Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/GIZJ651uPn3NQx4icFvFPsemVt8.roa
File: GIZJ651uPn3NQx4icFvFPsemVt8.roa (raw, json)
Hash identifier: KAsLMXKif9UYT9OKg7hFp6XlTFOmnU7pl9A5J9oBQWQ=
Subject key identifier: 18:86:49:EB:9D:6E:3E:7D:CD:43:1E:22:70:5B:C5:3E:C7:A6:56:DF
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 018B2323926124C69584028BB0692659FB97
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/GIZJ651uPn3NQx4icFvFPsemVt8.roa
Signing time: Thu 12 Oct 2023 09:06:55 +0000
ROA not before: Thu 12 Oct 2023 09:06:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50463
IP address blocks: 37.19.112.0/24 maxlen: 24
37.19.115.0/24 maxlen: 24
37.19.114.0/24 maxlen: 24
37.19.112.0/20 maxlen: 20
37.19.113.0/24 maxlen: 24
37.19.116.0/24 maxlen: 24
37.19.125.0/24 maxlen: 24
141.226.192.0/19 maxlen: 19
141.226.192.0/24 maxlen: 24
141.226.196.0/24 maxlen: 24
141.226.195.0/24 maxlen: 24
141.226.194.0/24 maxlen: 24
141.226.198.0/24 maxlen: 24
141.226.193.0/24 maxlen: 24
141.226.204.0/24 maxlen: 24
141.226.203.0/24 maxlen: 24
141.226.206.0/24 maxlen: 24
141.226.205.0/24 maxlen: 24
141.226.210.0/24 maxlen: 24
141.226.209.0/24 maxlen: 24
141.226.208.0/24 maxlen: 24
141.226.212.0/24 maxlen: 24
141.226.223.0/24 maxlen: 24
141.226.221.0/24 maxlen: 24
109.226.2.0/24 maxlen: 24
109.226.0.0/18 maxlen: 18
109.226.0.0/24 maxlen: 24
109.226.4.0/24 maxlen: 24
109.226.3.0/24 maxlen: 24
109.226.6.0/24 maxlen: 24
109.226.5.0/24 maxlen: 24
109.226.8.0/22 maxlen: 22
109.226.7.0/24 maxlen: 24
109.226.16.0/22 maxlen: 22
109.226.15.0/24 maxlen: 24
109.226.14.0/24 maxlen: 24
109.226.17.0/24 maxlen: 24
109.226.13.0/24 maxlen: 24
109.226.23.0/24 maxlen: 24
109.226.22.0/24 maxlen: 24
109.226.21.0/24 maxlen: 24
109.226.24.0/24 maxlen: 24
185.3.145.0/24 maxlen: 24
185.3.144.0/22 maxlen: 22
109.226.29.0/24 maxlen: 24
109.226.28.0/24 maxlen: 24
109.226.31.0/24 maxlen: 24
109.226.26.0/24 maxlen: 24
109.226.25.0/24 maxlen: 24
109.226.37.0/24 maxlen: 24
109.226.36.0/24 maxlen: 24
109.226.35.0/24 maxlen: 24
109.226.34.0/24 maxlen: 24
109.226.38.0/24 maxlen: 24
109.226.33.0/24 maxlen: 24
109.226.32.0/24 maxlen: 24
109.226.44.0/24 maxlen: 24
109.226.51.0/24 maxlen: 24
109.226.50.0/24 maxlen: 24
109.226.49.0/24 maxlen: 24
109.226.48.0/24 maxlen: 24
109.226.47.0/24 maxlen: 24
109.226.45.0/24 maxlen: 24
109.226.57.0/24 maxlen: 24
109.226.56.0/24 maxlen: 24
109.226.55.0/24 maxlen: 24
109.226.53.0/24 maxlen: 24
109.226.52.0/24 maxlen: 24
109.226.61.0/24 maxlen: 24
109.226.60.0/24 maxlen: 24
109.226.59.0/24 maxlen: 24
109.226.63.0/24 maxlen: 24
109.226.62.0/24 maxlen: 24
5.144.55.0/24 maxlen: 24
5.144.54.0/24 maxlen: 24
