Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GDq3LKWrRvqz10WfK0gM9UjagUI.roa
File: GDq3LKWrRvqz10WfK0gM9UjagUI.roa (raw, json)
Hash identifier: EUhoD4UIc13U4FwkvJeLiMZMgGXNxvOu5jG31dcMHZ4=
Subject key identifier: 18:3A:B7:2C:A5:AB:46:FA:B3:D7:45:9F:2B:48:0C:F5:48:DA:81:42
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019203E89D38B41CFD05FCED8FE8EEDAA97C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GDq3LKWrRvqz10WfK0gM9UjagUI.roa
Signing time: Wed 18 Sep 2024 06:53:49 +0000
ROA not before: Wed 18 Sep 2024 06:53:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205544
IP address blocks: 2a09:17c0:b19a::/48 maxlen: 48
2a09:17c7:fc3a::/48 maxlen: 48
2a0f:1200:d9::/48 maxlen: 48
2a0f:1207:fe5a::/48 maxlen: 48
2a0f:e1c0:3::/48 maxlen: 48
2a0f:e1c0:37a::/48 maxlen: 48
2a0f:e200:5::/48 maxlen: 48
2a0f:e200:25f::/48 maxlen: 48
2a0f:e207:fd38::/48 maxlen: 48
2a0f:e440::/29 maxlen: 29
2a0f:e6c0:11c::/48 maxlen: 48
2a0f:e6c0:3af::/48 maxlen: 48
2a0f:e6c6:99::/48 maxlen: 48
2a0f:e7c7:fcd8::/48 maxlen: 48
2a0f:ea40:8::/48 maxlen: 48
2a0f:ea47:fc1d::/48 maxlen: 48
2a0f:ea47:ff49::/48 maxlen: 48
2a12:ac46:88::/48 maxlen: 48
2a12:ecc0:3::/48 maxlen: 48
2a12:ecc0:4::/48 maxlen: 48
2a12:ecc0:66::/48 maxlen: 48
2a12:ecc0:188::/48 maxlen: 48
2a12:ecc0:316::/48 maxlen: 48
2a12:ecc0:34a::/48 maxlen: 48
2a13:18c6:44::/48 maxlen: 48
2a13:18c6:99::/48 maxlen: 48
2a13:8c82:2::/48 maxlen: 48
2a13:8c86:100::/48 maxlen: 48
2a13:8c86:140::/48 maxlen: 48
2a13:c700:1::/48 maxlen: 48
2a13:c900:22::/48 maxlen: 48
2a13:c900:66::/48 maxlen: 48
2a13:c900:110::/48 maxlen: 48
2a13:e102:2::/48 maxlen: 48
2a13:e107:77::/48 maxlen: 48
2a13:e107:29b::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 19 Sep 2024 12:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:03:e8:9d:38:b4:1c:fd:05:fc:ed:8f:e8:ee:da:a9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 18 06:53:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=183ab72ca5ab46fab3d7459f2b480cf548da8142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:bd:cb:7b:0b:fd:3c:a9:b0:3a:46:97:d7:
b6:eb:28:6f:0b:91:e8:2b:fe:4a:3d:22:5a:92:33:
91:f5:89:3b:4d:e4:11:8f:3d:6a:05:fd:a4:a4:d3:
79:bd:ab:bf:b2:b1:a4:ae:75:d3:50:d8:47:60:d8:
89:ce:a8:6e:37:55:9f:8b:d0:77:35:47:95:f6:49:
ed:c2:6d:90:f2:c8:87:d3:35:e4:7d:fe:61:b2:f3:
7b:1d:dc:05:95:1e:89:54:13:19:b0:23:81:a9:4b:
8d:a6:00:1e:5b:5c:d5:ad:a4:08:2b:27:19:34:f0:
b9:b5:fd:4a:cd:88:db:67:91:75:85:04:a1:4b:d0:
66:6e:25:92:b8:1e:6e:6c:74:dd:ec:4c:a0:68:0b:
ae:1d:9c:40:d2:19:8d:b9:19:f9:ad:60:80:3a:88:
ed:c5:02:d5:1f:fd:6f:d6:76:fa:7e:33:e3:7b:ea:
17:70:60:ec:ca:83:a8:e6:7c:06:e0:21:a5:75:fc:
89:8b:13:91:d1:d6:c0:ca:49:c3:46:1b:9f:9e:47:
0f:44:c7:3a:f1:2b:25:08:af:71:d0:65:c9:cf:0c:
5a:39:a6:d8:97:7c:5e:8d:f4:d5:8b:23:1c:93:f8:
27:95:5b:a5:7f:40:5f:dc:df:f5:c4:8b:fc:73:dd:
29:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3A:B7:2C:A5:AB:46:FA:B3:D7:45:9F:2B:48:0C:F5:48:DA:81:42
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GDq3LKWrRvqz10WfK0gM9UjagUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:17c0:b19a::/48
2a09:17c7:fc3a::/48
2a0f:1200:d9::/48
2a0f:1207:fe5a::/48
2a0f:e1c0:3::/48
2a0f:e1c0:37a::/48
