Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/GwtElCYqG5owlWnZdwII7clrJNU.roa
File: GwtElCYqG5owlWnZdwII7clrJNU.roa (raw, json)
Hash identifier: rpnFeKpc3JhzPse8na10g2qjEqMCRj5Q/Ty5T5iHMvE=
Subject key identifier: 1B:0B:44:94:26:2A:1B:9A:30:95:69:D9:77:02:08:ED:C9:6B:24:D5
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 0190DA8971793BAB5E3AFE15B2ADC199E710
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/GwtElCYqG5owlWnZdwII7clrJNU.roa
Signing time: Mon 22 Jul 2024 13:02:38 +0000
ROA not before: Mon 22 Jul 2024 13:02:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59504
IP address blocks: 45.142.208.0/24 maxlen: 24
45.142.209.0/24 maxlen: 24
45.142.211.0/24 maxlen: 24
45.151.136.0/22 maxlen: 22
45.151.136.0/24 maxlen: 24
45.151.137.0/24 maxlen: 24
80.76.40.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
84.54.37.0/24 maxlen: 24
84.54.39.0/24 maxlen: 24
95.215.108.0/23 maxlen: 23
95.215.110.0/23 maxlen: 23
185.118.64.0/22 maxlen: 22
185.118.64.0/24 maxlen: 24
185.118.65.0/24 maxlen: 24
185.118.66.0/23 maxlen: 23
185.118.66.0/24 maxlen: 24
185.118.67.0/24 maxlen: 24
185.156.176.0/22 maxlen: 22
185.156.176.0/24 maxlen: 24
185.156.177.0/24 maxlen: 24
185.156.178.0/23 maxlen: 23
185.156.178.0/24 maxlen: 24
185.156.179.0/24 maxlen: 24
185.177.113.0/24 maxlen: 24
185.177.115.0/24 maxlen: 24
185.197.72.0/24 maxlen: 24
185.197.73.0/24 maxlen: 24
185.220.32.0/24 maxlen: 24
185.220.33.0/24 maxlen: 24
185.220.34.0/24 maxlen: 24
185.220.35.0/24 maxlen: 24
185.230.140.0/23 maxlen: 23
185.230.142.0/24 maxlen: 24
185.246.116.0/24 maxlen: 24
185.246.117.0/24 maxlen: 24
185.246.119.0/24 maxlen: 24
185.254.188.0/24 maxlen: 24
185.254.189.0/24 maxlen: 24
185.254.190.0/24 maxlen: 24
193.38.232.0/23 maxlen: 23
193.38.234.0/24 maxlen: 24
194.113.104.0/24 maxlen: 24
194.113.104.114/32 maxlen: 32
194.113.107.0/24 maxlen: 24
2a05:fb41::/32 maxlen: 32
2a05:fb42::/32 maxlen: 32
2a05:fb44::/32 maxlen: 32
2a05:fb45::/32 maxlen: 32
2a07:14c0::/48 maxlen: 48
2a07:14c0:1::/48 maxlen: 48
2a07:14c0:1000::/36 maxlen: 36
2a07:14c0:3000::/36 maxlen: 36
2a07:14c0:4000::/36 maxlen: 36
2a07:14c0:5000::/36 maxlen: 36
2a07:14c0:6000::/36 maxlen: 36
2a07:14c0:d000::/36 maxlen: 36
2a07:14c1::/32 maxlen: 32
2a07:14c2::/32 maxlen: 32
2a07:14c6::/32 maxlen: 32
2a07:14c7::/32 maxlen: 32
2a0a:4780::/32 maxlen: 32
2a0a:4781::/32 maxlen: 32
2a0a:4782::/32 maxlen: 32
2a0a:4783::/32 maxlen: 32
2a0a:4784::/32 maxlen: 32
2a0a:4785::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0c:5241::/32 maxlen: 32
2a0c:5245::/32 maxlen: 32
2a0c:5247:7000::/36 maxlen: 36
