Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/GW1pC7zq536_BPPZ8RYoct2qYoY.roa
File: GW1pC7zq536_BPPZ8RYoct2qYoY.roa (raw, json)
Hash identifier: CYMZMUxnBIDvn4lszy3r/6hde800XHeXrRIt+9hLFYE=
Subject key identifier: 19:6D:69:0B:BC:EA:E7:7E:BF:04:F3:D9:F1:16:28:72:DD:AA:62:86
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019170AB08ABE623F716A29420B0383861FF
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/GW1pC7zq536_BPPZ8RYoct2qYoY.roa
Signing time: Tue 20 Aug 2024 16:42:22 +0000
ROA not before: Tue 20 Aug 2024 16:42:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 2.59.40.0/24 maxlen: 24
2.59.41.0/24 maxlen: 24
2.59.42.0/24 maxlen: 24
2.59.43.0/24 maxlen: 24
45.93.201.0/24 maxlen: 24
45.153.70.0/24 maxlen: 24
45.153.71.0/24 maxlen: 24
80.76.60.0/24 maxlen: 24
91.198.220.0/24 maxlen: 24
93.93.207.0/24 maxlen: 24
176.53.160.0/24 maxlen: 24
176.53.161.0/24 maxlen: 24
176.53.162.0/24 maxlen: 24
176.53.163.0/24 maxlen: 24
185.192.246.0/24 maxlen: 24
185.192.247.0/24 maxlen: 24
185.251.20.0/24 maxlen: 24
193.160.208.0/24 maxlen: 24
193.160.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Sep 2024 16:05:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:70:ab:08:ab:e6:23:f7:16:a2:94:20:b0:38:38:61:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Aug 20 16:42:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=196d690bbceae77ebf04f3d9f1162872ddaa6286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:23:fd:65:e3:81:ed:10:ff:12:92:52:ee:b3:
3f:82:3c:54:49:4c:dd:9b:c7:0b:e8:7b:4a:c7:be:
c7:7c:9a:5f:54:df:6a:a5:da:27:2f:ee:47:e0:1b:
59:d2:45:d0:e0:a6:a0:e7:14:b4:5e:78:96:bf:8a:
5e:c3:cd:8b:b4:b0:da:1f:5b:58:74:54:f9:f6:d0:
4a:0f:8c:37:d9:c8:05:3e:49:90:6c:d2:e2:19:38:
eb:b2:b6:29:d3:e8:a9:4a:2f:08:9d:02:f4:55:2f:
de:45:e1:c0:d4:69:85:6c:94:fd:52:9c:d6:31:74:
2f:b4:2c:35:58:ea:79:e4:0e:0a:30:08:a9:06:ed:
7e:8e:65:7d:f6:11:40:79:57:bc:d7:c7:a1:b4:d9:
06:f5:68:12:7f:a6:db:97:3a:6d:48:cf:d9:34:86:
13:30:15:d5:bc:d6:cb:66:97:89:9a:b0:3b:37:dd:
05:f2:6b:05:13:9f:bc:b3:ae:ff:9e:5f:80:4e:0b:
e1:7c:e4:89:72:b1:fa:1b:5b:5b:75:32:61:21:41:
3d:82:52:c9:f4:9b:a7:c5:d8:26:47:89:a8:f9:27:
52:b4:79:13:1c:ef:b7:3d:80:4c:4c:fc:b3:2d:1c:
14:24:d9:c4:28:fa:86:e7:3f:a7:99:bc:de:02:ca:
e3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6D:69:0B:BC:EA:E7:7E:BF:04:F3:D9:F1:16:28:72:DD:AA:62:86
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/GW1pC7zq536_BPPZ8RYoct2qYoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.40.0/22