2a0f:e200:5::/48
2a0f:e200:25f::/48
2a0f:e207:fd38::/48
2a0f:e440::/29
2a0f:e6c0:11c::/48
2a0f:e6c0:3af::/48
2a0f:e6c6:99::/48
2a0f:e7c7:fcd8::/48
2a0f:ea40:8::/48
2a0f:ea47:fc1d::/48
2a0f:ea47:ff49::/48
2a12:ac46:88::/48
2a12:ecc0:3::-2a12:ecc0:4:ffff:ffff:ffff:ffff:ffff
2a12:ecc0:66::/48
2a12:ecc0:188::/48
2a12:ecc0:316::/48
2a12:ecc0:34a::/48
2a13:18c6:44::/48
2a13:18c6:99::/48
2a13:8c82:2::/48
2a13:8c86:100::/48
2a13:8c86:140::/48
2a13:c700:1::/48
2a13:c900:22::/48
2a13:c900:66::/48
2a13:c900:110::/48
2a13:e102:2::/48
2a13:e107:77::/48
2a13:e107:29b::/48
Signature Algorithm: sha256WithRSAEncryption
44:bd:e7:62:a2:4a:5f:c1:f8:d9:02:42:16:dc:b7:ed:4d:8e:
73:e6:99:44:e8:43:16:16:30:0f:9d:d6:57:5b:e4:bc:f1:d0:
8f:60:02:16:76:ea:c6:5b:59:28:eb:56:e0:4c:5b:7d:e2:e4:
5b:08:f5:a1:d9:5c:dd:d6:f1:e9:29:79:0a:87:63:bd:38:ff:
99:94:60:41:68:a7:b9:90:9f:cd:bc:94:3a:04:39:79:55:b8:
34:db:44:32:24:78:6a:4d:7a:52:90:a1:bd:4f:91:5a:52:f7:
70:4c:07:b6:a6:50:4a:9c:3c:2e:26:79:c5:58:79:b3:a3:f1:
0e:48:d8:21:40:f4:d5:4e:9c:2a:05:b5:e4:a9:35:ad:ef:95:
91:ea:c2:22:01:7e:2b:c1:78:8c:08:ec:cb:3b:09:8a:b1:45:
45:28:7f:36:d2:8c:e9:94:ac:11:96:50:69:16:86:73:cf:a1:
14:3c:b4:92:23:67:10:24:d7:a3:5e:43:15:22:c9:ab:c6:ae:
00:24:67:07:15:17:58:90:ce:4b:fd:82:a3:ce:4b:80:98:57:
37:9a:4e:6c:a9:78:42:5a:bf:6c:9c:3d:71:b5:2f:03:c4:9a:
ea:8c:33:90:0d:8c:01:d5:22:30:b3:60:52:2d:08:7c:83:9f:
84:a0:28:d1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgISAZID6J04tBz9Bfztj+ju2ql8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwOTE4MDY1MzQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODNhYjcyY2E1YWI0NmZhYjNkNzQ1OWYyYjQ4MGNmNTQ4ZGE4MTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1K9y3sL/TypsDpGl9e26yhvC5Ho
K/5KPSJakjOR9Yk7TeQRjz1qBf2kpNN5vau/srGkrnXTUNhHYNiJzqhuN1Wfi9B3
NUeV9kntwm2Q8siH0zXkff5hsvN7HdwFlR6JVBMZsCOBqUuNpgAeW1zVraQIKycZ
NPC5tf1KzYjbZ5F1hQShS9BmbiWSuB5ubHTd7EygaAuuHZxA0hmNuRn5rWCAOojt
xQLVH/1v1nb6fjPje+oXcGDsyoOo5nwG4CGldfyJixOR0dbAyknDRhufnkcPRMc6
8SslCK9x0GXJzwxaOabYl3xejfTViyMck/gnlVulf0Bf3N/1xIv8c90pUwIDAQAB
o4IDUTCCA00wHQYDVR0OBBYEFBg6tyylq0b6s9dFnytIDPVI2oFCMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvR0RxM0xLV3JSdnF6MTBXZkswZ005VWphZ1VJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBZQYIKwYBBQUHAQcBAf8EggFUMIIBUDCCAUwEAgACMIIB
RAMHACoJF8CxmgMHACoJF8f8OgMHACoPEgAA2QMHACoPEgf+WgMHACoP4cAAAwMH
ACoP4cADegMHACoP4gAABQMHACoP4gACXwMHACoP4gf9OAMFAyoP5EADBwAqD+bA
ARwDBwAqD+bAA68DBwAqD+bGAJkDBwAqD+fH/NgDBwAqD+pAAAgDBwAqD+pH/B0D
BwAqD+pH/0kDBwAqEqxGAIgwEgMHACoS7MAAAwMHACoS7MAABAMHACoS7MAAZgMH
ACoS7MABiAMHACoS7MADFgMHACoS7MADSgMHACoTGMYARAMHACoTGMYAmQMHACoT
jIIAAgMHACoTjIYBAAMHACoTjIYBQAMHACoTxwAAAQMHACoTyQAAIgMHACoTyQAA
ZgMHACoTyQABEAMHACoT4QIAAgMHACoT4QcAdwMHACoT4QcCmzANBgkqhkiG9w0B
AQsFAAOCAQEARL3nYqJKX8H42QJCFty37U2Oc+aZROhDFhYwD53WV1vkvPHQj2AC
FnbqxltZKOtW4ExbfeLkWwj1odlc3dbx6Sl5CodjvTj/mZRgQWinuZCfzbyUOgQ5
eVW4NNtEMiR4ak16UpChvU+RWlL3cEwHtqZQSpw8LiZ5xVh5s6PxDkjYIUD01U6c
KgW15Kk1re+VkerCIgF+K8F4jAjsyzsJirFFRSh/NtKM6ZSsEZZQaRaGc8+hFDy0
kiNnECTXo15DFSLJq8auACRnBxUXWJDOS/2Co85LgJhXN5pObKl4Qlq/bJw9cbUv
A8Sa6owzkA2MAdUiMLNgUi0IfIOfhKAo0Q==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:25 2025 by rpki-client