Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/GlVy-VLJ_of5eMJBh5AeCIMPnW8.roa
File: GlVy-VLJ_of5eMJBh5AeCIMPnW8.roa (raw, json)
Hash identifier: 11dioF1LCEqeZxysEBf2UImXn87BG+V8UcQPxm6up6A=
Subject key identifier: 1A:55:72:F9:52:C9:FE:87:F9:78:C2:41:87:90:1E:08:83:0F:9D:6F
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 018CC9BB2A4CA3668437F9ACD6A26EC69300
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/GlVy-VLJ_of5eMJBh5AeCIMPnW8.roa
Signing time: Tue 02 Jan 2024 10:32:15 +0000
ROA not before: Tue 02 Jan 2024 10:32:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31586
IP address blocks: 185.69.232.0/22 maxlen: 24
185.84.72.0/22 maxlen: 24
185.105.204.0/22 maxlen: 24
141.255.180.0/22 maxlen: 24
185.105.216.0/22 maxlen: 24
2a05:a282::/32 maxlen: 48
2a05:2500::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 19 Mar 2024 19:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:2a:4c:a3:66:84:37:f9:ac:d6:a2:6e:c6:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jan 2 10:32:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a5572f952c9fe87f978c24187901e08830f9d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:45:29:00:96:f9:36:3a:19:55:64:ad:11:ac:
f8:87:46:9b:f5:a6:3c:c9:72:a0:34:95:8b:97:d5:
e8:93:52:33:86:cf:90:e1:80:61:44:9d:7e:cd:8a:
3c:39:95:3f:97:41:21:c9:c0:e4:c9:c8:47:ae:66:
69:0c:63:2b:63:15:00:4c:a5:ed:ff:99:46:9d:99:
20:7f:dc:7b:8b:a0:8c:eb:0e:f2:25:2c:33:f7:55:
bb:70:4e:ec:61:d4:9e:6a:2d:02:9a:60:57:ec:05:
b9:4f:7e:b4:eb:d0:64:83:ce:b1:4d:17:5b:fb:07:
32:da:dc:ac:04:04:78:cd:8e:7e:83:c4:8f:1b:73:
52:dc:f2:09:d8:51:2b:36:6c:ec:ca:f0:67:d7:58:
51:ad:ef:b8:4c:da:5c:b9:56:2e:2c:e4:9e:30:9d:
3e:82:7f:bd:3a:f3:b4:c9:b4:cf:1e:33:48:5b:a0:
e4:c4:01:ca:e6:4b:9f:76:35:23:dc:8f:2c:02:e6:
0e:00:6e:a6:fd:97:e7:fb:1b:6d:bd:25:09:0a:47:
ce:bd:fd:e2:bb:d2:40:34:6d:e8:04:d4:2d:4c:4d:
d1:a1:58:0a:6c:2e:69:33:11:3e:5b:39:36:03:d0:
95:5f:ad:39:6b:7c:3a:bc:24:bb:67:d4:e5:64:78:
b5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:55:72:F9:52:C9:FE:87:F9:78:C2:41:87:90:1E:08:83:0F:9D:6F
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/GlVy-VLJ_of5eMJBh5AeCIMPnW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.255.180.0/22
185.69.232.0/22
185.84.72.0/22
185.105.204.0/22
185.105.216.0/22
IPv6:
2a05:2500::/32
2a05:a282::/32
Signature Algorithm: sha256WithRSAEncryption
38:c0:49:e5:02:00:37:4f:ea:8c:1a:13:58:9b:96:e0:8e:66:
e6:e8:9e:c6:1a:b3:c8:05:85:ba:b4:05:d0:bb:4e:a6:38:e2:
62:3a:e4:a9:0f:54:02:cb:06:6e:70:bc:d3:50:1a:13:bd:68:
52:50:29:c5:46:78:e5:9b:d5:62:80:02:a9:52:7a:a8:30:5a:
ab:77:dd:d4:5a:74:f6:a2:31:56:6b:a4:db:08:98:30:e4:9c:
d0:c1:0d:cd:ab:a6:29:12:65:f1:0e:04:10:37:44:7b:4f:dd:
1a:07:c6:ab:76:5e:22:91:e9:d0:53:fc:b2:e8:39:53:a9:b7:
bd:f8:84:e3:0e:00:20:e9:70:34:84:72:99:ed:be:9c:d3:91:
9a:d3:06:ae:78:d5:ae:9b:9b:58:8e:22:97:6f:63:e9:86:7d:
eb:64:f3:5b:94:9a:60:5f:20:40:9d:0b:ec:c6:eb:31:d2:54:
26:37:8b:d8:a6:a5:68:b0:d0:e0:17:a3:db:ac:8e:bb:21:97:
a6:8e:9e:58:ba:bc:81:0e:55:44:7a:e9:5b:55:bd:6a:65:aa:
08:55:ba:08:9c:b6:5f:29:ac:fb:df:e4:c9:4f:05:91:78:95:
38:5f:d3:8d:43:07:eb:cc:eb:79:e0:4f:05:30:72:67:cf:d6:
54:e9:44:9f
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAYzJuypMo2aEN/ms1qJuxpMAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3
NTJhZTcwHhcNMjQwMTAyMTAzMjE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTU1NzJmOTUyYzlmZTg3Zjk3OGMyNDE4NzkwMWUwODgzMGY5ZDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEUpAJb5NjoZVWStEaz4h0ab9aY8
yXKgNJWLl9Xok1Izhs+Q4YBhRJ1+zYo8OZU/l0EhycDkychHrmZpDGMrYxUATKXt
/5lGnZkgf9x7i6CM6w7yJSwz91W7cE7sYdSeai0CmmBX7AW5T36069Bkg86xTRdb
+wcy2tysBAR4zY5+g8SPG3NS3PIJ2FErNmzsyvBn11hRre+4TNpcuVYuLOSeMJ0+
gn+9OvO0ybTPHjNIW6DkxAHK5kufdjUj3I8sAuYOAG6m/Zfn+xttvSUJCkfOvf3i
u9JANG3oBNQtTE3RoVgKbC5pMxE+Wzk2A9CVX605a3w6vCS7Z9TlZHi1HQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFBpVcvlSyf6H+XjCQYeQHgiDD51vMB8GA1UdIwQY
MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt
MmI5MjBiZGUzOTkwLzEvR2xWeS1WTEpfb2Y1ZU1KQmg1QWVDSU1Qblc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw
LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQCjf+0AwQC
uUXoAwQCuVRIAwQCuWnMAwQCuWnYMBQEAgACMA4DBQAqBSUAAwUAKgWigjANBgkq
hkiG9w0BAQsFAAOCAQEAOMBJ5QIAN0/qjBoTWJuW4I5m5uiexhqzyAWFurQF0LtO
pjjiYjrkqQ9UAssGbnC801AaE71oUlApxUZ45ZvVYoACqVJ6qDBaq3fd1Fp09qIx
Vmuk2wiYMOSc0MENzaumKRJl8Q4EEDdEe0/dGgfGq3ZeIpHp0FP8sug5U6m3vfiE
4w4AIOlwNIRyme2+nNORmtMGrnjVrpubWI4il29j6YZ962TzW5SaYF8gQJ0L7Mbr
MdJUJjeL2KalaLDQ4Bej26yOuyGXpo6eWLq8gQ5VRHrpW1W9amWqCFW6CJy2Xyms
+9/kyU8FkXiVOF/TjUMH68zreeBPBTByZ8/WVOlEnw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:04 2024 by rpki-client on console-ams.rpki-client.org