Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/_GAYA86s-BqYOA4y8aQHA5vO46Q.roa
File: _GAYA86s-BqYOA4y8aQHA5vO46Q.roa (raw, json)
Hash identifier: wiwKpQtvjsnPGwfbGKVXLFg8Kt9FOtcH5uBrpMiGbTQ=
Subject key identifier: FC:60:18:03:CE:AC:F8:1A:98:38:0E:32:F1:A4:07:03:9B:CE:E3:A4
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 01857130A71CCE78745D97A86EA223953F04
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/_GAYA86s-BqYOA4y8aQHA5vO46Q.roa
Signing time: Mon 02 Jan 2023 06:34:51 +0000
ROA not before: Mon 02 Jan 2023 06:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212369
IP address blocks: 185.255.93.0/24 maxlen: 24
185.255.94.0/24 maxlen: 24
185.255.95.0/24 maxlen: 24
185.132.126.0/24 maxlen: 24
185.93.68.0/24 maxlen: 24
185.93.69.0/24 maxlen: 24
185.93.70.0/24 maxlen: 24
185.93.71.0/24 maxlen: 24
193.164.5.0/24 maxlen: 24
193.164.6.0/24 maxlen: 24
89.35.52.0/24 maxlen: 24
93.115.10.0/24 maxlen: 24
93.177.101.0/24 maxlen: 24
93.177.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Feb 2023 09:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:a7:1c:ce:78:74:5d:97:a8:6e:a2:23:95:3f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Jan 2 06:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc601803ceacf81a98380e32f1a407039bcee3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:88:b5:81:08:22:22:4f:98:8c:8b:91:b8:
4c:2e:b8:af:5a:d3:2c:a0:ff:3d:ad:dc:ba:89:2b:
d4:39:63:fe:54:47:28:aa:b9:84:4a:35:e9:c1:ce:
8c:fa:73:13:90:ca:95:24:c1:82:fb:6e:8f:5c:7c:
bd:2c:76:51:79:fb:90:07:b7:20:3a:19:42:13:1a:
84:9a:b0:ce:ee:ad:02:1a:2e:91:ea:85:1b:2a:8a:
a1:7c:2f:41:4a:2a:60:33:7a:a4:56:01:59:a9:e9:
7b:ff:ac:1b:eb:3c:3f:83:24:91:c9:c1:ef:e7:b0:
45:61:77:6d:6b:e6:db:ae:9d:24:62:55:22:bb:5a:
4a:d3:7b:ea:05:65:e5:34:f7:d5:73:24:5b:cc:8a:
36:7b:af:c6:ea:77:07:fa:30:d4:0d:d7:9f:2b:f8:
50:e4:df:03:b2:09:90:16:83:66:bd:0a:bd:8d:78:
9b:0b:73:8b:b6:ce:4d:18:cf:d3:c0:dd:01:78:1c:
b2:93:74:dc:16:71:9d:93:3c:e4:c0:53:bf:d7:85:
cb:d5:1d:61:b2:5b:79:a6:46:93:96:79:b6:8b:dd:
42:20:1b:42:49:5c:39:6f:57:68:1a:04:11:d9:27:
03:4a:3b:82:04:22:6b:b5:60:05:eb:bc:f1:af:b0:
3c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:60:18:03:CE:AC:F8:1A:98:38:0E:32:F1:A4:07:03:9B:CE:E3:A4
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/_GAYA86s-BqYOA4y8aQHA5vO46Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.52.0/24
93.115.10.0/24
93.177.101.0-93.177.102.255
185.93.68.0/22
185.132.126.0/24
185.255.93.0-185.255.95.255
