Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/GsB0Tus0Ch87FHIx4h_Nvw52qDg.roa
File: GsB0Tus0Ch87FHIx4h_Nvw52qDg.roa (raw, json)
Hash identifier: EXD8kZjc8Z0vJlWriLXQySFJQvsqvgEKmhPXCSP4DbY=
Subject key identifier: 1A:C0:74:4E:EB:34:0A:1F:3B:14:72:31:E2:1F:CD:BF:0E:76:A8:38
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 0192E71E182B29DD92455526BE5CD544AA58
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/GsB0Tus0Ch87FHIx4h_Nvw52qDg.roa
Signing time: Fri 01 Nov 2024 09:46:01 +0000
ROA not before: Fri 01 Nov 2024 09:46:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54994
IP address blocks: 140.150.0.0/24 maxlen: 24
140.150.1.0/24 maxlen: 24
140.150.2.0/24 maxlen: 24
140.150.3.0/24 maxlen: 24
140.150.4.0/24 maxlen: 24
140.150.5.0/24 maxlen: 24
140.150.6.0/24 maxlen: 24
140.150.7.0/24 maxlen: 24
140.150.8.0/23 maxlen: 24
140.150.12.0/24 maxlen: 24
140.150.18.0/24 maxlen: 24
140.150.19.0/24 maxlen: 24
140.150.21.0/24 maxlen: 24
140.150.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 09:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e7:1e:18:2b:29:dd:92:45:55:26:be:5c:d5:44:aa:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Nov 1 09:46:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ac0744eeb340a1f3b147231e21fcdbf0e76a838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:12:49:3c:74:a9:49:ea:3a:b6:ed:2a:9d:b0:
31:3c:a8:ee:f2:56:76:e3:a1:fd:92:07:d8:bd:a4:
ae:7d:3d:fb:2a:29:fd:52:13:9c:8a:df:db:3f:d4:
13:f8:85:89:8b:ae:5c:11:fd:5e:24:9d:bb:f8:c4:
e4:79:95:0c:d6:97:d8:6b:63:6e:fe:1b:f6:f2:38:
4e:41:e3:40:28:c9:a2:f2:7c:4d:22:3b:59:c0:a3:
b2:b8:95:c4:0a:49:86:f3:70:30:b6:59:28:cf:30:
42:8d:c6:5e:44:e9:40:8f:f0:b4:c2:95:31:a2:71:
5f:de:22:ce:78:0d:6d:f9:e3:74:25:61:c5:9a:3a:
4f:53:11:66:64:9d:97:92:35:79:f0:66:b2:e9:07:
fa:55:88:56:49:fc:bb:64:13:df:c6:e9:e9:b7:e5:
5e:db:08:90:d7:e3:9f:31:78:59:ae:79:8a:ad:0e:
3d:ad:8a:1b:5c:36:8e:f8:94:f2:aa:76:d1:e3:cb:
b5:36:1d:4c:35:f3:22:32:35:d9:25:a5:c2:0c:4d:
79:8a:9c:6d:7e:f3:af:2f:1b:2b:a1:3d:fb:dd:39:
4e:2f:0d:ad:f4:42:3c:26:fe:82:f9:0f:c6:40:b4:
39:06:c0:e4:e8:be:f8:83:3b:35:de:74:3a:15:76:
56:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C0:74:4E:EB:34:0A:1F:3B:14:72:31:E2:1F:CD:BF:0E:76:A8:38
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/GsB0Tus0Ch87FHIx4h_Nvw52qDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.0.0-140.150.9.255
140.150.12.0/24
140.150.18.0/23
140.150.21.0/24
140.150.24.0/24