45.93.201.0/24
45.153.70.0/23
80.76.60.0/24
91.198.220.0/24
93.93.207.0/24
176.53.160.0/22
185.192.246.0/23
185.251.20.0/24
193.160.208.0/23
Signature Algorithm: sha256WithRSAEncryption
62:d9:1a:f7:19:f3:14:40:ed:4e:a7:6b:78:31:35:b3:e2:f3:
4f:bf:be:5b:25:39:ae:49:8b:a9:a4:3b:71:70:76:02:7e:63:
26:09:df:f9:3b:1a:0b:55:cd:87:71:3a:ad:ba:20:1d:24:26:
76:d0:93:7d:d8:af:e2:a0:68:07:2d:dc:29:bc:82:7c:58:c7:
12:cb:c1:a3:ca:43:9d:ea:95:73:22:3c:80:74:78:2c:55:b1:
32:5c:bd:0e:00:1f:1b:6d:9c:b3:b8:f5:e9:77:22:57:22:5a:
08:40:08:ee:23:cf:85:86:db:c2:46:1a:cc:e1:a4:34:f1:67:
3f:2a:b6:13:57:21:21:84:45:24:8a:68:ea:c8:c5:fb:30:1e:
21:77:31:1f:db:55:4a:31:d2:09:81:c5:bf:88:3a:c8:35:37:
76:81:d3:20:66:bc:67:17:8c:ea:7b:ab:5b:80:68:aa:72:c3:
b7:ec:7f:70:cb:3b:db:83:1e:b3:9b:56:32:3c:8b:32:1f:ed:
d2:90:dd:4a:f8:51:b0:35:aa:60:43:e1:7c:87:66:d1:11:74:
a5:6a:62:2a:0f:fc:4c:9b:2d:ec:f8:7e:a6:7a:0f:c1:89:0d:
44:96:a6:5f:3c:f9:b1:85:fb:75:5e:1f:f8:5d:13:ed:6a:ab:
85:55:55:b5
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZFwqwir5iP3FqKUILA4OGH/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjQwODIwMTY0MjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTZkNjkwYmJjZWFlNzdlYmYwNGYzZDlmMTE2Mjg3MmRkYWE2Mjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CP9ZeOB7RD/EpJS7rM/gjxUSUzd
m8cL6HtKx77HfJpfVN9qpdonL+5H4BtZ0kXQ4Kag5xS0XniWv4pew82LtLDaH1tY
dFT59tBKD4w32cgFPkmQbNLiGTjrsrYp0+ipSi8InQL0VS/eReHA1GmFbJT9UpzW
MXQvtCw1WOp55A4KMAipBu1+jmV99hFAeVe818ehtNkG9WgSf6bblzptSM/ZNIYT
MBXVvNbLZpeJmrA7N90F8msFE5+8s67/nl+ATgvhfOSJcrH6G1tbdTJhIUE9glLJ
9JunxdgmR4mo+SdStHkTHO+3PYBMTPyzLRwUJNnEKPqG5z+nmbzeAsrj6QIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFBltaQu86ud+vwTz2fEWKHLdqmKGMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvR1cxcEM3enE1MzZfQlBQWjhSWW9jdDJxWW9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQCAjsoAwQA
LV3JAwQBLZlGAwQAUEw8AwQAW8bcAwQAXV3PAwQCsDWgAwQBucD2AwQAufsUAwQB
waDQMA0GCSqGSIb3DQEBCwUAA4IBAQBi2Rr3GfMUQO1Op2t4MTWz4vNPv75bJTmu
SYuppDtxcHYCfmMmCd/5OxoLVc2HcTqtuiAdJCZ20JN92K/ioGgHLdwpvIJ8WMcS
y8GjykOd6pVzIjyAdHgsVbEyXL0OAB8bbZyzuPXpdyJXIloIQAjuI8+FhtvCRhrM
4aQ08Wc/KrYTVyEhhEUkimjqyMX7MB4hdzEf21VKMdIJgcW/iDrINTd2gdMgZrxn
F4zqe6tbgGiqcsO37H9wyzvbgx6zm1YyPIsyH+3SkN1K+FGwNapgQ+F8h2bREXSl
amIqD/xMmy3s+H6meg/BiQ1ElqZfPPmxhft1Xh/4XRPtaquFVVW1
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:33 2025 by rpki-client