Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GBS_dssWrmPUYm6hruWu95TrxnY.roa
File: GBS_dssWrmPUYm6hruWu95TrxnY.roa (raw, json)
Hash identifier: MqdbPzLYESNBu/XgKVlBI6wiMGZxZfuKSwi3QTxF+vM=
Subject key identifier: 18:14:BF:76:CB:16:AE:63:D4:62:6E:A1:AE:E5:AE:F7:94:EB:C6:76
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194656D06E8BADDA7271064295F583327F3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GBS_dssWrmPUYm6hruWu95TrxnY.roa
Signing time: Tue 14 Jan 2025 15:27:11 +0000
ROA not before: Tue 14 Jan 2025 15:27:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.205.0/24 maxlen: 24
37.202.208.0/23 maxlen: 24
37.202.209.0/24 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
37.202.217.0/24 maxlen: 24
37.202.220.0/24 maxlen: 24
37.202.221.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.243.162.0/24 maxlen: 24
151.243.222.0/24 maxlen: 24
151.243.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 10:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:65:6d:06:e8:ba:dd:a7:27:10:64:29:5f:58:33:27:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 14 15:27:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1814bf76cb16ae63d4626ea1aee5aef794ebc676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:b9:06:b8:3e:00:52:43:06:64:c8:b3:60:
b4:ce:2d:87:ff:0f:62:0d:ae:5c:22:7e:5c:ec:12:
bf:38:67:07:df:39:0f:a1:7f:f3:cf:f7:cc:a3:92:
f4:74:d9:81:70:00:a8:e6:53:93:fd:b9:1e:44:c3:
37:cd:a3:db:5f:fd:f5:a9:1c:8e:28:b3:03:e2:c9:
20:8b:b3:6b:64:37:65:c4:f8:63:1f:69:ed:49:de:
64:c7:4a:c1:2a:a5:1d:18:0a:f1:db:59:ff:59:0e:
11:bc:07:03:8b:ef:88:0d:dc:e4:1f:21:3a:a6:cc:
5a:dd:55:aa:68:ca:f0:63:d7:01:84:f3:50:a1:32:
4d:3b:b4:34:30:bb:22:32:3c:6a:9e:b2:86:82:0d:
13:6b:83:8f:75:50:99:8a:0a:a1:bd:2f:4f:1f:f1:
40:bb:8e:e4:63:76:c9:f2:07:c9:32:37:ee:60:7b:
cb:e8:cf:88:c4:ed:3c:76:31:2c:7f:59:4a:05:73:
17:0f:d5:2e:98:6a:71:c2:e7:2d:22:e9:67:f5:e7:
2b:95:8a:0b:52:ef:61:e2:75:45:e5:e4:ff:1a:4d:
db:e9:80:1f:fd:84:d7:b9:c7:f8:3f:f0:ed:ae:67:
09:2e:5f:5d:9f:6a:5d:75:88:2f:bf:4c:45:6b:8c:
6c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:14:BF:76:CB:16:AE:63:D4:62:6E:A1:AE:E5:AE:F7:94:EB:C6:76
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GBS_dssWrmPUYm6hruWu95TrxnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.205.0/24
37.202.208.0-37.202.210.255
37.202.212.0/23
37.202.217.0/24
37.202.220.0/23
151.242.14.0/24
151.242.20.0/24
151.243.162.0/24
151.243.222.0/24
151.243.254.0/24
Signature Algorithm: sha256WithRSAEncryption
71:e4:cd:7f:12:b4:c6:e0:0d:9f:fb:e2:96:1c:f7:4b:c0:c9:
55:cc:c2:3e:92:3c:51:49:61:20:c8:a4:76:89:04:15:9f:25:
1b:39:34:57:28:37:c2:af:4b:b2:7c:8d:c7:6c:69:b3:04:95:
d4:13:7a:f3:34:7f:14:8a:57:90:f4:bc:1b:89:0f:44:ee:f4:
c1:93:1e:53:d1:dc:df:68:80:45:5d:f9:ce:d9:f6:b3:00:4b:
d1:5b:f3:a4:1d:d7:05:e7:c7:88:c6:91:d2:7b:0f:7a:25:f4:
19:27:da:0a:70:27:03:c4:71:d9:c1:0d:21:ac:4f:c3:c7:ad:
10:ed:e7:cf:34:cb:04:54:db:de:30:18:2d:f5:d0:f9:2f:59:
7a:b1:c6:06:8b:ee:6e:fc:09:f7:dd:c2:99:74:de:f0:0a:fb:
f5:e9:77:52:12:87:7e:7c:f4:59:79:b2:47:7c:5f:77:ee:8e:
8b:58:9c:b5:ea:66:c6:d2:8d:3b:84:a9:90:4f:ba:00:b5:39:
d9:66:99:a6:6e:f5:ef:70:83:36:a5:5b:43:fd:d9:d4:40:87:
ff:a2:96:03:b8:d2:b6:17:32:0c:5a:ad:b6:82:ce:a6:4c:9e:
88:e6:aa:a3:f1:93:2c:bc:1a:50:f2:73:a6:8e:73:54:b6:68:
1a:62:02:86
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAZRlbQbout2nJxBkKV9YMyfzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMTE0MTUyNzExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODE0YmY3NmNiMTZhZTYzZDQ2MjZlYTFhZWU1YWVmNzk0ZWJjNjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGe5Brg+AFJDBmTIs2C0zi2H/w9i
Da5cIn5c7BK/OGcH3zkPoX/zz/fMo5L0dNmBcACo5lOT/bkeRMM3zaPbX/31qRyO
KLMD4skgi7NrZDdlxPhjH2ntSd5kx0rBKqUdGArx21n/WQ4RvAcDi++IDdzkHyE6
psxa3VWqaMrwY9cBhPNQoTJNO7Q0MLsiMjxqnrKGgg0Ta4OPdVCZigqhvS9PH/FA
u47kY3bJ8gfJMjfuYHvL6M+IxO08djEsf1lKBXMXD9UumGpxwuctIuln9ecrlYoL
Uu9h4nVF5eT/Gk3b6YAf/YTXucf4P/DtrmcJLl9dn2pddYgvv0xFa4xsCQIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFBgUv3bLFq5j1GJuoa7lrveU68Z2MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvR0JTX2Rzc1dybVBVWW02aHJ1V3U5NVRyeG5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQAJcrNMAwD
BAQlytADBAAlytIDBAElytQDBAAlytkDBAElytwDBACX8g4DBACX8hQDBACX86ID
BACX894DBACX8/4wDQYJKoZIhvcNAQELBQADggEBAHHkzX8StMbgDZ/74pYc90vA
yVXMwj6SPFFJYSDIpHaJBBWfJRs5NFcoN8KvS7J8jcdsabMEldQTevM0fxSKV5D0
vBuJD0Tu9MGTHlPR3N9ogEVd+c7Z9rMAS9Fb86Qd1wXnx4jGkdJ7D3ol9Bkn2gpw
JwPEcdnBDSGsT8PHrRDt5880ywRU294wGC310PkvWXqxxgaL7m78Cffdwpl03vAK
+/Xpd1ISh3589Fl5skd8X3fujotYnLXqZsbSjTuEqZBPugC1OdlmmaZu9e9wgzal
W0P92dRAh/+ilgO40rYXMgxarbaCzqZMnojmqqPxkyy8GlDyc6aOc1S2aBpiAoY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:22:17 2025 by rpki-client