Signature Algorithm: sha256WithRSAEncryption
28:0a:2f:06:06:5f:a3:94:1d:da:13:87:65:5d:49:07:8f:3d:
a9:c9:f7:ab:b7:0c:d7:30:24:92:05:d2:67:3e:4a:f9:35:d2:
63:7e:0c:f2:65:cf:6b:e8:32:54:2f:25:08:6b:df:03:e8:65:
aa:53:6b:f3:85:1c:ff:f8:e2:5e:59:d2:b4:a6:34:ec:a5:34:
84:cb:4a:9e:5b:27:76:60:27:ae:47:96:69:1e:b4:c3:8f:02:
a5:24:0a:35:8c:c6:8b:56:e6:52:51:c0:9b:3c:43:d3:97:93:
ef:ec:bf:b3:e8:74:9e:cc:6c:09:f6:76:d6:08:ee:f8:ea:a8:
e1:d4:16:f0:b0:07:21:23:fa:1c:6e:cb:f0:2e:17:69:56:9b:
84:c6:89:84:ee:e0:49:81:10:88:05:23:cf:16:9e:27:6c:5f:
4f:3d:ce:26:e1:92:14:0c:ea:04:eb:e3:8f:17:95:27:ad:58:
2f:0f:27:30:12:24:8c:b4:77:7b:1c:41:51:35:ff:5b:a7:d1:
eb:17:3a:0d:7e:9c:88:a6:61:a4:79:07:ee:66:bb:3f:1b:3a:
26:23:3f:c9:91:8b:1b:b7:66:ca:83:76:1c:8b:a7:d8:1c:79:
91:78:f9:06:30:39:bb:09:8e:60:9b:83:8f:1c:79:dc:c2:0e:
cf:87:b4:1f
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAZLnHhgrKd2SRVUmvlzVRKpYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTMzMWZhN2JlNDcwZGMxNzllMTZjMzA2ZTk4YzZjNzMx
YTU3NWMwHhcNMjQxMTAxMDk0NjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWMwNzQ0ZWViMzQwYTFmM2IxNDcyMzFlMjFmY2RiZjBlNzZhODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhJJPHSpSeo6tu0qnbAxPKju8lZ2
46H9kgfYvaSufT37Kin9UhOcit/bP9QT+IWJi65cEf1eJJ27+MTkeZUM1pfYa2Nu
/hv28jhOQeNAKMmi8nxNIjtZwKOyuJXECkmG83AwtlkozzBCjcZeROlAj/C0wpUx
onFf3iLOeA1t+eN0JWHFmjpPUxFmZJ2XkjV58Gay6Qf6VYhWSfy7ZBPfxunpt+Ve
2wiQ1+OfMXhZrnmKrQ49rYobXDaO+JTyqnbR48u1Nh1MNfMiMjXZJaXCDE15ipxt
fvOvLxsroT373TlOLw2t9EI8Jv6C+Q/GQLQ5BsDk6L74gzs13nQ6FXZWDQIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFBrAdE7rNAofOxRyMeIfzb8Odqg4MB8GA1UdIwQY
MBaAFEuTMfp75HDcF54WwwbpjGxzGldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjIt
OGIyYjQ3MzhiMWNjLzEvR3NCMFR1czBDaDg3RkhJeDRoX052dzUycURnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjItOGIyYjQ3MzhiMWNj
LzEvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTArBAIAATAlMAsDAwGMlgME
AYyWCAMEAIyWDAMEAYyWEgMEAIyWFQMEAIyWGDANBgkqhkiG9w0BAQsFAAOCAQEA
KAovBgZfo5Qd2hOHZV1JB489qcn3q7cM1zAkkgXSZz5K+TXSY34M8mXPa+gyVC8l
CGvfA+hlqlNr84Uc//jiXlnStKY07KU0hMtKnlsndmAnrkeWaR60w48CpSQKNYzG
i1bmUlHAmzxD05eT7+y/s+h0nsxsCfZ21gju+Oqo4dQW8LAHISP6HG7L8C4XaVab
hMaJhO7gSYEQiAUjzxaeJ2xfTz3OJuGSFAzqBOvjjxeVJ61YLw8nMBIkjLR3exxB
UTX/W6fR6xc6DX6ciKZhpHkH7ma7Pxs6JiM/yZGLG7dmyoN2HIun2Bx5kXj5BjA5
uwmOYJuDjxx53MIOz4e0Hw==
-----END CERTIFICATE-----
Generated at Tue Nov 5 13:26:32 2024 by rpki-client on console-fra.rpki-client.org