Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/GBlyJ195lfn7kHUvtroj34LVL4w.roa
File: GBlyJ195lfn7kHUvtroj34LVL4w.roa (raw, json)
Hash identifier: GDMYWHLZguD21FHeZnD8VUL65VmvCb3QwkAbWkznde0=
Subject key identifier: 18:19:72:27:5F:79:95:F9:FB:90:75:2F:B6:BA:23:DF:82:D5:2F:8C
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01907376BA0865DD09C9B1CD6609653B48E7
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/GBlyJ195lfn7kHUvtroj34LVL4w.roa
Signing time: Tue 02 Jul 2024 12:41:18 +0000
ROA not before: Tue 02 Jul 2024 12:41:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211619
IP address blocks: 5.182.115.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
77.242.152.0/24 maxlen: 24
77.242.153.0/24 maxlen: 24
77.242.154.0/24 maxlen: 24
77.242.155.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
88.209.205.0/24 maxlen: 24
88.209.206.0/24 maxlen: 24
88.209.219.0/24 maxlen: 24
88.209.228.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.236.0/24 maxlen: 24
88.209.237.0/24 maxlen: 24
88.209.238.0/24 maxlen: 24
88.209.239.0/24 maxlen: 24
88.209.254.0/24 maxlen: 24
92.52.217.0/24 maxlen: 24
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Jul 2024 11:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:73:76:ba:08:65:dd:09:c9:b1:cd:66:09:65:3b:48:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 2 12:41:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=181972275f7995f9fb90752fb6ba23df82d52f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:26:08:cb:3c:25:60:b3:3c:ce:2a:33:b6:c4:
45:bc:b6:dc:98:d5:05:1b:05:5d:c4:18:f4:8a:1b:
60:94:21:a4:d0:49:8b:7b:70:f5:52:87:ab:a9:e5:
33:d3:90:55:d9:70:99:1b:35:f4:f8:ea:7f:20:e3:
a2:d1:9f:0f:b2:e1:6b:c5:8f:af:d3:ff:85:23:8d:
c5:cf:a3:67:5c:46:d1:dd:bb:9b:43:6e:d8:e3:23:
90:33:0a:88:99:e0:6f:01:4d:18:62:ae:ec:d4:4a:
e0:bc:30:28:2b:34:56:58:bf:33:8b:f1:6b:bc:69:
d9:f8:db:17:92:9a:c8:89:2e:9e:5d:23:5f:4a:36:
87:be:f8:0b:5b:b8:6b:69:93:af:eb:9e:5e:c1:bf:
a9:3a:63:ef:41:68:54:50:20:4d:6f:23:35:02:e9:
4d:72:b7:89:cb:b8:96:7b:7c:6c:c8:c3:5f:75:70:
39:ee:b7:7e:c7:ab:53:d7:4f:24:f3:39:88:1d:d2:
9e:46:01:94:3c:d9:30:d1:15:2f:05:19:7e:90:02:
f4:29:ce:64:93:40:97:48:80:78:8e:90:ad:3f:c6:
b0:0e:ea:c4:08:c2:15:13:ae:91:4c:ed:31:21:9d:
77:01:8e:e4:0d:fb:2a:be:79:c1:9d:f7:92:b0:9e:
36:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:19:72:27:5F:79:95:F9:FB:90:75:2F:B6:BA:23:DF:82:D5:2F:8C
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/GBlyJ195lfn7kHUvtroj34LVL4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.115.0/24
45.9.168.0/24
77.242.152.0/22
83.137.157.0/24
88.209.205.0-88.209.206.255
88.209.219.0/24
88.209.228.0/24
88.209.236.0/22
88.209.254.0/24
92.52.217.0-92.52.218.255
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
58:81:c8:fe:8c:83:3d:af:38:95:60:1e:37:d7:cc:cb:a6:da:
4d:dd:d2:2b:d4:29:f4:13:8d:78:8d:65:a2:d1:0d:d3:63:3f:
f6:53:ef:09:28:8d:12:40:64:58:68:e8:fe:27:d4:c4:4b:27:
7c:dd:39:9f:ef:a9:b2:c8:bb:ea:29:81:5a:19:b3:99:0c:06:
63:60:f0:f2:4f:82:ab:50:5c:ef:be:73:e1:a8:fb:ba:18:64:
9d:fd:75:28:85:e8:47:61:c0:d9:9b:ed:e0:fe:01:82:c7:98:
f8:95:bd:e6:de:45:34:23:6d:02:61:48:73:cf:99:6c:d2:d4:
35:c8:b2:c9:ef:78:42:44:57:30:6a:e3:ef:77:8f:56:d8:d1:
3d:7d:af:0c:e8:19:0a:04:24:23:db:4a:ff:fc:90:05:f8:38:
a6:3a:82:92:55:01:42:b9:a2:e4:a4:5c:d1:d8:01:3d:98:a7:
96:66:a1:a4:08:46:35:ee:a2:2f:ed:a7:ac:5d:4e:25:2c:52:
0d:1b:21:2a:07:79:1b:bf:da:d9:e7:ef:83:24:fc:c9:93:c6:
fd:a4:cc:e3:d3:41:36:70:f2:9f:2b:ef:3b:2f:55:4e:00:ca:
a4:f9:8e:33:f4:c0:41:6f:c8:71:6e:bf:1b:4f:f4:04:ba:bd:
f3:fc:da:bc
-----BEGIN CERTIFICATE-----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Generated at Sat Jul 13 13:55:39 2024 by rpki-client on console-ams.rpki-client.org