Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/gLI4VuWFoxPxslY63ngtStQuGWg.roa
File: gLI4VuWFoxPxslY63ngtStQuGWg.roa (raw, json)
Hash identifier: /w8sGmohfqLUi/DccO8QFb+d68L/VmLgazpDKVZSFMY=
Subject key identifier: 80:B2:38:56:E5:85:A3:13:F1:B2:56:3A:DE:78:2D:4A:D4:2E:19:68
Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Certificate serial: 018CC5DBF41AC2BE7797350C1F53C68AFEE8
Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/gLI4VuWFoxPxslY63ngtStQuGWg.roa
Signing time: Mon 01 Jan 2024 16:29:35 +0000
ROA not before: Mon 01 Jan 2024 16:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24904
IP address blocks: 185.172.232.0/22 maxlen: 22
185.172.233.0/24 maxlen: 24
185.172.234.0/24 maxlen: 24
178.250.208.128/28 maxlen: 28
185.109.200.0/22 maxlen: 24
185.4.76.0/22 maxlen: 24
81.28.192.0/20 maxlen: 24
185.144.44.0/22 maxlen: 24
185.207.80.0/22 maxlen: 24
185.73.232.0/22 maxlen: 24
185.164.232.0/22 maxlen: 24
178.250.208.64/27 maxlen: 27
178.250.208.0/21 maxlen: 24
185.66.100.0/22 maxlen: 24
185.45.32.0/22 maxlen: 24
2a03:4980::/32 maxlen: 32
2a03:4980:100::/40 maxlen: 40
2a03:4980::/40 maxlen: 40
2a03:4980:200::/40 maxlen: 40
Validation: Failed, certificate revoked on Sat 16 Nov 2024 07:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:f4:1a:c2:be:77:97:35:0c:1f:53:c6:8a:fe:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Validity
Not Before: Jan 1 16:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80b23856e585a313f1b2563ade782d4ad42e1968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:68:9b:7d:7e:17:ba:4f:ef:11:a1:35:f7:
a8:3e:2d:40:14:de:81:1f:ed:8a:6a:3f:fe:01:15:
9a:29:a9:f1:82:41:9a:de:40:bb:3e:15:fb:4b:4e:
f5:50:dc:85:d9:c1:23:f8:a0:e2:01:6e:ed:ff:ac:
ae:28:14:29:c5:be:02:dd:11:3c:a4:b9:43:b3:f3:
02:e8:5a:6e:a6:23:c3:36:ce:df:ab:a9:a9:d2:87:
c2:fe:02:49:aa:9f:d2:71:87:e8:31:14:b4:20:f3:
dd:d9:80:61:da:3e:50:ed:e1:7b:3b:7e:d3:e8:3e:
b8:8f:a8:63:65:40:d0:df:70:eb:fc:d3:c0:cf:70:
50:c0:ef:11:cd:78:36:00:ff:64:d0:2b:ee:02:7e:
93:5c:3e:99:61:21:f3:47:b0:4c:1a:8a:5e:aa:3a:
96:d8:53:93:f4:c0:a9:f1:92:21:e6:f7:28:bd:20:
bf:8c:02:9f:aa:d6:66:5e:0c:fd:71:7a:57:18:24:
48:80:c1:3f:e7:90:b0:d8:e9:e8:77:cd:46:0f:96:
2c:8c:43:44:90:48:37:8b:94:23:24:c5:8a:f6:19:
a3:0d:65:8c:28:3f:e5:3c:b2:0b:69:49:06:4b:48:
24:4d:fc:07:2b:4e:36:8d:cf:93:52:3e:67:21:73:
a7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B2:38:56:E5:85:A3:13:F1:B2:56:3A:DE:78:2D:4A:D4:2E:19:68
X509v3 Authority Key Identifier:
keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/gLI4VuWFoxPxslY63ngtStQuGWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.28.192.0/20
178.250.208.0/21
185.4.76.0/22
185.45.32.0/22
185.66.100.0/22
185.73.232.0/22
185.109.200.0/22
185.144.44.0/22
185.164.232.0/22
185.172.232.0/22
185.207.80.0/22
IPv6:
2a03:4980::/32
Signature Algorithm: sha256WithRSAEncryption
51:9b:ef:a7:29:58:46:a2:4d:d1:06:c9:b5:63:06:bb:a5:72:
1e:de:00:f6:b7:fc:5a:21:0f:e7:99:37:f9:0c:dd:61:27:bc:
7b:0c:13:7f:91:ff:6b:30:31:05:1a:1c:a9:99:76:73:a9:cf:
3e:0e:e1:69:a2:84:e6:70:56:ce:bd:7b:ba:ec:90:51:92:76:
be:a4:d7:57:27:6e:70:dd:04:94:08:3b:c8:c6:dd:c3:b9:4f:
32:5d:24:71:35:eb:7b:88:d5:e6:c8:b7:6d:e1:0e:79:2e:2c:
76:5a:a4:bf:5c:91:94:1e:be:62:ca:6a:a0:b5:ee:ca:a7:a9:
16:30:04:fa:c0:ae:c4:c6:9d:ba:87:bc:0e:21:e5:a1:61:f2:
60:c2:ec:b7:45:e0:d2:97:ad:82:ce:9f:98:09:8e:ee:d7:99:
cd:ca:e6:d2:f3:3d:a6:2d:6f:e9:68:bf:07:26:44:b1:0e:27:
30:94:0c:a3:77:c0:89:63:c9:c2:c1:2e:e4:73:7d:d3:6b:f4:
48:af:5f:e9:82:c4:51:4e:c5:5b:4e:c2:ef:f3:d7:e0:12:3e:
32:89:ae:0b:1b:72:29:c3:bf:a9:f9:dc:78:31:7a:17:46:e9:
5d:26:c4:ca:89:dd:b6:5a:0c:5a:02:b5:0a:19:12:2a:73:21:
03:5e:3c:d6
-----BEGIN CERTIFICATE-----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Generated at Sat Nov 16 09:30:36 2024 by rpki-client on console-fra.rpki-client.org