Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/GWrmiedaJZCCjrCPA4zY-aiT30E.roa
File: GWrmiedaJZCCjrCPA4zY-aiT30E.roa (raw, json)
Hash identifier: oQfPpcxnEsnYhCsQvz8mKbXEeWz0CBL53k2mokSgYtU=
Subject key identifier: 19:6A:E6:89:E7:5A:25:90:82:8E:B0:8F:03:8C:D8:F9:A8:93:DF:41
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0192F7752207692CD1016554473C445EAFF9
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/GWrmiedaJZCCjrCPA4zY-aiT30E.roa
Signing time: Mon 04 Nov 2024 13:55:01 +0000
ROA not before: Mon 04 Nov 2024 13:55:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440:8::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 12 Nov 2024 06:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f7:75:22:07:69:2c:d1:01:65:54:47:3c:44:5e:af:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Nov 4 13:55:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=196ae689e75a2590828eb08f038cd8f9a893df41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ee:20:b3:27:63:09:1f:ec:0f:a1:32:0c:e5:
e1:25:4f:e7:ad:b7:33:5b:db:03:78:fc:7a:bf:3d:
56:9d:de:ed:69:29:41:3e:49:f7:e7:77:02:2c:b9:
b0:6e:08:15:33:e6:c9:81:6a:b9:4c:88:19:84:80:
7a:30:c7:0c:76:f5:08:df:1c:08:80:b7:2e:7b:92:
9f:43:e5:aa:bf:44:d4:87:6f:df:b2:9c:06:c2:ff:
d1:42:56:25:16:2c:2a:61:5f:56:f2:0b:13:30:3a:
7f:fb:b0:18:13:d2:ab:3e:d2:ac:12:eb:74:b4:3f:
2a:e2:6b:e3:08:9c:4a:8b:13:72:a5:1d:b1:e2:ca:
fd:2d:24:2f:4c:e9:71:89:bf:27:a5:ca:05:aa:64:
1d:a1:92:9d:40:8d:e5:74:7d:c4:29:5e:61:ed:82:
a6:5a:19:3a:ac:55:4b:a2:9c:27:57:29:14:3c:bf:
d4:74:09:72:a5:eb:b3:92:d7:ce:0f:47:23:fc:9d:
cf:55:c5:ff:72:5b:f9:72:14:95:49:3b:de:e3:36:
5e:b2:63:99:e6:84:2a:ce:85:87:8c:a4:b0:22:56:
80:1a:42:d0:a0:50:d6:f6:ac:f4:c3:76:e3:1b:b5:
ac:86:54:2e:82:a4:3f:d1:3d:d5:78:13:bc:34:b0:
0b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6A:E6:89:E7:5A:25:90:82:8E:B0:8F:03:8C:D8:F9:A8:93:DF:41
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/GWrmiedaJZCCjrCPA4zY-aiT30E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.131.0.0/23
45.131.3.0/24
45.136.4.0/24
45.147.44.0/24
77.83.200.0-77.83.202.255
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb07::/32
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440:8::/48
2a13:a441::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
94:2a:da:1a:3f:32:43:d0:0c:89:4d:fb:78:55:cf:f8:0a:99:
68:15:d0:7d:01:34:f3:c7:6a:49:54:27:2d:1a:f2:19:3c:dd:
ad:80:97:8d:87:27:85:5f:b0:45:0d:a2:4f:b4:e3:ff:de:66:
bc:2c:82:27:6f:4c:d5:33:aa:21:ed:39:7d:92:bf:18:79:6e:
79:23:d0:f5:e7:e9:11:86:98:43:c3:97:ab:53:b3:a9:cb:23:
d0:7a:ad:96:07:3f:d7:85:6b:7b:5c:45:84:1c:7f:31:4d:f4:
94:c8:68:18:86:a7:ab:e8:56:5b:a8:08:45:8a:fa:35:17:58:
31:61:2e:53:ca:62:9b:92:bb:cc:8c:c2:70:ab:42:d9:3e:be:
9c:31:c2:90:47:1d:8b:ea:7a:74:f3:99:31:31:b6:6e:45:79:
ea:80:7b:36:a1:60:a5:07:cb:56:98:bb:10:a7:ac:50:c1:c0:
52:f0:fe:db:70:47:24:0d:ef:8c:25:18:64:21:ba:bf:e8:3c:
03:cd:83:03:e5:7e:98:34:a4:2f:bd:16:18:e3:40:40:3d:6a:
7c:63:f4:4e:24:21:d7:cf:76:da:89:fc:df:59:81:68:08:df:
37:e8:89:01:35:4d:3b:58:1e:2b:bf:a0:14:69:2e:69:69:d8:
59:d3:8a:ba
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAZL3dSIHaSzRAWVURzxEXq/5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjQxMTA0MTM1NTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTZhZTY4OWU3NWEyNTkwODI4ZWIwOGYwMzhjZDhmOWE4OTNkZjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe4gsydjCR/sD6EyDOXhJU/nrbcz
W9sDePx6vz1Wnd7taSlBPkn353cCLLmwbggVM+bJgWq5TIgZhIB6MMcMdvUI3xwI
gLcue5KfQ+Wqv0TUh2/fspwGwv/RQlYlFiwqYV9W8gsTMDp/+7AYE9KrPtKsEut0
tD8q4mvjCJxKixNypR2x4sr9LSQvTOlxib8npcoFqmQdoZKdQI3ldH3EKV5h7YKm
Whk6rFVLopwnVykUPL/UdAlypeuzktfOD0cj/J3PVcX/clv5chSVSTve4zZesmOZ
5oQqzoWHjKSwIlaAGkLQoFDW9qz0w3bjG7WshlQugqQ/0T3VeBO8NLALFwIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFBlq5onnWiWQgo6wjwOM2Pmok99BMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvR1dybWllZGFKWkNDanJDUEE0elktYWlUMzBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG2BggrBgEFBQcBBwEB/wSBpjCBozBYBAIAATBSMAwDBAAF
tGkDBAIFtGgDBAEtgwADBAAtgwMDBAAtiAQDBAAtkywwDAMEA01TyAMEAE1TygME
AMJ05AMEAcJ07AMEAMKSGgMEAMKSJAMEAMKSLzBHBAIAAjBBAwUDKgmHgAMFAyoP
twADBQMqD+kAAwUAKg/rBwMFAyoP7QADBQMqD/kAAwcAKhOkQAAIAwUAKhOkQQMF
ACoTpEcwDQYJKoZIhvcNAQELBQADggEBAJQq2ho/MkPQDIlN+3hVz/gKmWgV0H0B
NPPHaklUJy0a8hk83a2Al42HJ4VfsEUNok+04//eZrwsgidvTNUzqiHtOX2Svxh5
bnkj0PXn6RGGmEPDl6tTs6nLI9B6rZYHP9eFa3tcRYQcfzFN9JTIaBiGp6voVluo
CEWK+jUXWDFhLlPKYpuSu8yMwnCrQtk+vpwxwpBHHYvqenTzmTExtm5FeeqAezah
YKUHy1aYuxCnrFDBwFLw/ttwRyQN74wlGGQhur/oPAPNgwPlfpg0pC+9FhjjQEA9
anxj9E4kIdfPdtqJ/N9ZgWgI3zfoiQE1TTtYHiu/oBRpLmlp2FnTiro=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:47 2025 by rpki-client