2a0c:5247:c000::/36 maxlen: 36
2a0c:5247:d000::/36 maxlen: 36
2a0c:5247:e000::/36 maxlen: 36
2a0c:5247:f000::/36 maxlen: 36
2a0d:60c0::/32 maxlen: 32
2a0d:60c1::/32 maxlen: 32
2a0d:60c3::/32 maxlen: 32
2a0d:7740::/32 maxlen: 32
2a0d:7747::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 10 Oct 2024 13:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:da:89:71:79:3b:ab:5e:3a:fe:15:b2:ad:c1:99:e7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jul 22 13:02:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b0b4494262a1b9a309569d9770208edc96b24d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:01:a9:56:a3:d0:99:9b:e2:a9:5a:54:48:
fd:8b:7a:dd:6d:ca:00:78:5c:58:2a:db:5d:04:62:
6f:9a:7b:2a:61:d8:84:07:85:63:23:9c:0b:53:e0:
9a:3c:9d:d6:98:63:25:58:c1:a4:db:61:0e:17:ad:
20:e6:63:04:5d:5a:ed:f2:79:77:f3:61:72:f2:27:
47:90:3c:ab:e1:a5:e0:4f:39:1d:81:0a:74:83:19:
d2:c5:3c:24:33:64:6c:d1:74:ef:8f:15:65:17:ca:
7b:98:10:a0:fd:7f:32:44:3d:e8:c9:47:c6:70:a9:
7e:d1:0b:24:4a:08:d6:d7:11:b5:c3:51:78:c7:23:
f4:7f:de:73:70:08:25:65:62:2f:85:4f:32:43:23:
77:06:0b:df:94:7d:7e:f7:5f:03:79:4f:ab:02:ac:
60:d7:fb:6e:ca:7b:01:fe:25:21:ce:8f:88:f0:40:
11:ab:37:9f:05:39:c1:3a:00:5a:51:07:29:6f:d1:
dc:0c:c0:13:35:6a:ae:08:84:b7:e7:b0:d5:9d:93:
75:20:7a:d1:b7:b6:5d:e2:04:63:a0:39:ed:cf:80:
37:85:82:f9:64:a3:e4:83:9e:a5:35:b0:5a:64:a9:
72:f8:f7:cb:23:dc:34:8c:9b:c3:58:02:a7:1f:aa:
9d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0B:44:94:26:2A:1B:9A:30:95:69:D9:77:02:08:ED:C9:6B:24:D5
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/GwtElCYqG5owlWnZdwII7clrJNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.208.0/23
45.142.211.0/24
45.151.136.0/22
80.76.40.0/24
83.171.240.0/24
84.54.37.0/24
84.54.39.0/24
95.215.108.0/22
185.118.64.0/22
185.156.176.0/22
185.177.113.0/24
185.177.115.0/24
185.197.72.0/23
185.220.32.0/22
185.230.140.0-185.230.142.255
185.246.116.0/23
185.246.119.0/24
185.254.188.0-185.254.190.255
193.38.232.0-193.38.234.255
194.113.104.0/24
194.113.107.0/24
IPv6:
2a05:fb41::-2a05:fb42:ffff:ffff:ffff:ffff:ffff:ffff
2a05:fb44::/31
2a07:14c0::/47
2a07:14c0:1000::/36
2a07:14c0:3000::-2a07:14c0:6fff:ffff:ffff:ffff:ffff:ffff
2a07:14c0:d000::/36
2a07:14c1::-2a07:14c2:ffff:ffff:ffff:ffff:ffff:ffff
2a07:14c6::/31
2a0a:4780::-2a0a:4785:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:2103::/32
2a0c:5241::/32
2a0c:5245::/32
2a0c:5247:7000::/36
2a0c:5247:c000::/34
2a0d:60c0::/31
2a0d:60c3::/32
2a0d:7740::/32
2a0d:7747::/32
Signature Algorithm: sha256WithRSAEncryption
ad:f5:6c:f3:75:9c:10:65:c7:89:c8:53:cf:32:aa:50:57:a0:
1a:62:95:0e:5f:26:42:b1:07:1e:62:57:c4:83:53:36:dd:1b:
2b:fa:17:de:2e:a2:de:b3:67:6e:63:58:56:54:63:42:0e:ff:
9d:24:ba:7f:be:68:de:9a:67:55:99:a1:39:ef:36:24:60:9a:
62:3d:3a:20:43:2e:8e:d2:2f:70:64:da:b8:c1:b5:5c:77:20:
5e:e4:26:b5:51:5a:15:75:56:88:17:5a:78:77:b0:9d:8f:a5:
8d:b7:4e:88:6e:f1:15:74:27:6c:35:f4:24:fb:1a:3d:8e:52:
db:50:62:32:03:4c:0a:a7:96:a2:92:cb:0c:e2:01:7b:e7:b7:
a8:4d:27:a1:8c:9d:21:9b:d6:bf:10:e4:d2:3f:30:e5:6e:ec:
2d:cf:9e:07:e6:45:67:74:e6:8b:27:cf:4a:c8:6c:e0:2a:53:
e0:30:c0:7b:dc:d7:11:fc:be:be:78:50:25:17:2c:3f:32:74:
7c:f8:d3:b9:36:7f:cc:80:97:01:31:7c:4c:68:5c:6f:68:bb:
a0:e3:78:f5:d3:6e:62:d7:44:f7:f6:89:bb:76:ac:84:e3:2a:
09:8b:5a:aa:47:4e:ce:36:b8:7b:57:b5:5a:a4:1b:56:e8:d7:
70:f0:29:ba
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgISAZDaiXF5O6teOv4Vsq3BmecQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjQwNzIyMTMwMjM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjBiNDQ5NDI2MmExYjlhMzA5NTY5ZDk3NzAyMDhlZGM5NmIyNGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomoBqVaj0Jmb4qlaVEj9i3rdbcoA
eFxYKttdBGJvmnsqYdiEB4VjI5wLU+CaPJ3WmGMlWMGk22EOF60g5mMEXVrt8nl3
82Fy8idHkDyr4aXgTzkdgQp0gxnSxTwkM2Rs0XTvjxVlF8p7mBCg/X8yRD3oyUfG
cKl+0QskSgjW1xG1w1F4xyP0f95zcAglZWIvhU8yQyN3BgvflH1+918DeU+rAqxg
1/tuynsB/iUhzo+I8EARqzefBTnBOgBaUQcpb9HcDMATNWquCIS357DVnZN1IHrR
t7Zd4gRjoDntz4A3hYL5ZKPkg56lNbBaZKly+PfLI9w0jJvDWAKnH6qdiQIDAQAB
o4IDVTCCA1EwHQYDVR0OBBYEFBsLRJQmKhuaMJVp2XcCCO3JayTVMB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEvR3d0RWxDWXFHNW93bFduWmR3SUk3Y2xySk5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBaQYIKwYBBQUHAQcBAf8EggFYMIIBVDCBnQQCAAEwgZYD
BAEtjtADBAAtjtMDBAItl4gDBABQTCgDBABTq/ADBABUNiUDBABUNicDBAJf12wD
BAK5dkADBAK5nLADBAC5sXEDBAC5sXMDBAG5xUgDBAK53CAwDAMEArnmjAMEALnm
jgMEAbn2dAMEALn2dzAMAwQCuf68AwQAuf6+MAwDBAPBJugDBADBJuoDBADCcWgD
BADCcWswgbEEAgACMIGqMA4DBQAqBftBAwUAKgX7QgMFASoF+0QDBwEqBxTAAAAD
BgQqBxTAEDAQAwYEKgcUwDADBgQqBxTAYAMGBCoHFMDQMA4DBQAqBxTBAwUAKgcU
wgMFASoHFMYwDgMFByoKR4ADBQEqCkeEAwUAKgwhAwMFACoMUkEDBQAqDFJFAwYE
KgxSR3ADBgYqDFJHwAMFASoNYMADBQAqDWDDAwUAKg13QAMFACoNd0cwDQYJKoZI
hvcNAQELBQADggEBAK31bPN1nBBlx4nIU88yqlBXoBpilQ5fJkKxBx5iV8SDUzbd
Gyv6F94uot6zZ25jWFZUY0IO/50kun++aN6aZ1WZoTnvNiRgmmI9OiBDLo7SL3Bk
2rjBtVx3IF7kJrVRWhV1VogXWnh3sJ2PpY23Tohu8RV0J2w19CT7Gj2OUttQYjID
TAqnlqKSywziAXvnt6hNJ6GMnSGb1r8Q5NI/MOVu7C3PngfmRWd05osnz0rIbOAq
U+AwwHvc1xH8vr54UCUXLD8ydHz407k2f8yAlwExfExoXG9ou6DjePXTbmLXRPf2
ibt2rITjKgmLWqpHTs42uHtXtVqkG1bo13DwKbo=
-----END CERTIFICATE-----
Generated at Thu Oct 10 18:39:27 2024 by rpki-client on console-ams.rpki-client.org