Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/gvlXj1EMoL8L0TK5u6857q6lgu0.roa
File: gvlXj1EMoL8L0TK5u6857q6lgu0.roa (raw, json)
Hash identifier: qiB95m6vrvkOf19QOt1ll41hGKPsdS4R3XCuqUIn4NA=
Subject key identifier: 82:F9:57:8F:51:0C:A0:BF:0B:D1:32:B9:BB:AF:39:EE:AE:A5:82:ED
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 0186EB20C2C19DB2D3D0050BE4E6665D8021
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/gvlXj1EMoL8L0TK5u6857q6lgu0.roa
Signing time: Thu 16 Mar 2023 15:53:58 +0000
ROA not before: Thu 16 Mar 2023 15:53:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 91.132.114.0/23 maxlen: 32
103.53.82.0/23 maxlen: 32
193.28.237.0/24 maxlen: 32
45.114.8.0/22 maxlen: 32
45.114.12.0/22 maxlen: 32
193.28.182.0/24 maxlen: 32
193.28.191.0/24 maxlen: 32
193.28.202.0/24 maxlen: 32
103.240.180.0/22 maxlen: 32
103.53.216.0/22 maxlen: 32
193.19.204.0/24 maxlen: 24
193.19.205.0/24 maxlen: 32
193.19.206.0/24 maxlen: 32
193.19.207.0/24 maxlen: 32
45.145.104.0/22 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:eb:20:c2:c1:9d:b2:d3:d0:05:0b:e4:e6:66:5d:80:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Mar 16 15:53:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82f9578f510ca0bf0bd132b9bbaf39eeaea582ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1b:93:87:d3:a9:d8:de:22:b2:99:da:22:9d:
42:66:4b:38:ff:00:25:ba:64:d9:a3:c1:ab:c8:1a:
84:bc:e3:cf:de:aa:f8:ca:ca:f4:88:d0:1e:ba:9f:
75:50:7a:71:18:48:d4:f2:56:73:b3:fc:32:4e:8f:
da:94:89:8b:54:c9:a2:ac:d3:50:5b:c6:c3:68:a0:
4a:e9:90:9b:9c:a5:f0:95:a7:8e:66:b0:f1:94:12:
55:86:ce:c9:f5:6c:97:05:7b:f2:86:76:de:2e:f8:
98:73:b7:7e:c8:d8:49:b4:b0:39:f3:34:f4:50:c3:
cc:18:b1:61:2c:a5:41:5c:a2:a6:f8:0e:6e:06:34:
b0:07:87:3a:40:6d:4b:0b:8e:3e:8d:3a:ac:95:bb:
05:e5:c6:06:79:88:26:65:8c:46:f8:03:1f:62:74:
a1:4f:e7:c5:a3:39:31:62:3a:8c:29:d7:31:ff:42:
cb:8d:fc:10:36:f3:2d:68:4f:7b:c0:3e:04:e4:80:
55:fd:8f:a2:b5:ba:1b:44:d4:d7:aa:85:0b:de:46:
a8:48:d9:4b:64:2a:39:bd:95:14:36:2f:13:0f:4c:
3a:9a:1f:7c:1f:f9:68:2a:e3:23:a3:6d:d0:a9:8f:
33:db:5a:e8:07:f7:19:db:69:5e:09:c8:08:20:3b:
11:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F9:57:8F:51:0C:A0:BF:0B:D1:32:B9:BB:AF:39:EE:AE:A5:82:ED
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/gvlXj1EMoL8L0TK5u6857q6lgu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.114.8.0/21
45.145.104.0/22
91.132.114.0/23
103.53.82.0/23
103.53.216.0/22
103.240.180.0/22
193.19.204.0/22
193.28.182.0/24
193.28.191.0/24
193.28.202.0/24
193.28.237.0/24
Signature Algorithm: sha256WithRSAEncryption
28:7d:52:2d:f4:b3:4f:47:c9:ce:bc:02:de:cf:fd:6e:a3:3f:
3e:08:6f:f9:8f:ff:b7:5b:06:22:38:5f:05:9a:82:95:c2:dc:
ea:1f:6a:8d:21:88:b6:ee:17:ea:a9:98:29:e9:2f:3a:c1:7b:
d5:10:7c:42:40:25:7a:5a:b9:3a:f7:79:3c:99:6b:60:b1:40:
28:53:f7:94:ab:21:6b:3c:6a:e0:cc:d0:fc:99:58:75:b5:72:
1c:2e:30:da:6c:e2:2e:53:e8:dc:95:2f:ac:26:25:fb:45:f8:
01:e7:6c:59:69:16:50:bd:e6:32:4d:99:ca:32:18:0a:32:7f:
cf:4a:66:0c:e0:ac:3b:02:85:d9:ee:d2:f7:e9:a9:4a:e3:5f:
23:e3:40:08:5e:99:3c:df:5d:ce:f2:da:42:3a:8b:b4:8d:9a:
c0:52:89:82:92:ed:05:5d:f2:bb:fa:6d:26:d1:c2:94:86:a6:
3c:6a:f8:2f:08:e5:ae:52:fa:46:99:64:c3:36:a9:39:db:36:
d0:1e:84:71:d7:6f:a5:2a:8b:97:d5:66:97:62:5a:27:d2:a8:
e3:11:c3:7b:01:ae:59:eb:03:a2:d4:f9:b1:1c:2f:f6:1c:46:
17:f8:77:4d:ae:a3:fb:96:e3:62:5b:a0:04:e3:4e:bb:40:df:
ff:80:b0:59
-----BEGIN CERTIFICATE-----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 at Thu Aug 10 12:09:37 2023 by rpki-client on console-fra.rpki-client.org