5.144.57.0/24 maxlen: 24
5.144.62.0/24 maxlen: 24
5.144.61.0/24 maxlen: 24
5.144.63.0/24 maxlen: 24
5.144.48.0/24 maxlen: 24
5.144.48.0/20 maxlen: 20
5.144.50.0/24 maxlen: 24
5.22.133.0/24 maxlen: 24
5.22.135.0/24 maxlen: 24
5.22.134.0/24 maxlen: 24
5.22.132.0/24 maxlen: 24
5.22.130.0/23 maxlen: 23
5.22.128.0/21 maxlen: 21
5.22.129.0/24 maxlen: 24
5.22.128.0/24 maxlen: 24
2a00:c281:3004::/48 maxlen: 48
2a00:c281:2004::/48 maxlen: 48
2a00:c281:1004::/48 maxlen: 48
2a00:c281:4::/48 maxlen: 48
2a00:c281:4001::/48 maxlen: 48
2a00:c281:3001::/48 maxlen: 48
2a00:c281:2001::/48 maxlen: 48
2a00:c281:1001::/48 maxlen: 48
2a00:c281:1::/48 maxlen: 48
2a00:c281:300d::/48 maxlen: 48
2a00:c281:200d::/48 maxlen: 48
2a00:c281:100d::/48 maxlen: 48
2a00:c281:d::/48 maxlen: 48
2a00:c281:300a::/48 maxlen: 48
2a00:c281:200a::/48 maxlen: 48
2a00:c281:100a::/48 maxlen: 48
2a00:c281:a::/48 maxlen: 48
2a00:c281:101b::/48 maxlen: 48
2a00:c281:101d::/48 maxlen: 48
2a00:c281:101a::/48 maxlen: 48
2a00:c281:1012::/48 maxlen: 48
2a00:c280::/29 maxlen: 29
2a00:c281:300c::/48 maxlen: 48
2a00:c281:200c::/48 maxlen: 48
2a00:c281:100c::/48 maxlen: 48
2a00:c281:c::/48 maxlen: 48
2a00:c280:100::/48 maxlen: 48
2a00:c281:b::/48 maxlen: 48
2a00:c281:100b::/48 maxlen: 48
2a00:c281:200b::/48 maxlen: 48
2a00:c281:300b::/48 maxlen: 48
2a00:c281:101c::/48 maxlen: 48
2a00:c281:3003::/48 maxlen: 48
2a00:c281:2003::/48 maxlen: 48
2a00:c281:1003::/48 maxlen: 48
2a00:c281:3::/48 maxlen: 48
2a00:c281:1014::/48 maxlen: 48
2a00:c281:4000::/48 maxlen: 48
2a00:c281:1011::/48 maxlen: 48
2a00:c281:2::/48 maxlen: 48
2a00:c281:2002::/48 maxlen: 48
2a00:c281:3002::/48 maxlen: 48
2a00:c281:1002::/48 maxlen: 48
2a00:c281:1013::/48 maxlen: 48
2a00:c281:2b00::/40 maxlen: 40
2a00:c281:2d00::/40 maxlen: 40
2a00:c281:1c00::/40 maxlen: 40
2a00:c281:4100::/40 maxlen: 40
2a00:c281:3300::/40 maxlen: 40
2a00:c281:2200::/40 maxlen: 40
2a00:c281:4400::/40 maxlen: 40
2a00:c281:1400::/40 maxlen: 40
2a00:c281:1100::/40 maxlen: 40
2a00:c281:b00::/40 maxlen: 40
2a00:c281:1600::/40 maxlen: 40
2a00:c281:3b00::/40 maxlen: 40
2a00:c281:200::/40 maxlen: 40
2a00:c281:2400::/40 maxlen: 40
2a00:c281:1300::/40 maxlen: 40
2a00:c281:2a00::/40 maxlen: 40
2a00:c281:2100::/40 maxlen: 40
2a00:c281:1700::/40 maxlen: 40
2a00:c281:d00::/40 maxlen: 40
2a00:c281:300::/40 maxlen: 40
2a00:c281:3400::/40 maxlen: 40
2a00:c281:3100::/40 maxlen: 40
2a00:c281:1200::/40 maxlen: 40
2a00:c281:2300::/40 maxlen: 40
2a00:c281:c00::/40 maxlen: 40
2a00:c281:4200::/40 maxlen: 40
2a00:c281:1d00::/40 maxlen: 40
2a00:c281:1a00::/40 maxlen: 40
2a00:c281:100::/40 maxlen: 40
2a00:c281:1500::/40 maxlen: 40
2a00:c281:3a00::/40 maxlen: 40
