Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/gb-xvtty8TJSSNtVubyaYtX-t7k.roa
File: gb-xvtty8TJSSNtVubyaYtX-t7k.roa (raw, json)
Hash identifier: kFVWhU95Hm3bjWyhkzsxYyl93UJCvb4QicTvUWPND90=
Subject key identifier: 81:BF:B1:BE:DB:72:F1:32:52:48:DB:55:B9:BC:9A:62:D5:FE:B7:B9
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018E50A096A05D53E22E5B082FBBAE6378C5
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/gb-xvtty8TJSSNtVubyaYtX-t7k.roa
Signing time: Mon 18 Mar 2024 08:14:45 +0000
ROA not before: Mon 18 Mar 2024 08:14:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2119
IP address blocks: 192.36.37.0/24 maxlen: 24
192.71.5.0/24 maxlen: 24
192.71.40.0/24 maxlen: 24
192.71.97.0/24 maxlen: 24
192.71.158.0/24 maxlen: 24
192.121.101.0/24 maxlen: 24
192.121.172.0/24 maxlen: 24
192.121.192.0/24 maxlen: 24
192.165.65.0/24 maxlen: 24
192.165.86.0/24 maxlen: 24
192.176.161.0/24 maxlen: 24
193.180.61.0/24 maxlen: 24
193.181.0.0/24 maxlen: 24
193.181.187.0/24 maxlen: 24
193.183.3.0/24 maxlen: 24
193.183.68.0/23 maxlen: 23
193.183.79.0/24 maxlen: 24
193.183.92.0/24 maxlen: 24
193.183.93.0/24 maxlen: 24
193.183.104.0/24 maxlen: 24
193.183.118.0/24 maxlen: 24
193.234.68.0/23 maxlen: 23
193.234.220.0/23 maxlen: 23
193.234.237.0/24 maxlen: 24
194.14.129.0/24 maxlen: 24
194.14.212.0/24 maxlen: 24
194.68.56.0/23 maxlen: 23
194.68.99.0/24 maxlen: 24
194.68.126.0/24 maxlen: 24
194.71.27.0/24 maxlen: 24
194.71.83.0/24 maxlen: 24
194.71.140.0/23 maxlen: 23
194.71.248.0/21 maxlen: 21
194.103.50.0/24 maxlen: 24
194.132.108.0/23 maxlen: 23
194.132.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Apr 2024 09:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:50:a0:96:a0:5d:53:e2:2e:5b:08:2f:bb:ae:63:78:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Mar 18 08:14:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81bfb1bedb72f1325248db55b9bc9a62d5feb7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8f:1c:2b:ca:9f:4a:5e:0e:0e:4d:94:c1:65:
0a:5f:4f:97:9f:00:46:d7:a9:fc:10:2f:74:30:e9:
b6:da:f8:23:ae:e1:a9:11:96:24:6d:89:86:cd:2c:
05:17:b7:98:3a:88:bb:3e:40:85:04:05:4b:81:cd:
74:22:e1:a6:74:3f:3e:78:5f:e7:d1:d9:b0:79:59:
9c:a3:7d:37:50:63:cd:dd:d7:6a:a7:52:71:99:6e:
1e:7c:ef:a5:02:42:77:45:36:f3:a4:c2:44:10:31:
84:88:a5:ed:3b:6f:be:6c:f1:00:22:cb:f4:40:c4:
8c:2a:a5:a6:c7:11:44:53:6d:2b:f7:47:2c:be:0a:
98:6c:29:e5:bb:9f:6f:14:4b:c2:9e:b9:02:20:6a:
61:e9:4a:f8:cc:b1:90:ce:6e:d1:2d:78:d2:02:fb:
33:43:96:c1:7f:21:a9:f6:22:6f:e5:f4:3e:e8:e1:
5c:c8:17:62:3f:e1:b2:a9:62:61:44:58:19:05:2c:
66:99:58:db:1c:5a:4a:cd:be:de:ac:5d:4f:c9:0e:
c5:e3:4b:da:19:64:24:e2:1a:ac:81:09:8c:90:cd:
06:95:e3:bf:ad:47:05:ca:ea:71:55:77:9b:4a:4c:
4f:8f:1a:c4:dd:1b:dd:fa:bc:bf:46:b9:13:9c:94:
cd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BF:B1:BE:DB:72:F1:32:52:48:DB:55:B9:BC:9A:62:D5:FE:B7:B9
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/gb-xvtty8TJSSNtVubyaYtX-t7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.37.0/24
192.71.5.0/24
192.71.40.0/24
