Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/gqasRxZKsTq0aJQESXFLLiZAu2g.roa
File: gqasRxZKsTq0aJQESXFLLiZAu2g.roa (raw, json)
Hash identifier: jZdQ94KueXgfqy25azASD52qRJ484NHP6TJezSOOsQQ=
Subject key identifier: 82:A6:AC:47:16:4A:B1:3A:B4:68:94:04:49:71:4B:2E:26:40:BB:68
Certificate issuer: /CN=85af5310805ec7561a1a22f9c890c9731fb6debf
Certificate serial: 0190A5FE722FCE0FCBD38DAE4030D1F44289
Authority key identifier: 85:AF:53:10:80:5E:C7:56:1A:1A:22:F9:C8:90:C9:73:1F:B6:DE:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ha9TEIBex1YaGiL5yJDJcx-23r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/gqasRxZKsTq0aJQESXFLLiZAu2g.roa
Signing time: Fri 12 Jul 2024 08:10:34 +0000
ROA not before: Fri 12 Jul 2024 08:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20875
IP address blocks: 5.133.128.0/19 maxlen: 24
37.8.128.0/20 maxlen: 24
37.19.24.0/21 maxlen: 24
46.35.128.0/19 maxlen: 24
62.113.0.0/19 maxlen: 24
85.94.128.0/19 maxlen: 24
92.240.32.0/19 maxlen: 24
95.156.128.0/18 maxlen: 24
159.20.16.0/21 maxlen: 24
185.17.44.0/22 maxlen: 24
185.38.144.0/22 maxlen: 24
212.39.96.0/19 maxlen: 24
212.125.144.0/20 maxlen: 24
2a02:28b8::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 22 Jul 2024 08:06:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a5:fe:72:2f:ce:0f:cb:d3:8d:ae:40:30:d1:f4:42:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85af5310805ec7561a1a22f9c890c9731fb6debf
Validity
Not Before: Jul 12 08:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82a6ac47164ab13ab468940449714b2e2640bb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:72:85:eb:21:25:15:1e:70:c8:c0:db:0f:
49:da:83:41:12:de:85:54:ec:06:fe:9a:b6:95:f9:
9c:fa:e1:21:88:43:90:e3:92:0c:a1:89:60:57:d9:
80:a4:8e:d6:6a:a4:e9:c5:24:81:2d:7b:80:94:b6:
e2:36:dc:76:4b:93:52:cf:c4:fe:a2:f1:c8:68:5c:
63:e7:e0:35:a7:75:08:5f:3d:21:0b:4e:3c:da:ca:
a4:01:b4:5d:57:5e:18:bd:09:66:a9:bf:47:df:c3:
a4:e0:59:3f:97:a6:44:e5:d9:66:60:69:3d:82:4a:
f2:b7:ac:18:94:1a:4b:7a:30:a5:41:3f:64:c0:f2:
e6:28:d1:82:38:d7:1c:37:f5:c4:25:70:d2:fc:d7:
d4:1c:00:d2:b5:c6:86:d6:e0:02:a9:53:4a:5d:84:
f8:f3:7d:c9:ef:c6:46:94:2a:c0:d2:b5:fd:52:08:
82:2f:e9:de:94:d6:d9:df:a7:c7:49:5f:10:0a:f1:
ae:56:7b:da:b1:cd:ef:d2:19:37:05:dd:ee:59:87:
58:96:86:9a:32:53:19:eb:5a:fd:6c:a2:35:5c:3c:
96:8e:d9:d4:bb:50:88:aa:6d:21:55:1c:35:c8:a4:
ea:f1:b7:27:67:1b:45:5d:da:1e:7e:9c:03:da:99:
2f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A6:AC:47:16:4A:B1:3A:B4:68:94:04:49:71:4B:2E:26:40:BB:68
X509v3 Authority Key Identifier:
keyid:85:AF:53:10:80:5E:C7:56:1A:1A:22:F9:C8:90:C9:73:1F:B6:DE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha9TEIBex1YaGiL5yJDJcx-23r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/gqasRxZKsTq0aJQESXFLLiZAu2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.128.0/19
37.8.128.0/20
37.19.24.0/21
46.35.128.0/19