2a00:c281:400::/40 maxlen: 40
2a00:c281:1800::/40 maxlen: 40
2a00:c281:3d00::/40 maxlen: 40
2a00:c281:1b00::/40 maxlen: 40
2a00:c281:2c00::/40 maxlen: 40
2a00:c281:4300::/40 maxlen: 40
2a00:c281:a00::/40 maxlen: 40
2a00:c281:3200::/40 maxlen: 40
2a00:c281:3c00::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:23:23:92:61:24:c6:95:84:02:8b:b0:69:26:59:fb:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Oct 12 09:06:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=188649eb9d6e3e7dcd431e22705bc53ec7a656df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a4:28:af:3a:86:8a:5e:33:93:9a:a8:9a:e0:
0b:33:ac:ec:1f:f3:13:59:77:30:88:20:12:c2:54:
c5:e0:e5:3f:34:a5:d9:1d:02:19:08:2f:41:0c:7a:
13:67:70:ee:eb:38:c6:ad:6c:70:ab:5c:0e:93:2c:
35:80:0e:23:23:10:f9:1a:79:ed:d9:87:48:08:d8:
bf:c3:20:c7:a6:1e:eb:a6:7f:36:4d:45:8a:6f:be:
93:3f:86:26:89:4b:93:ff:cd:6a:83:54:77:0c:75:
b5:d3:6a:50:df:8f:a6:74:1f:b0:5e:f2:a9:03:81:
82:2e:f1:3f:c2:21:da:6d:12:08:60:32:56:4a:bd:
b7:7a:d2:9a:4b:1b:86:5a:a6:f8:2b:06:81:d9:e5:
5b:7b:11:e9:55:94:da:d3:9f:34:4f:9a:24:2c:61:
b8:67:9a:75:3e:49:4d:fd:ed:7b:1a:f4:56:da:57:
02:4e:62:63:3e:72:90:50:a4:40:fe:82:c5:db:5f:
7b:ff:5f:8e:ca:31:ed:f3:b8:19:23:b9:87:6c:be:
f5:bd:49:23:08:6f:4f:c9:4d:f6:a2:14:a7:84:17:
87:47:e9:07:7f:93:3f:60:a1:f8:b4:fb:53:07:98:
51:13:4a:42:bd:d4:2b:28:97:ff:24:8e:ff:88:ea:
17:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:86:49:EB:9D:6E:3E:7D:CD:43:1E:22:70:5B:C5:3E:C7:A6:56:DF
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/GIZJ651uPn3NQx4icFvFPsemVt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.128.0/21
5.144.48.0/20
37.19.112.0/20
109.226.0.0/18
141.226.192.0/19
185.3.144.0/22
IPv6:
2a00:c280::/29
Signature Algorithm: sha256WithRSAEncryption
7e:44:2c:68:1f:4c:6a:61:d1:31:e0:38:5e:5d:32:b4:c5:b9:
76:d1:1b:4f:08:3f:44:67:18:5c:6c:50:8c:36:e2:3d:9d:84:
5c:7a:1a:28:07:c7:9f:c5:49:52:f5:d2:29:97:61:d8:0d:ff:
38:8a:e2:41:11:d0:84:a8:17:68:01:d6:f9:4b:b7:c7:00:e0:
b5:2f:21:da:db:5d:7f:80:53:95:43:9d:3a:4d:f9:b3:fc:af:
7f:7c:a5:39:33:44:d3:f0:b9:23:08:b6:07:a7:4d:bb:dc:16:
e8:d5:ea:b2:8a:b9:8a:6a:2a:f6:78:58:3c:ea:59:12:52:f1:
9c:73:82:00:d4:b2:b3:37:b2:34:be:02:4e:0b:df:b0:fa:01:
b0:0c:d9:9f:05:f8:51:f0:75:ab:98:0e:c8:9d:08:ee:de:66:
cd:26:2b:32:39:33:49:25:11:11:aa:33:bf:65:bd:fa:23:cf:
e2:39:7a:1b:be:e7:cb:5f:30:8d:b1:87:14:f2:e9:02:e5:dc:
65:7f:3a:98:3e:0a:57:59:3e:b7:8a:cd:ac:67:9c:f3:fe:34:
60:84:75:a1:93:84:a8:d5:d0:2a:7e:0a:27:29:15:78:48:15:
c8:f4:4e:d8:09:d2:df:15:c5:70:cc:28:c4:f6:4c:e8:de:ff:
26:33:4d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:14 2024 by rpki-client on console-ams.rpki-client.org