Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GpDQLTG-Zq6yxHqBwdNEg0Ii7yw.roa
File: GpDQLTG-Zq6yxHqBwdNEg0Ii7yw.roa (raw, json)
Hash identifier: 01SDhm3ZSnk/YMeqMpjGCpS1Y+A/wJr/MbI2MiwcQVY=
Subject key identifier: 1A:90:D0:2D:31:BE:66:AE:B2:C4:7A:81:C1:D3:44:83:42:22:EF:2C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0194E1FFE6A2713978B300E674D282871B0B
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GpDQLTG-Zq6yxHqBwdNEg0Ii7yw.roa
Signing time: Fri 07 Feb 2025 20:00:31 +0000
ROA not before: Fri 07 Feb 2025 20:00:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401152
IP address blocks: 64.188.64.0/19 maxlen: 24
64.188.100.0/22 maxlen: 24
64.188.104.0/21 maxlen: 24
64.188.112.0/21 maxlen: 24
64.188.120.0/22 maxlen: 24
64.188.124.0/24 maxlen: 24
64.188.125.0/24 maxlen: 24
64.188.126.0/24 maxlen: 24
64.188.127.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
193.23.192.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 18:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e1:ff:e6:a2:71:39:78:b3:00:e6:74:d2:82:87:1b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 7 20:00:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a90d02d31be66aeb2c47a81c1d344834222ef2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:c8:1b:6d:b5:06:c7:1a:fe:4c:c6:8b:c6:
6e:97:66:87:50:6a:26:d1:19:ad:59:ac:45:47:57:
ef:7e:32:43:76:d2:75:4d:12:ad:81:4b:59:d2:3e:
9c:a1:22:67:85:0a:f5:36:d7:86:c4:76:8b:67:f0:
05:cf:d0:3d:99:01:7d:d7:b2:97:d2:da:99:0b:cd:
be:7e:fd:ca:1d:0a:22:69:9d:44:de:d8:f1:cb:d7:
b1:5c:7f:99:ab:89:62:e1:e2:45:3e:35:0c:d2:78:
9d:5f:68:e3:0e:df:86:70:c6:1b:36:f1:19:c3:72:
b1:09:62:43:9f:e0:08:1c:9d:f2:c2:99:b7:04:db:
1a:33:34:45:44:11:28:88:f3:f0:34:1e:4c:ec:63:
a4:1c:22:17:2b:6e:46:94:ca:3d:49:3f:78:16:23:
4f:d5:ff:1b:a5:30:bf:7f:2e:51:f1:48:e0:b1:a8:
55:37:ce:23:1e:34:7e:c8:fe:05:cb:ca:94:6c:fc:
0a:c7:74:93:79:1e:4e:79:0a:7a:12:64:6e:d1:67:
10:2f:19:db:0f:15:53:8a:74:8d:ea:81:a9:c5:ef:
e0:74:09:54:ae:cc:52:0b:6c:66:bb:31:3f:34:03:
d5:ac:d6:8a:28:0b:f2:2f:d9:b2:9f:af:68:41:86:
0a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:90:D0:2D:31:BE:66:AE:B2:C4:7A:81:C1:D3:44:83:42:22:EF:2C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GpDQLTG-Zq6yxHqBwdNEg0Ii7yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.64.0/19
64.188.100.0-64.188.127.255
185.216.104.0/22
193.23.192.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:2f:4c:01:d0:5a:3e:8c:12:cc:29:55:65:8b:2c:c3:10:ad:
36:12:7f:90:87:bc:97:f3:28:d9:84:d3:a4:d8:e5:8f:de:d5:
43:a1:0f:b4:52:3d:99:9e:1c:fc:34:e5:34:16:4d:eb:74:cb:
33:d9:ba:24:4d:e6:5f:39:54:c8:34:b7:26:4f:3f:89:26:67:
d8:52:ba:f7:18:e0:6c:cf:a2:4d:af:09:4c:81:50:a8:b7:e6:
e4:dd:ed:f6:bd:17:ae:71:7c:93:5b:33:45:46:df:07:e2:fe:
a5:5f:5a:e5:01:7c:5b:8c:6a:8f:8a:17:ed:c0:cc:1e:dd:1d:
97:52:e0:02:2e:70:ee:e1:91:74:d9:72:aa:1b:40:7b:3f:35:
27:fc:20:c0:a1:9f:89:a2:ae:10:9f:c8:c0:5d:89:01:f8:c8:
bc:8e:d5:ac:d3:fd:b0:37:18:96:9d:b2:48:7d:52:15:28:98:
0b:d3:aa:84:2e:f2:c2:ea:ea:67:95:9a:a5:8c:b7:a7:65:98:
0f:44:85:bd:71:80:45:df:29:6d:bf:28:d7:73:6b:97:7f:40:
61:2c:e4:2e:e6:4b:0e:c9:bc:a0:8a:fb:e5:d2:da:67:4e:c3:
30:76:ef:f4:e8:bc:09:83:e4:7e:fc:1a:3b:db:f8:8f:5c:93:
7a:7e:0c:bf
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZTh/+aicTl4swDmdNKChxsLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjUwMjA3MjAwMDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTkwZDAyZDMxYmU2NmFlYjJjNDdhODFjMWQzNDQ4MzQyMjJlZjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYPIG221Bsca/kzGi8Zul2aHUGom
0RmtWaxFR1fvfjJDdtJ1TRKtgUtZ0j6coSJnhQr1NteGxHaLZ/AFz9A9mQF917KX
0tqZC82+fv3KHQoiaZ1E3tjxy9exXH+Zq4li4eJFPjUM0nidX2jjDt+GcMYbNvEZ
w3KxCWJDn+AIHJ3ywpm3BNsaMzRFRBEoiPPwNB5M7GOkHCIXK25GlMo9ST94FiNP
1f8bpTC/fy5R8UjgsahVN84jHjR+yP4Fy8qUbPwKx3STeR5OeQp6EmRu0WcQLxnb
DxVTinSN6oGpxe/gdAlUrsxSC2xmuzE/NAPVrNaKKAvyL9myn69oQYYKZQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFBqQ0C0xvmaussR6gcHTRINCIu8sMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvR3BEUUxURy1acTZ5eEhxQndkTkVnMElpN3l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQFQLxAMAwD
BAJAvGQDBAdAvAADBAK52GgDBAXBF8AwDQYJKoZIhvcNAQELBQADggEBAHsvTAHQ
Wj6MEswpVWWLLMMQrTYSf5CHvJfzKNmE06TY5Y/e1UOhD7RSPZmeHPw05TQWTet0
yzPZuiRN5l85VMg0tyZPP4kmZ9hSuvcY4GzPok2vCUyBUKi35uTd7fa9F65xfJNb
M0VG3wfi/qVfWuUBfFuMao+KF+3AzB7dHZdS4AIucO7hkXTZcqobQHs/NSf8IMCh
n4mirhCfyMBdiQH4yLyO1azT/bA3GJadskh9UhUomAvTqoQu8sLq6meVmqWMt6dl
mA9Ehb1xgEXfKW2/KNdza5d/QGEs5C7mSw7JvKCK++XS2mdOwzB27/TovAmD5H78
Gjvb+I9ck3p+DL8=
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:45:06 2025 by rpki-client