193.164.5.0-193.164.6.255
Signature Algorithm: sha256WithRSAEncryption
57:53:66:8c:8d:cb:fe:63:d3:04:b3:4e:7d:b0:67:6f:bd:ef:
49:2f:d3:2c:75:67:1f:3f:e6:34:d3:91:2d:60:e9:e9:66:c3:
43:3e:d8:7f:e1:f2:e4:49:1b:b6:a2:cf:56:0c:32:a2:f6:c9:
0f:9a:d3:34:dd:9a:f0:01:85:f8:f6:88:56:a6:5f:c2:1c:72:
2d:4e:be:14:26:49:76:c9:46:50:bf:3f:59:cf:b7:b7:9b:ef:
e1:4a:73:ce:22:91:ef:7b:54:a8:50:7c:05:c2:c3:2b:64:f9:
38:e8:9e:1e:25:78:13:d0:8f:90:c0:2d:db:c1:fd:9a:bb:4a:
e1:2f:1f:20:5d:d7:90:d6:46:9f:06:31:a8:9c:e9:60:6c:18:
2d:7d:56:32:ca:be:22:39:ab:11:18:fe:a7:10:c1:2b:65:70:
80:9f:7b:73:46:76:62:5f:e2:c1:56:3d:6f:fc:96:c6:f0:74:
87:4d:a3:d5:8d:41:e4:e7:0e:5e:5c:d9:a3:7d:2b:15:89:aa:
b8:91:09:1a:ad:3b:3c:ff:5f:23:65:f8:9a:01:38:ab:cd:41:
c1:2b:9a:bc:d5:ca:da:c2:60:ff:53:cb:c0:fc:7c:de:95:bb:
99:f2:09:a8:01:bb:65:8b:4c:bb:96:65:27:32:62:89:af:ba:
84:d0:08:76
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYVxMKccznh0XZeobqIjlT8EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYjVhODBhNzEwNmUwYTRiODU0NWM4MTUwYmI3MmM2OTlm
Y2M5YTAwHhcNMjMwMTAyMDYzNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzYwMTgwM2NlYWNmODFhOTgzODBlMzJmMWE0MDcwMzliY2VlM2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2uItYEIIiJPmIyLkbhMLrivWtMs
oP89rdy6iSvUOWP+VEcoqrmESjXpwc6M+nMTkMqVJMGC+26PXHy9LHZRefuQB7cg
OhlCExqEmrDO7q0CGi6R6oUbKoqhfC9BSipgM3qkVgFZqel7/6wb6zw/gySRycHv
57BFYXdta+bbrp0kYlUiu1pK03vqBWXlNPfVcyRbzIo2e6/G6ncH+jDUDdefK/hQ
5N8DsgmQFoNmvQq9jXibC3OLts5NGM/TwN0BeByyk3TcFnGdkzzkwFO/14XL1R1h
slt5pkaTlnm2i91CIBtCSVw5b1doGgQR2ScDSjuCBCJrtWAF67zxr7A8KwIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFPxgGAPOrPgamDgOMvGkBwObzuOkMB8GA1UdIwQY
MBaAFLC1qApxBuCkuFRcgVC7csaZ/MmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDIt
NzQ1ZTA4ZmU1OGM2LzEvX0dBWUE4NnMtQnFZT0E0eThhUUhBNXZPNDZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDItNzQ1ZTA4ZmU1OGM2
LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAWSM0AwQA
XXMKMAwDBABdsWUDBABdsWYDBAK5XUQDBAC5hH4wDAMEALn/XQMEBbn/QDAMAwQA
waQFAwQAwaQGMA0GCSqGSIb3DQEBCwUAA4IBAQBXU2aMjcv+Y9MEs059sGdvve9J
L9MsdWcfP+Y005EtYOnpZsNDPth/4fLkSRu2os9WDDKi9skPmtM03ZrwAYX49ohW
pl/CHHItTr4UJkl2yUZQvz9Zz7e3m+/hSnPOIpHve1SoUHwFwsMrZPk46J4eJXgT
0I+QwC3bwf2au0rhLx8gXdeQ1kafBjGonOlgbBgtfVYyyr4iOasRGP6nEMErZXCA
n3tzRnZiX+LBVj1v/JbG8HSHTaPVjUHk5w5eXNmjfSsViaq4kQkarTs8/18jZfia
ATirzUHBK5q81crawmD/U8vA/HzelbuZ8gmoAbtli0y7lmUnMmKJr7qE0Ah2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-fra.rpki-client.org