Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/gBvasxAGo-OJ4fj9d4Hr2ioh2YY.roa
File: gBvasxAGo-OJ4fj9d4Hr2ioh2YY.roa (raw, json)
Hash identifier: ygaCTh/FhP9r0gAFNBn9lVtLYi0CkrAcFcgihFLM0Jg=
Subject key identifier: 80:1B:DA:B3:10:06:A3:E3:89:E1:F8:FD:77:81:EB:DA:2A:21:D9:86
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 018DEAE934C0E5DC033907D85DA0167A58B1
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/gBvasxAGo-OJ4fj9d4Hr2ioh2YY.roa
Signing time: Tue 27 Feb 2024 14:12:48 +0000
ROA not before: Tue 27 Feb 2024 14:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 62.171.192.0/18 maxlen: 24
185.192.228.0/22 maxlen: 24
194.154.0.0/19 maxlen: 24
194.238.32.0/19 maxlen: 24
194.238.64.0/19 maxlen: 24
213.18.192.0/18 maxlen: 24
217.177.0.0/18 maxlen: 24
217.177.64.0/19 maxlen: 24
217.179.0.0/16 maxlen: 24
217.180.0.0/17 maxlen: 24
217.181.0.0/17 maxlen: 24
2a02:fb0::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Apr 2024 20:25:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ea:e9:34:c0:e5:dc:03:39:07:d8:5d:a0:16:7a:58:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Feb 27 14:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=801bdab31006a3e389e1f8fd7781ebda2a21d986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:96:29:94:fc:2a:4c:d2:de:a0:c9:9b:f5:8d:
e7:77:75:85:b3:23:e5:de:58:5e:ab:57:0e:86:02:
79:a3:01:5c:cf:ef:b6:7d:c1:b7:67:51:e3:4d:60:
c0:a4:38:00:73:1c:28:23:32:ac:46:c9:b2:0b:72:
ba:77:ef:c8:92:20:a6:b0:4d:30:16:03:54:a2:82:
6b:fc:99:d8:fb:12:5a:5c:e9:82:f4:ae:be:69:f4:
c1:76:95:06:d5:e9:48:ef:bf:63:1d:8d:85:f8:ca:
c1:1c:46:09:90:b3:6b:77:67:77:4d:42:8c:63:61:
94:4d:4a:e6:1b:12:07:83:70:2f:e6:ba:2d:5b:59:
4b:64:0a:09:b9:1f:7e:ca:7f:63:61:fe:a3:7e:92:
e7:3b:8c:af:48:4f:25:f3:d8:6c:74:84:43:ac:d1:
f1:cc:52:fe:60:0a:93:22:a7:75:fd:ac:38:b8:22:
4a:a6:c3:ba:10:27:a5:6f:9a:f7:e3:ba:33:6a:60:
bb:09:af:44:03:f1:69:7b:4f:35:8a:27:8b:7a:5d:
1f:a8:bf:7d:dc:2c:11:72:c5:01:30:6f:ec:70:40:
e0:a0:cf:4e:2f:41:2e:df:ac:b1:cc:67:0d:37:6a:
cd:74:d3:40:02:00:f1:36:82:34:7b:8d:67:73:d9:
22:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1B:DA:B3:10:06:A3:E3:89:E1:F8:FD:77:81:EB:DA:2A:21:D9:86
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/gBvasxAGo-OJ4fj9d4Hr2ioh2YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.192.0/18
185.192.228.0/22
194.154.0.0/19
194.238.32.0-194.238.95.255
213.18.192.0/18
217.177.0.0-217.177.95.255
217.179.0.0-217.180.127.255
