Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/GHkU0aKKQtIyFt1XON9lcXaqjgk.roa
File: GHkU0aKKQtIyFt1XON9lcXaqjgk.roa (raw, json)
Hash identifier: rHCRHEOvsd83g0aDx+z19nFU6FHi4oy2T7fDUwekN3w=
Subject key identifier: 18:79:14:D1:A2:8A:42:D2:32:16:DD:57:38:DF:65:71:76:AA:8E:09
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0193B4B9E72D9079AA64A8C02FB21634E0BC
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/GHkU0aKKQtIyFt1XON9lcXaqjgk.roa
Signing time: Wed 11 Dec 2024 07:58:22 +0000
ROA not before: Wed 11 Dec 2024 07:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 213.18.244.0/24 maxlen: 24
213.18.245.0/24 maxlen: 24
213.18.246.0/24 maxlen: 24
213.18.247.0/24 maxlen: 24
217.180.17.0/24 maxlen: 24
217.180.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Dec 2024 10:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b4:b9:e7:2d:90:79:aa:64:a8:c0:2f:b2:16:34:e0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Dec 11 07:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=187914d1a28a42d23216dd5738df657176aa8e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9c:3c:63:cd:fe:58:b8:d8:d6:31:e2:30:4d:
7a:b1:c4:d3:85:de:04:6b:a5:68:3e:ef:ee:2c:33:
ec:c6:0a:5b:f2:56:cc:b9:41:fd:7b:a3:c6:89:89:
b6:59:89:51:f1:38:27:b0:0e:cf:97:70:4f:28:f4:
30:37:92:be:55:16:33:3a:85:6c:4d:37:7d:8d:a2:
78:b4:55:fc:1d:5f:63:52:29:51:9a:13:d7:e3:09:
3a:31:0d:ff:a2:66:9d:c1:3c:35:ad:5f:b4:d3:d0:
83:f8:2a:cc:0a:91:ae:cd:76:bd:ff:d7:42:c0:b2:
1a:20:d0:7f:6b:94:9b:0c:b7:04:f0:82:b4:cd:45:
86:ea:80:3a:ce:3a:93:ef:40:4a:28:62:19:9d:40:
6a:35:83:f4:3e:f8:d5:0b:b1:9f:41:b1:30:60:df:
9f:49:dc:52:f8:75:11:26:e7:d9:a0:a3:1f:57:88:
99:af:7a:6d:8a:b0:14:78:d4:15:25:85:19:82:e7:
4d:76:a3:53:63:99:06:e2:da:bd:35:d6:f2:bf:a2:
dc:a8:d6:ea:4d:62:d9:88:2c:38:68:c7:8c:eb:a6:
63:ac:83:48:c9:da:69:9e:0a:0f:80:55:4b:de:9a:
20:b3:fe:c5:44:fa:66:8b:40:80:29:26:13:8e:e4:
9c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:79:14:D1:A2:8A:42:D2:32:16:DD:57:38:DF:65:71:76:AA:8E:09
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/GHkU0aKKQtIyFt1XON9lcXaqjgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.244.0/22
217.180.17.0/24
217.180.46.0/24
Signature Algorithm: sha256WithRSAEncryption
41:fb:b9:b2:65:a4:7f:bf:2c:70:78:18:e3:e2:a0:a7:79:f2:
81:83:f7:9f:c7:76:6a:91:45:6f:d7:40:e2:b5:6d:d9:76:2e:
ac:cc:8d:9e:4d:8c:0d:e0:8a:5b:fa:c8:30:c6:33:bb:bb:b5:
1f:27:d7:92:14:79:92:16:1e:69:23:5a:6b:d7:db:8b:44:32:
d7:bb:10:9b:d8:91:90:c2:16:a2:31:95:92:e5:0f:8f:34:30:
8d:fa:2b:dc:94:07:1b:dd:ee:2f:70:06:b2:80:cd:f0:67:9e:
5d:0c:29:bf:34:38:e2:f0:e9:ab:8d:48:ba:54:b9:a9:24:bb:
0e:68:ea:c1:ea:84:c1:b9:a0:ab:e6:84:43:9f:0e:f0:ee:4f:
ab:d5:80:18:1f:6d:0b:52:95:76:ab:d5:39:d7:ec:a1:b6:86:
2a:2e:c3:58:9a:e9:cf:70:86:89:99:d5:0b:bd:3e:82:e9:f5:
9c:c8:59:61:c5:bb:78:fb:30:7c:e2:83:67:6c:88:23:81:b2:
f5:fd:de:13:88:7b:16:50:20:3b:e1:5f:e7:cc:89:78:06:15:
de:e0:57:b6:22:d0:5a:05:ea:70:c4:9f:29:b2:9b:fd:6b:51:
13:7c:11:8c:85:09:c4:fd:32:55:b0:8b:97:e3:a9:e0:f8:83:
d1:f5:0e:ef
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZO0uectkHmqZKjAL7IWNOC8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy
ZGE3NGQwHhcNMjQxMjExMDc1ODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODc5MTRkMWEyOGE0MmQyMzIxNmRkNTczOGRmNjU3MTc2YWE4ZTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5w8Y83+WLjY1jHiME16scTThd4E
a6VoPu/uLDPsxgpb8lbMuUH9e6PGiYm2WYlR8TgnsA7Pl3BPKPQwN5K+VRYzOoVs
TTd9jaJ4tFX8HV9jUilRmhPX4wk6MQ3/omadwTw1rV+009CD+CrMCpGuzXa9/9dC
wLIaINB/a5SbDLcE8IK0zUWG6oA6zjqT70BKKGIZnUBqNYP0PvjVC7GfQbEwYN+f
SdxS+HURJufZoKMfV4iZr3ptirAUeNQVJYUZgudNdqNTY5kG4tq9Ndbyv6LcqNbq
TWLZiCw4aMeM66ZjrINIydppngoPgFVL3pogs/7FRPpmi0CAKSYTjuScWQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBh5FNGiikLSMhbdVzjfZXF2qo4JMB8GA1UdIwQY
MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt
YzE5OTQyNzM3ZTZkLzEvR0hrVTBhS0tRdEl5RnQxWE9OOWxjWGFxamdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk
LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQC1RL0AwQA
2bQRAwQA2bQuMA0GCSqGSIb3DQEBCwUAA4IBAQBB+7myZaR/vyxweBjj4qCnefKB
g/efx3ZqkUVv10DitW3Zdi6szI2eTYwN4Ipb+sgwxjO7u7UfJ9eSFHmSFh5pI1pr
19uLRDLXuxCb2JGQwhaiMZWS5Q+PNDCN+ivclAcb3e4vcAaygM3wZ55dDCm/NDji
8OmrjUi6VLmpJLsOaOrB6oTBuaCr5oRDnw7w7k+r1YAYH20LUpV2q9U51+yhtoYq
LsNYmunPcIaJmdULvT6C6fWcyFlhxbt4+zB84oNnbIgjgbL1/d4TiHsWUCA74V/n
zIl4BhXe4Fe2ItBaBepwxJ8pspv9a1ETfBGMhQnE/TJVsIuX46ng+IPR9Q7v
-----END CERTIFICATE-----
Generated at Wed Apr 9 23:26:30 2025 by rpki-client