:f5:45:c9:ce:6d:07:cb:fc:
bf:1a:7a:03:21:bf:df:b9:d7:a9:db:af:cf:6c:4d:
46:27:90:40:9f:50:74:3e:d4:8b:84:fa:f0:58:d6:
fc:db:da:11:07:ee:66:40:22:81:8b:fb:38:87:ee:
d3:41:9d:ef:0b:82:be:d0:5c:51:7a:f7:fe:e2:cf:
7c:70:5b:55:19:06:4a:0f:67:cb:2b:e4:b4:16:94:
a1:88:9b:2c:55:7f:e2:34:c7:75:df:53:1d:72:84:
59:3c:69:00:d6:6f:6a:d4:e2:b9:8c:df:6e:38:be:
8d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:39:DC:D2:02:00:35:9B:31:88:E4:BE:C9:FD:35:B8:7D:AC:E5:BA
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/GDnc0gIANZsxiOS-yf01uH2s5bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
46.249.110.0/24
82.115.28.0/23
89.251.10.0/24
159.255.32.0/21
178.173.240.0/20
185.231.172.0/22
188.209.156.0/22
188.253.8.0/21
202.133.90.0/23
212.90.100.0/22
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:a3:99:c4:d7:d5:6f:65:bb:16:09:53:ca:cf:d8:f5:d0:48:
01:23:af:17:f5:6f:90:84:67:3c:af:aa:06:47:84:6a:84:4c:
8c:77:95:3f:91:79:5d:9b:66:bd:16:ac:6a:19:b7:5b:f1:1d:
7a:67:da:4f:47:64:42:60:83:f5:fe:de:76:0f:50:2d:6c:cd:
a3:08:16:79:c2:d9:b6:db:82:be:b4:75:fb:ba:fa:56:7e:1f:
28:99:ca:d0:29:2f:b5:51:6b:4a:ec:aa:8b:39:12:f7:62:ff:
62:63:6f:1d:58:0d:12:a8:90:bc:3c:9b:bc:fb:65:03:d4:c2:
81:b2:9c:c6:c9:2d:00:31:f1:3d:6e:83:a4:78:b4:80:ba:9c:
05:60:78:4c:b2:66:c1:22:24:92:9f:3d:14:9d:2d:5c:b5:96:
e6:e5:4a:37:70:cc:17:7a:20:f2:97:9c:c5:81:69:00:22:50:
a4:86:7a:37:10:15:61:1c:9b:c6:9e:54:f3:3a:42:df:07:57:
fb:c8:d1:79:81:08:54:63:d4:53:96:86:9b:03:87:b5:a1:04:
03:a4:1e:aa:7e:69:f4:a7:59:52:fa:59:7f:58:b6:05:84:7a:
9f:81:30:a7:dc:e8:5e:dd:f3:5e:59:db:81:9b:c1:e1:29:89:
0b:40:b9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:47:29 2025 by rpki-client