Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Gae7frwKLnMbU9HAG-T8TqTJHqE.roa
File: Gae7frwKLnMbU9HAG-T8TqTJHqE.roa (raw, json)
Hash identifier: zbVWDYJp+2lG54HmR7sSDz9qiZtINM6QLl4s/BMwEhY=
Subject key identifier: 19:A7:BB:7E:BC:0A:2E:73:1B:53:D1:C0:1B:E4:FC:4E:A4:C9:1E:A1
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018E848EF617A472C69CC9A268AFA8F468EF
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Gae7frwKLnMbU9HAG-T8TqTJHqE.roa
Signing time: Thu 28 Mar 2024 10:15:45 +0000
ROA not before: Thu 28 Mar 2024 10:15:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.136.5.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:ed00::/29 maxlen: 29
2a0f:f900::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 19 Apr 2024 09:35:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:84:8e:f6:17:a4:72:c6:9c:c9:a2:68:af:a8:f4:68:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Mar 28 10:15:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19a7bb7ebc0a2e731b53d1c01be4fc4ea4c91ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:97:34:1c:bd:4b:4f:af:08:41:38:85:27:
f0:0d:ec:5a:5c:70:32:10:a4:3f:ca:6e:07:5c:ab:
32:23:e5:1d:ee:09:62:66:57:07:62:ba:59:8b:14:
4b:56:a1:f8:27:94:1e:4a:16:80:0c:b9:c3:19:cc:
63:ea:54:40:bb:6a:d0:86:3a:fb:1c:df:5b:50:13:
21:7c:49:00:db:83:95:f9:15:1f:2d:b5:95:43:bd:
e4:45:ef:dd:cf:ca:dc:0c:09:fe:87:bc:07:c8:d6:
20:22:fb:20:3b:f9:a4:e0:cb:7d:8d:24:2e:ba:bc:
2f:0b:a3:bd:f1:ac:66:f6:f3:f5:08:80:7a:cc:15:
44:2d:99:0d:33:69:10:74:86:a9:1e:5a:df:e4:0d:
89:a7:18:47:9e:25:52:8a:07:58:32:bc:7a:a2:8e:
51:5c:ba:fc:4c:8b:33:c4:68:ce:e8:c1:91:b8:5d:
b9:b2:fd:f4:dd:7d:65:27:93:96:62:79:b7:81:28:
3b:85:c8:2e:af:a2:9b:94:6c:db:6a:89:89:0d:a9:
b7:2b:e1:be:9b:6e:c8:3f:32:31:2d:0e:6e:36:8c:
00:74:85:fd:1b:7d:47:eb:d7:c2:cf:a6:35:d7:b9:
4c:08:5e:d2:18:d3:ae:af:c8:f1:68:c1:78:b5:25:
d1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A7:BB:7E:BC:0A:2E:73:1B:53:D1:C0:1B:E4:FC:4E:A4:C9:1E:A1
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Gae7frwKLnMbU9HAG-T8TqTJHqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.107.0/24
45.131.0.0/23
45.131.3.0/24
45.136.5.0/24
45.141.148.0/24
45.147.44.0/24
77.83.200.0/22
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
Signature Algorithm: sha256WithRSAEncryption
7b:f2:43:7d:ae:39:bd:4a:09:d2:54:0d:b8:d2:5e:78:4c:af:
a6:6f:5c:47:7e:a7:30:7a:20:65:57:a6:1f:75:11:4d:ef:1c:
a5:38:d6:c9:94:a3:ed:19:aa:49:51:ea:9a:e0:20:85:80:6c:
2b:09:9c:ac:e0:06:30:05:b4:0f:78:aa:83:5e:a9:e3:a2:dc:
29:27:62:d7:46:b3:0e:65:23:ed:97:c9:b0:72:e5:2a:bd:e0:
9a:da:16:d2:bd:dc:ed:df:39:57:5c:04:9e:40:0d:0b:78:31:
30:8c:5c:43:81:f4:2a:a8:77:c1:67:7d:cb:73:49:5a:c3:1b:
fb:65:f1:cc:e2:3b:18:58:9b:c1:fb:0d:a7:21:28:5c:7e:a0:
03:f9:93:79:6c:b2:9a:da:59:f3:40:47:bb:e9:09:77:76:07:
63:72:75:be:c9:95:c4:80:0b:b3:7a:0c:cc:b0:74:37:1a:9c:
ed:b3:35:d4:1b:2f:6d:d8:09:60:ee:cb:17:ec:2a:65:c1:d3:
4f:88:29:41:ef:b5:dc:6e:84:68:a2:00:9a:ee:1b:a2:af:45:
f5:b7:e5:58:95:9d:3d:ac:62:7b:64:2a:92:62:bb:ba:b8:23:
ae:d6:94:8e:04:fe:5f:9a:10:d5:e9:97:2c:64:b9:53:a3:d8:
b1:01:28:b6
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgISAY6EjvYXpHLGnMmiaK+o9GjvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjQwMzI4MTAxNTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWE3YmI3ZWJjMGEyZTczMWI1M2QxYzAxYmU0ZmM0ZWE0YzkxZWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT2XNBy9S0+vCEE4hSfwDexaXHAy
EKQ/ym4HXKsyI+Ud7gliZlcHYrpZixRLVqH4J5QeShaADLnDGcxj6lRAu2rQhjr7
HN9bUBMhfEkA24OV+RUfLbWVQ73kRe/dz8rcDAn+h7wHyNYgIvsgO/mk4Mt9jSQu
urwvC6O98axm9vP1CIB6zBVELZkNM2kQdIapHlrf5A2JpxhHniVSigdYMrx6oo5R
XLr8TIszxGjO6MGRuF25sv303X1lJ5OWYnm3gSg7hcgur6KblGzbaomJDam3K+G+
m27IPzIxLQ5uNowAdIX9G31H69fCz6Y117lMCF7SGNOur8jxaMF4tSXR8QIDAQAB
o4ICdzCCAnMwHQYDVR0OBBYEFBmnu368Ci5zG1PRwBvk/E6kyR6hMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvR2FlN2Zyd0tMbk1iVTlIQUctVDhUcVRKSHFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGMBggrBgEFBQcBBwEB/wR9MHswTgQCAAEwSAMEAAW0awME
AS2DAAMEAC2DAwMEAC2IBQMEAC2NlAMEAC2TLAMEAk1TyAMEAMJ05AMEAcJ07AME
AMKSGgMEAMKSJAMEAMKSLzApBAIAAjAjAwUDKgmHgAMFAyoP6QADBQMqD+sAAwUD
Kg/tAAMFAyoP+QAwDQYJKoZIhvcNAQELBQADggEBAHvyQ32uOb1KCdJUDbjSXnhM
r6ZvXEd+pzB6IGVXph91EU3vHKU41smUo+0ZqklR6prgIIWAbCsJnKzgBjAFtA94
qoNeqeOi3CknYtdGsw5lI+2XybBy5Sq94JraFtK93O3fOVdcBJ5ADQt4MTCMXEOB
9Cqod8FnfctzSVrDG/tl8cziOxhYm8H7DachKFx+oAP5k3lsspraWfNAR7vpCXd2
B2Nydb7JlcSAC7N6DMywdDcanO2zNdQbL23YCWDuyxfsKmXB00+IKUHvtdxuhGii
AJruG6KvRfW35ViVnT2sYntkKpJiu7q4I67WlI4E/l+aENXplyxkuVOj2LEBKLY=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:16 2025 by rpki-client