Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/GB2cA3w2WrJ4uSmHJQGtJS-bK2s.roa
File: GB2cA3w2WrJ4uSmHJQGtJS-bK2s.roa (raw, json)
Hash identifier: 7yiWgqcksy2wwTurzoSxd7zmeJm/BU6SmARJG99a6CI=
Subject key identifier: 18:1D:9C:03:7C:36:5A:B2:78:B9:29:87:25:01:AD:25:2F:9B:2B:6B
Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial: 018E960BE23A629787ECBA48B5B4B115E107
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/GB2cA3w2WrJ4uSmHJQGtJS-bK2s.roa
Signing time: Sun 31 Mar 2024 19:45:44 +0000
ROA not before: Sun 31 Mar 2024 19:45:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212330
IP address blocks: 109.230.121.0/24 maxlen: 24
109.230.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 11:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:96:0b:e2:3a:62:97:87:ec:ba:48:b5:b4:b1:15:e1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
Validity
Not Before: Mar 31 19:45:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=181d9c037c365ab278b929872501ad252f9b2b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:02:ee:0d:5a:7e:7a:f6:80:7b:3e:cd:c3:
3e:70:45:0d:52:29:cc:d6:09:d2:a8:b5:aa:8a:35:
fc:60:b6:5d:16:c9:58:dd:ad:3c:d3:bb:cf:cf:01:
bd:b0:36:6f:88:31:9c:e8:18:d9:c0:63:9e:d7:e5:
22:65:d0:b3:4f:e6:fc:72:ff:32:a5:1a:19:38:25:
50:7c:5b:30:94:1f:d7:c1:90:70:cd:5a:a4:26:03:
a8:91:80:83:94:fb:17:7d:ed:99:80:d3:0d:d7:8d:
b1:75:1e:99:82:6e:41:53:09:c5:0c:7a:7b:6a:8c:
1e:d3:31:52:6a:6d:4c:db:b2:96:d1:18:73:bd:97:
f9:df:2e:43:88:3f:3f:f9:a0:61:b2:95:7f:6e:92:
a6:60:62:d7:2e:83:b1:fa:62:0d:39:7f:9f:12:fa:
87:78:83:5c:04:c3:17:60:83:57:84:d1:92:c4:23:
b4:91:95:e5:04:bc:05:d0:3f:f7:40:e3:01:32:43:
1c:e3:f4:b1:a9:86:a6:dc:97:70:a8:9c:f6:65:66:
c0:c0:15:0c:33:b9:e1:2d:4c:c3:4c:27:2f:59:86:
db:2e:5b:5c:7d:c9:6f:b2:a2:ed:be:a3:e6:c7:f3:
da:43:20:92:a9:67:c5:38:0c:ab:22:e7:74:19:cd:
43:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1D:9C:03:7C:36:5A:B2:78:B9:29:87:25:01:AD:25:2F:9B:2B:6B
X509v3 Authority Key Identifier:
keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/GB2cA3w2WrJ4uSmHJQGtJS-bK2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.230.121.0/24
109.230.125.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:e4:bf:3a:ad:38:5e:26:b1:29:45:2e:c4:f2:b2:34:13:53:
13:59:54:60:97:6a:42:80:c8:5a:b8:2c:92:00:2a:a9:1a:ce:
cd:56:ed:6f:47:16:94:08:80:4a:fa:8e:a4:03:24:cb:a7:08:
d5:0d:e5:41:e0:0c:f8:a0:89:16:fd:a3:a7:df:3a:d2:9a:43:
e9:16:73:c6:76:64:63:16:88:59:05:63:e0:db:c9:e1:74:49:
20:9d:a4:24:34:a7:df:3d:0f:91:8e:5e:8b:44:52:24:fc:56:
1d:47:7b:0d:ca:7a:75:16:e0:ab:f8:8e:71:87:e9:a9:83:58:
45:ee:cf:49:b4:ff:cd:bb:41:9f:4f:a3:a0:a3:f2:ef:c2:cc:
23:81:7f:09:f5:15:5f:a8:b0:81:7e:51:37:88:dd:71:3e:a6:
2c:90:5d:93:b4:11:14:81:18:35:28:52:ce:11:8a:67:2c:6d:
4b:09:d4:24:3a:a6:6f:5a:67:b1:7f:46:a6:bd:9f:9a:e6:71:
c1:48:85:28:81:e2:40:98:43:5d:bb:5b:ce:89:15:25:22:40:
47:a4:dd:2b:c9:ba:24:21:da:33:bd:80:eb:3e:b2:02:5e:83:
28:18:96:d4:8a:58:f4:66:a5:2e:cb:e9:cd:ac:1a:db:23:ae:
8e:cb:01:f7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY6WC+I6YpeH7LpItbSxFeEHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMDk4YTE5MDViYmQzMzgxNTMzODI4ZjZiN2ZkMjI3MTcw
NDMxZWYwHhcNMjQwMzMxMTk0NTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODFkOWMwMzdjMzY1YWIyNzhiOTI5ODcyNTAxYWQyNTJmOWIyYjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhcC7g1afnr2gHs+zcM+cEUNUinM
1gnSqLWqijX8YLZdFslY3a0807vPzwG9sDZviDGc6BjZwGOe1+UiZdCzT+b8cv8y
pRoZOCVQfFswlB/XwZBwzVqkJgOokYCDlPsXfe2ZgNMN142xdR6Zgm5BUwnFDHp7
aowe0zFSam1M27KW0RhzvZf53y5DiD8/+aBhspV/bpKmYGLXLoOx+mINOX+fEvqH
eINcBMMXYINXhNGSxCO0kZXlBLwF0D/3QOMBMkMc4/SxqYam3JdwqJz2ZWbAwBUM
M7nhLUzDTCcvWYbbLltcfclvsqLtvqPmx/PaQyCSqWfFOAyrIud0Gc1DBQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBgdnAN8NlqyeLkphyUBrSUvmytrMB8GA1UdIwQY
MBaAFMEJihkFu9M4FTOCj2t/0icXBDHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUt
YjJhNzEzZDJlYWIyLzEvR0IyY0EzdzJXcko0dVNtSEpRR3RKUy1iSzJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUtYjJhNzEzZDJlYWIy
LzEvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbeZ5AwQA
beZ9MA0GCSqGSIb3DQEBCwUAA4IBAQCu5L86rTheJrEpRS7E8rI0E1MTWVRgl2pC
gMhauCySACqpGs7NVu1vRxaUCIBK+o6kAyTLpwjVDeVB4Az4oIkW/aOn3zrSmkPp
FnPGdmRjFohZBWPg28nhdEkgnaQkNKffPQ+Rjl6LRFIk/FYdR3sNynp1FuCr+I5x
h+mpg1hF7s9JtP/Nu0GfT6Ogo/LvwswjgX8J9RVfqLCBflE3iN1xPqYskF2TtBEU
gRg1KFLOEYpnLG1LCdQkOqZvWmexf0amvZ+a5nHBSIUogeJAmENdu1vOiRUlIkBH
pN0rybokIdozvYDrPrICXoMoGJbUilj0ZqUuy+nNrBrbI66OywH3
-----END CERTIFICATE-----
Generated at Thu Oct 24 15:05:54 2024 by rpki-client on console-fra.rpki-client.org