Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cGTj9HCE_RL7JrNnDsUhAyUciEQ.roa
File: cGTj9HCE_RL7JrNnDsUhAyUciEQ.roa (raw, json)
Hash identifier: nBIQU/IQTEjk1v9s1u7ViWDFTwWMqw9eTpW3WERXW78=
Subject key identifier: 70:64:E3:F4:70:84:FD:12:FB:26:B3:67:0E:C5:21:03:25:1C:88:44
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0193992614E8625100FCC37B1A5735F6FE02
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cGTj9HCE_RL7JrNnDsUhAyUciEQ.roa
Signing time: Thu 05 Dec 2024 23:27:09 +0000
ROA not before: Thu 05 Dec 2024 23:27:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213122
IP address blocks: 45.139.6.0/23 maxlen: 24
178.173.236.0/22 maxlen: 24
178.173.242.0/23 maxlen: 24
178.173.244.0/22 maxlen: 24
188.253.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:99:26:14:e8:62:51:00:fc:c3:7b:1a:57:35:f6:fe:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Dec 5 23:27:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7064e3f47084fd12fb26b3670ec52103251c8844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:57:6d:cf:b0:24:42:20:24:b2:db:aa:49:
d4:d3:dd:7b:0e:bf:5d:1e:cc:21:dc:60:51:e4:ff:
a6:5f:28:e8:06:ab:34:5a:3e:2e:10:f6:b8:2d:a5:
5f:69:70:f3:fa:88:3f:da:b1:d9:9c:ab:90:28:a1:
b3:a5:db:8b:a8:59:90:ec:10:cc:45:2e:81:74:4c:
9d:5c:c2:ed:0c:bf:cc:fe:ae:e2:29:ed:b6:09:04:
80:cd:cb:b0:b6:a7:89:5b:a4:d9:21:dd:0e:37:bc:
f5:5f:9f:70:41:04:65:d5:a4:f2:7d:47:7f:0a:2e:
94:5d:40:a3:0f:fe:7f:a8:71:26:22:19:e9:f3:60:
61:a2:ee:76:08:e3:3e:2f:d6:8b:80:aa:8c:61:91:
34:18:d1:90:b0:67:92:03:f6:0d:7d:00:df:45:49:
a1:4a:92:ad:38:0c:e7:50:df:70:95:09:3b:66:72:
91:3f:e7:08:b7:ce:a2:34:01:e9:a0:a1:b5:d4:e3:
9b:34:58:35:16:c8:bb:bc:5d:db:18:77:f0:e7:ca:
a5:ee:d8:a7:52:15:c8:99:5c:fc:ba:bc:c7:f8:2f:
6c:b0:a7:85:12:40:b5:2f:f0:4e:b8:60:e1:b9:09:
95:d1:e0:db:84:f0:27:91:63:28:91:94:de:92:8b:
ed:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:64:E3:F4:70:84:FD:12:FB:26:B3:67:0E:C5:21:03:25:1C:88:44
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cGTj9HCE_RL7JrNnDsUhAyUciEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
178.173.236.0/22
178.173.242.0-178.173.247.255
188.253.28.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:1b:05:58:66:54:4e:37:5b:35:f8:03:96:00:01:64:79:29:
74:98:62:80:ad:6c:10:c6:35:4c:83:d4:1c:67:0e:4f:d7:0f:
52:0d:cb:36:73:52:dc:81:c9:91:3b:da:7b:12:dd:94:63:20:
9d:9a:c6:39:6c:66:09:66:66:2c:b6:cd:70:8b:d9:ca:80:6d:
67:27:23:72:bc:4d:ed:0b:bf:88:91:89:ab:3e:84:d2:94:91:
7a:9c:aa:bb:66:55:90:1b:98:96:de:00:4f:0a:12:10:36:a6:
96:44:4c:c6:02:bc:0c:85:6b:05:9c:28:f7:58:8b:65:3a:b7:
a2:59:5b:3a:3c:fb:9d:6a:a6:fc:51:f8:37:0a:e2:e9:11:04:
b5:94:0c:79:04:ee:64:a9:0a:1b:7e:0b:60:aa:17:36:41:e6:
99:9d:d4:9c:e6:9c:ed:35:69:a1:88:50:1f:41:3e:97:c1:7b:
1d:f7:19:9c:21:7b:4c:d1:24:bd:b3:6b:83:8e:80:b5:66:6d:
52:f6:bc:82:be:4c:5b:13:a9:d1:5e:df:13:48:36:5e:b1:ab:
91:30:4c:d2:7f:dc:fb:0b:9f:f7:aa:35:a2:7f:34:d4:65:9a:
c9:61:71:92:82:ee:1f:de:24:64:21:be:c4:7c:8f:77:17:d8:
37:47:22:ae
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZOZJhToYlEA/MN7Glc19v4CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjQxMjA1MjMyNzA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDY0ZTNmNDcwODRmZDEyZmIyNmIzNjcwZWM1MjEwMzI1MWM4ODQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTJXbc+wJEIgJLLbqknU0917Dr9d
Hswh3GBR5P+mXyjoBqs0Wj4uEPa4LaVfaXDz+og/2rHZnKuQKKGzpduLqFmQ7BDM
RS6BdEydXMLtDL/M/q7iKe22CQSAzcuwtqeJW6TZId0ON7z1X59wQQRl1aTyfUd/
Ci6UXUCjD/5/qHEmIhnp82Bhou52COM+L9aLgKqMYZE0GNGQsGeSA/YNfQDfRUmh
SpKtOAznUN9wlQk7ZnKRP+cIt86iNAHpoKG11OObNFg1Fsi7vF3bGHfw58ql7tin
UhXImVz8urzH+C9ssKeFEkC1L/BOuGDhuQmV0eDbhPAnkWMokZTekovtXwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFHBk4/RwhP0S+yazZw7FIQMlHIhEMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvY0dUajlIQ0VfUkw3SnJObkRzVWhBeVVjaUVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBLYsGAwQC
sq3sMAwDBAGyrfIDBAOyrfADBAK8/RwwDQYJKoZIhvcNAQELBQADggEBAFwbBVhm
VE43WzX4A5YAAWR5KXSYYoCtbBDGNUyD1BxnDk/XD1INyzZzUtyByZE72nsS3ZRj
IJ2axjlsZglmZiy2zXCL2cqAbWcnI3K8Te0Lv4iRias+hNKUkXqcqrtmVZAbmJbe
AE8KEhA2ppZETMYCvAyFawWcKPdYi2U6t6JZWzo8+51qpvxR+DcK4ukRBLWUDHkE
7mSpCht+C2CqFzZB5pmd1JzmnO01aaGIUB9BPpfBex33GZwhe0zRJL2za4OOgLVm
bVL2vIK+TFsTqdFe3xNINl6xq5EwTNJ/3PsLn/eqNaJ/NNRlmslhcZKC7h/eJGQh
vsR8j3cX2DdHIq4=
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:48:05 2025 by rpki-client