Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/GqfWCQj5u2g6BrFJ2lzOtmmR4FQ.roa
File: GqfWCQj5u2g6BrFJ2lzOtmmR4FQ.roa (raw, json)
Hash identifier: /XuXTHvMlCRFGOjUv1GlrSU/fq+DUmDKBg/va4ZIqEw=
Subject key identifier: 1A:A7:D6:09:08:F9:BB:68:3A:06:B1:49:DA:5C:CE:B6:69:91:E0:54
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0185D99599CAA3C46E27A4C0CED4AEDEB606
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/GqfWCQj5u2g6BrFJ2lzOtmmR4FQ.roa
Signing time: Sun 22 Jan 2023 13:05:38 +0000
ROA not before: Sun 22 Jan 2023 13:05:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43357
IP address blocks: 194.36.25.0/24 maxlen: 24
185.248.85.0/24 maxlen: 24
92.60.40.0/24 maxlen: 24
185.254.75.0/24 maxlen: 24
45.130.20.0/22 maxlen: 24
185.194.52.0/22 maxlen: 24
2a09:7:2007::/48 maxlen: 48
2a07:fe00:1::/48 maxlen: 48
2a0c:59c0:18::/48 maxlen: 48
2a03:d9c0:3000::/48 maxlen: 48
2a0b:89c1:3::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d9:95:99:ca:a3:c4:6e:27:a4:c0:ce:d4:ae:de:b6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 22 13:05:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1aa7d60908f9bb683a06b149da5cceb66991e054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:15:ec:74:88:70:f1:2a:75:ce:9d:ff:8d:2f:
1d:87:09:20:7d:a7:a0:37:b0:76:c9:94:aa:e1:89:
01:17:c9:97:f6:f4:30:54:10:20:42:34:fd:fa:12:
f4:a0:1b:c9:e7:f5:e0:b9:72:38:bc:2b:78:84:fd:
94:24:6f:76:8e:a0:b1:04:6a:63:97:be:40:d4:68:
0a:71:d1:4d:63:41:f0:7d:15:d3:c9:5b:5c:91:e2:
01:78:6c:05:9c:15:a3:9c:cf:87:07:7a:68:5a:58:
c8:13:ef:53:0f:1e:14:a8:1c:90:1f:61:83:44:7c:
01:37:ef:2b:b3:f1:87:3b:10:a3:cd:6b:a9:cf:64:
b3:dd:c5:9e:7e:fc:12:4b:19:89:90:6a:66:7c:9c:
b5:e5:b8:49:c6:37:e4:f7:32:3f:a3:6c:08:3b:8d:
8d:4a:40:c3:c7:7a:27:e7:c2:4c:a0:42:2f:d6:37:
cc:3f:d5:e2:b3:fa:c5:df:41:ac:01:4b:a7:d3:7f:
b0:b4:64:98:08:8f:f9:80:d1:72:b0:0f:b5:bd:b4:
57:58:5d:5f:cb:8f:85:94:91:fd:f0:24:ef:d2:6e:
eb:bf:73:28:44:52:03:5e:f0:88:34:9e:72:a0:d7:
44:33:e3:33:ee:a8:2d:c7:6d:d9:0b:c9:e4:f8:49:
53:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A7:D6:09:08:F9:BB:68:3A:06:B1:49:DA:5C:CE:B6:69:91:E0:54
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/GqfWCQj5u2g6BrFJ2lzOtmmR4FQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.20.0/22
92.60.40.0/24
185.194.52.0/22
185.248.85.0/24
185.254.75.0/24
194.36.25.0/24
IPv6:
2a03:d9c0:3000::/48
2a07:fe00:1::/48
2a09:7:2007::/48
2a0b:89c1:3::/48
2a0c:59c0:18::/48
Signature Algorithm: sha256WithRSAEncryption
5a:91:2b:bd:f6:02:c4:40:ba:8f:e5:bf:78:6b:df:7f:63:49:
61:d6:c0:2f:3a:24:11:36:94:50:66:11:9b:e5:16:d3:f6:11:
93:6d:da:b6:d7:a3:98:f5:23:0f:49:84:b2:e5:9b:fa:b4:c6:
07:b2:55:e8:67:13:9f:79:e7:b9:62:b3:5d:74:60:e4:ea:9d:
76:23:37:39:99:b3:00:8a:0f:54:e5:6c:72:df:08:c8:f2:48:
a1:08:9e:0b:18:be:62:38:ec:fb:22:1c:c9:94:4e:a6:fc:6b:
d6:51:9d:10:26:03:15:62:96:4c:74:0f:31:1e:ec:fe:f4:05:
5e:ae:3a:a3:c1:de:80:47:e7:61:14:5b:11:82:3a:1d:66:e6:
ce:8b:3e:eb:93:40:52:8c:96:38:8d:72:72:8e:79:46:34:f2:
c5:db:06:57:af:31:65:f1:82:ee:d9:5e:bc:97:e4:55:96:ae:
27:cc:31:68:a5:96:bc:76:85:74:bb:41:4d:e4:3a:9c:1b:41:
8b:e1:a6:f9:e0:c8:c2:79:fe:a7:d2:0c:55:5f:eb:47:f1:09:
8e:5c:38:52:95:4f:d8:5e:f4:e9:bd:a5:0b:3f:c8:e5:b5:ab:
a7:dc:81:4c:2b:69:4e:1d:38:14:07:3f:f7:b8:80:f7:a6:a5:
f8:a9:d0:23
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgISAYXZlZnKo8RuJ6TAztSu3rYGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjMwMTIyMTMwNTM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWE3ZDYwOTA4ZjliYjY4M2EwNmIxNDlkYTVjY2ViNjY5OTFlMDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohXsdIhw8Sp1zp3/jS8dhwkgfaeg
N7B2yZSq4YkBF8mX9vQwVBAgQjT9+hL0oBvJ5/XguXI4vCt4hP2UJG92jqCxBGpj
l75A1GgKcdFNY0HwfRXTyVtckeIBeGwFnBWjnM+HB3poWljIE+9TDx4UqByQH2GD
RHwBN+8rs/GHOxCjzWupz2Sz3cWefvwSSxmJkGpmfJy15bhJxjfk9zI/o2wIO42N
SkDDx3on58JMoEIv1jfMP9Xis/rF30GsAUun03+wtGSYCI/5gNFysA+1vbRXWF1f
y4+FlJH98CTv0m7rv3MoRFIDXvCINJ5yoNdEM+Mz7qgtx23ZC8nk+ElThQIDAQAB
o4ICXDCCAlgwHQYDVR0OBBYEFBqn1gkI+btoOgaxSdpczrZpkeBUMB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvR3FmV0NRajV1Mmc2QnJGSjJsek90bW1SNEZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTAqBAIAATAkAwQCLYIUAwQA
XDwoAwQCucI0AwQAufhVAwQAuf5LAwQAwiQZMDMEAgACMC0DBwAqA9nAMAADBwAq
B/4AAAEDBwAqCQAHIAcDBwAqC4nBAAMDBwAqDFnAABgwDQYJKoZIhvcNAQELBQAD
ggEBAFqRK732AsRAuo/lv3hr339jSWHWwC86JBE2lFBmEZvlFtP2EZNt2rbXo5j1
Iw9JhLLlm/q0xgeyVehnE59557lis110YOTqnXYjNzmZswCKD1TlbHLfCMjySKEI
ngsYvmI47PsiHMmUTqb8a9ZRnRAmAxVilkx0DzEe7P70BV6uOqPB3oBH52EUWxGC
Oh1m5s6LPuuTQFKMljiNcnKOeUY08sXbBlevMWXxgu7ZXryX5FWWrifMMWillrx2
hXS7QU3kOpwbQYvhpvngyMJ5/qfSDFVf60fxCY5cOFKVT9he9Om9pQs/yOW1q6fc
gUwraU4dOBQHP/e4gPempfip0CM=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-ams.rpki-client.org