192.71.97.0/24
192.71.158.0/24
192.121.101.0/24
192.121.172.0/24
192.121.192.0/24
192.165.65.0/24
192.165.86.0/24
192.176.161.0/24
193.180.61.0/24
193.181.0.0/24
193.181.187.0/24
193.183.3.0/24
193.183.68.0/23
193.183.79.0/24
193.183.92.0/23
193.183.104.0/24
193.183.118.0/24
193.234.68.0/23
193.234.220.0/23
193.234.237.0/24
194.14.129.0/24
194.14.212.0/24
194.68.56.0/23
194.68.99.0/24
194.68.126.0/24
194.71.27.0/24
194.71.83.0/24
194.71.140.0/23
194.71.248.0/21
194.103.50.0/24
194.132.108.0/23
194.132.174.0/24
Signature Algorithm: sha256WithRSAEncryption
71:11:e4:24:86:99:64:4e:e7:7a:b6:1e:6c:3f:f0:63:77:38:
d2:25:b1:7b:41:50:70:41:6a:7a:06:c6:78:ba:d7:42:f8:ce:
48:69:90:86:11:de:db:76:27:b4:2e:ce:35:98:92:c3:49:69:
69:fd:f9:53:dd:6f:35:0f:7a:3f:c2:2a:38:fc:be:36:d7:05:
7a:f0:c9:a8:13:1a:17:01:81:65:05:14:11:c4:36:bc:23:e2:
f1:1a:02:cb:2a:e1:8e:cd:9c:d8:c2:3d:20:1a:80:c4:35:65:
96:66:68:06:ae:c3:ff:3e:81:e5:32:69:e9:e8:8a:96:85:50:
6d:f3:f9:cd:5d:23:25:c1:74:9a:46:35:52:9d:f8:d3:c7:10:
ac:99:c4:e5:12:f4:1e:03:56:1d:b1:58:4c:8f:9f:cb:56:0f:
3b:bd:c7:00:46:73:19:f5:b9:2e:3f:b3:76:9d:96:56:b6:d9:
75:09:49:85:68:15:9e:a1:e0:42:25:ec:09:ed:43:62:71:58:
07:30:d1:5b:80:b1:13:dd:18:61:d1:25:f7:46:39:a6:94:5a:
40:0c:2e:ba:e1:ce:5d:38:2b:bd:57:3a:bd:e1:41:44:6d:61:
bc:7d:92:e5:31:0e:bc:0a:60:1b:45:be:dc:cd:04:8b:e0:70:
21:ba:9d:a9
-----BEGIN CERTIFICATE-----
MIIFzjCCBLagAwIBAgISAY5QoJagXVPiLlsIL7uuY3jFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjQwMzE4MDgxNDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWJmYjFiZWRiNzJmMTMyNTI0OGRiNTViOWJjOWE2MmQ1ZmViN2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY8cK8qfSl4ODk2UwWUKX0+XnwBG
16n8EC90MOm22vgjruGpEZYkbYmGzSwFF7eYOoi7PkCFBAVLgc10IuGmdD8+eF/n
0dmweVmco303UGPN3ddqp1JxmW4efO+lAkJ3RTbzpMJEEDGEiKXtO2++bPEAIsv0
QMSMKqWmxxFEU20r90csvgqYbCnlu59vFEvCnrkCIGph6Ur4zLGQzm7RLXjSAvsz
Q5bBfyGp9iJv5fQ+6OFcyBdiP+GyqWJhRFgZBSxmmVjbHFpKzb7erF1PyQ7F40va
GWQk4hqsgQmMkM0GleO/rUcFyupxVXebSkxPjxrE3Rvd+ry/RrkTnJTNWwIDAQAB
o4IC2jCCAtYwHQYDVR0OBBYEFIG/sb7bcvEyUkjbVbm8mmLV/re5MB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvZ2IteHZ0dHk4VEpTU050VnVieWFZdFgtdDdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHvBggrBgEFBQcBBwEB/wSB3zCB3DCB2QQCAAEwgdIDBADA
JCUDBADARwUDBADARygDBADAR2EDBADAR54DBADAeWUDBADAeawDBADAecADBADA
pUEDBADApVYDBADAsKEDBADBtD0DBADBtQADBADBtbsDBADBtwMDBAHBt0QDBADB
t08DBAHBt1wDBADBt2gDBADBt3YDBAHB6kQDBAHB6twDBADB6u0DBADCDoEDBADC
DtQDBAHCRDgDBADCRGMDBADCRH4DBADCRxsDBADCR1MDBAHCR4wDBAPCR/gDBADC
ZzIDBAHChGwDBADChK4wDQYJKoZIhvcNAQELBQADggEBAHER5CSGmWRO53q2Hmw/
8GN3ONIlsXtBUHBBanoGxni610L4zkhpkIYR3tt2J7QuzjWYksNJaWn9+VPdbzUP
ej/CKjj8vjbXBXrwyagTGhcBgWUFFBHENrwj4vEaAssq4Y7NnNjCPSAagMQ1ZZZm
aAauw/8+geUyaenoipaFUG3z+c1dIyXBdJpGNVKd+NPHEKyZxOUS9B4DVh2xWEyP
n8tWDzu9xwBGcxn1uS4/s3adlla22XUJSYVoFZ6h4EIl7AntQ2JxWAcw0VuAsRPd
GGHRJfdGOaaUWkAMLrrhzl04K71XOr3hQURtYbx9kuUxDrwKYBtFvtzNBIvgcCG6
nak=
-----END CERTIFICATE-----
Generated at Thu Apr 25 11:54:29 2024 by rpki-client on console-fra.rpki-client.org