217.181.0.0/17
IPv6:
2a02:fb0::/32
Signature Algorithm: sha256WithRSAEncryption
7c:15:58:eb:0e:8c:a0:bd:9d:79:19:50:93:3b:a0:04:5c:ae:
f8:a7:34:da:99:26:01:dc:fc:48:c1:23:b7:db:77:7d:7e:99:
4a:15:6d:3c:1b:64:79:aa:b3:17:bc:90:35:4f:78:ee:32:fc:
5d:41:dd:78:dc:a2:08:9e:86:14:40:b7:9d:c0:e1:1f:2d:79:
9a:14:a7:a1:50:5b:6d:0c:18:7a:f9:ba:3e:b3:ee:74:07:4e:
47:fe:10:68:a9:fe:4a:e6:2d:21:47:b1:ea:e6:25:df:34:b7:
ac:6c:1c:11:30:77:e9:76:16:b4:16:28:9e:77:ee:2b:89:f0:
e2:1d:13:76:66:10:d1:06:61:47:54:ef:18:a0:1f:76:02:f7:
98:83:7b:45:3e:15:f6:1d:fe:df:bf:72:7c:58:c1:4b:49:b5:
20:54:48:30:a4:c0:d4:9e:1e:ad:e2:b1:ca:f7:96:46:f6:dd:
c6:73:5d:a7:c9:c8:d6:86:98:b9:da:47:e9:cd:52:01:1e:0d:
28:6c:06:99:dd:f4:5e:e8:e2:1c:48:e4:c5:2b:5f:6d:b5:2f:
9d:c8:de:1f:c2:ea:af:12:81:96:4c:bb:6b:c8:f7:ef:64:45:
90:77:8f:2e:34:85:87:79:df:aa:49:89:d3:56:1f:b7:2e:29:
cf:ff:63:a0
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgISAY3q6TTA5dwDOQfYXaAWelixMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy
ZGE3NGQwHhcNMjQwMjI3MTQxMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDFiZGFiMzEwMDZhM2UzODllMWY4ZmQ3NzgxZWJkYTJhMjFkOTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65YplPwqTNLeoMmb9Y3nd3WFsyPl
3lheq1cOhgJ5owFcz++2fcG3Z1HjTWDApDgAcxwoIzKsRsmyC3K6d+/IkiCmsE0w
FgNUooJr/JnY+xJaXOmC9K6+afTBdpUG1elI779jHY2F+MrBHEYJkLNrd2d3TUKM
Y2GUTUrmGxIHg3Av5rotW1lLZAoJuR9+yn9jYf6jfpLnO4yvSE8l89hsdIRDrNHx
zFL+YAqTIqd1/aw4uCJKpsO6ECelb5r347ozamC7Ca9EA/Fpe081iieLel0fqL99
3CwRcsUBMG/scEDgoM9OL0Eu36yxzGcNN2rNdNNAAgDxNoI0e41nc9kiSQIDAQAB
o4ICWDCCAlQwHQYDVR0OBBYEFIAb2rMQBqPjieH4/XeB69oqIdmGMB8GA1UdIwQY
MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt
YzE5OTQyNzM3ZTZkLzEvZ0J2YXN4QUdvLU9KNGZqOWQ0SHIyaW9oMllZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk
LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTBMBAIAATBGAwQGPqvAAwQC
ucDkAwQFwpoAMAwDBAXC7iADBAXC7kADBAbVEsAwCwMDANmxAwQF2bFAMAsDAwDZ
swMEB9m0AAMEB9m1ADANBAIAAjAHAwUAKgIPsDANBgkqhkiG9w0BAQsFAAOCAQEA
fBVY6w6MoL2deRlQkzugBFyu+Kc02pkmAdz8SMEjt9t3fX6ZShVtPBtkeaqzF7yQ
NU947jL8XUHdeNyiCJ6GFEC3ncDhHy15mhSnoVBbbQwYevm6PrPudAdOR/4QaKn+
SuYtIUex6uYl3zS3rGwcETB36XYWtBYonnfuK4nw4h0TdmYQ0QZhR1TvGKAfdgL3
mIN7RT4V9h3+379yfFjBS0m1IFRIMKTA1J4ereKxyveWRvbdxnNdp8nI1oaYudpH
6c1SAR4NKGwGmd30XujiHEjkxStfbbUvncjeH8LqrxKBlky7a8j372RFkHePLjSF
h3nfqkmJ01Yfty4pz/9joA==
-----END CERTIFICATE-----
Generated at Tue Apr 2 23:44:44 2024 by rpki-client on console-fra.rpki-client.org