62.113.0.0/19
85.94.128.0/19
92.240.32.0/19
95.156.128.0/18
159.20.16.0/21
185.17.44.0/22
185.38.144.0/22
212.39.96.0/19
212.125.144.0/20
IPv6:
2a02:28b8::/29
Signature Algorithm: sha256WithRSAEncryption
96:26:59:55:f8:62:47:7c:eb:1b:69:e4:93:08:60:6d:2b:ad:
d8:fd:38:21:8b:53:4d:79:a5:67:f7:92:fd:24:55:64:79:dd:
9e:df:fb:01:3e:fa:ec:eb:14:04:98:18:db:1f:75:e7:68:2a:
42:c8:4a:b3:62:5a:c8:6f:9e:38:27:f1:35:43:11:dc:4f:c8:
f6:dd:fc:3c:4b:88:13:0b:24:5d:7e:b8:d4:f8:29:c5:f7:bc:
c2:77:cf:ba:8f:50:4c:82:ed:de:10:5f:37:93:9f:04:2c:57:
90:09:21:2c:9a:c5:a2:cc:b7:81:24:74:ab:b5:8b:d0:87:48:
1d:bb:ab:17:93:53:13:43:30:66:28:70:49:bf:58:8a:8a:07:
ae:ba:a3:3a:6d:02:9d:fb:c6:e2:9f:59:8d:9d:ff:00:72:20:
ad:c4:37:fb:b4:c8:32:8e:b6:4c:c0:ad:05:c0:b8:90:b9:f9:
8a:a7:36:90:4c:e9:09:0f:9d:2d:7b:7c:a6:74:46:e5:0f:47:
78:e7:28:c7:4c:d0:1f:33:1f:1d:01:18:23:f5:68:11:70:d6:
e3:11:63:dd:d1:c4:8f:74:09:bc:bb:1c:07:ac:a1:6f:9e:5b:
51:5d:07:03:bd:7a:8e:f7:ce:ba:c6:96:fa:5f:c2:9c:34:cc:
98:a2:5b:c1
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgISAZCl/nIvzg/L042uQDDR9EKJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YWY1MzEwODA1ZWM3NTYxYTFhMjJmOWM4OTBjOTczMWZi
NmRlYmYwHhcNMjQwNzEyMDgxMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmE2YWM0NzE2NGFiMTNhYjQ2ODk0MDQ0OTcxNGIyZTI2NDBiYjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLpyheshJRUecMjA2w9J2oNBEt6F
VOwG/pq2lfmc+uEhiEOQ45IMoYlgV9mApI7WaqTpxSSBLXuAlLbiNtx2S5NSz8T+
ovHIaFxj5+A1p3UIXz0hC0482sqkAbRdV14YvQlmqb9H38Ok4Fk/l6ZE5dlmYGk9
gkryt6wYlBpLejClQT9kwPLmKNGCONccN/XEJXDS/NfUHADStcaG1uACqVNKXYT4
833J78ZGlCrA0rX9UgiCL+nelNbZ36fHSV8QCvGuVnvasc3v0hk3Bd3uWYdYloaa
MlMZ61r9bKI1XDyWjtnUu1CIqm0hVRw1yKTq8bcnZxtFXdoefpwD2pkvjwIDAQAB
o4ICYDCCAlwwHQYDVR0OBBYEFIKmrEcWSrE6tGiUBElxSy4mQLtoMB8GA1UdIwQY
MBaAFIWvUxCAXsdWGhoi+ciQyXMftt6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGE5VEVJQmV4MVlhR2lMNXlKREpjeC0yM3I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8wMDE0MDYtMmUxZi00YWViLTkwYTct
NzUyODM1MGQ0YzEzLzEvZ3Fhc1J4WktzVHEwYUpRRVNYRkxMaVpBdTJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8wMDE0MDYtMmUxZi00YWViLTkwYTctNzUyODM1MGQ0YzEz
LzEvaGE5VEVJQmV4MVlhR2lMNXlKREpjeC0yM3I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBUBAIAATBOAwQFBYWAAwQE
JQiAAwQDJRMYAwQFLiOAAwQFPnEAAwQFVV6AAwQFXPAgAwQGX5yAAwQDnxQQAwQC
uREsAwQCuSaQAwQF1CdgAwQE1H2QMA0EAgACMAcDBQMqAii4MA0GCSqGSIb3DQEB
CwUAA4IBAQCWJllV+GJHfOsbaeSTCGBtK63Y/Tghi1NNeaVn95L9JFVked2e3/sB
Pvrs6xQEmBjbH3XnaCpCyEqzYlrIb544J/E1QxHcT8j23fw8S4gTCyRdfrjU+CnF
97zCd8+6j1BMgu3eEF83k58ELFeQCSEsmsWizLeBJHSrtYvQh0gdu6sXk1MTQzBm
KHBJv1iKigeuuqM6bQKd+8bin1mNnf8AciCtxDf7tMgyjrZMwK0FwLiQufmKpzaQ
TOkJD50te3ymdEblD0d45yjHTNAfMx8dARgj9WgRcNbjEWPd0cSPdAm8uxwHrKFv
nltRXQcDvXqO9866xpb6X8KcNMyYolvB
-----END CERTIFICATE-----
Generated at Mon Jul 22 10:50:31 2024 by rpki-client on console-fra.rpki-client.org