Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/GOS1P0tzmRZadN9jm95fbXDm_hY.roa
File: GOS1P0tzmRZadN9jm95fbXDm_hY.roa (raw, json)
Hash identifier: JVewOFqItpm35hj4y5UXVH9g1PKEDOJP3WKE1T6qbk4=
Subject key identifier: 18:E4:B5:3F:4B:73:99:16:5A:74:DF:63:9B:DE:5F:6D:70:E6:FE:16
Certificate issuer: /CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Certificate serial: 0187997FCA621E22F99C95245FDB7C9E5169
Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/GOS1P0tzmRZadN9jm95fbXDm_hY.roa
Signing time: Wed 19 Apr 2023 12:31:41 +0000
ROA not before: Wed 19 Apr 2023 12:31:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 94.79.96.0/24 maxlen: 24
94.79.97.0/24 maxlen: 24
94.79.98.0/24 maxlen: 24
94.79.93.0/24 maxlen: 24
94.79.94.0/24 maxlen: 24
94.79.95.0/24 maxlen: 24
94.79.92.0/24 maxlen: 24
94.79.103.0/24 maxlen: 24
94.79.104.0/24 maxlen: 24
94.79.105.0/24 maxlen: 24
94.79.100.0/24 maxlen: 24
94.79.101.0/24 maxlen: 24
94.79.102.0/24 maxlen: 24
94.79.99.0/24 maxlen: 24
94.79.110.0/24 maxlen: 24
94.79.111.0/24 maxlen: 24
94.79.112.0/24 maxlen: 24
94.79.107.0/24 maxlen: 24
94.79.108.0/24 maxlen: 24
94.79.109.0/24 maxlen: 24
94.79.106.0/24 maxlen: 24
94.79.117.0/24 maxlen: 24
94.79.118.0/24 maxlen: 24
94.79.114.0/24 maxlen: 24
94.79.115.0/24 maxlen: 24
94.79.116.0/24 maxlen: 24
94.79.113.0/24 maxlen: 24
94.79.124.0/24 maxlen: 24
94.79.125.0/24 maxlen: 24
94.79.121.0/24 maxlen: 24
94.79.122.0/24 maxlen: 24
94.79.123.0/24 maxlen: 24
94.79.119.0/24 maxlen: 24
94.79.120.0/24 maxlen: 24
94.79.126.0/24 maxlen: 24
94.79.127.0/24 maxlen: 24
94.79.64.0/24 maxlen: 24
94.79.68.0/24 maxlen: 24
94.79.69.0/24 maxlen: 24
94.79.70.0/24 maxlen: 24
94.79.71.0/24 maxlen: 24
94.79.65.0/24 maxlen: 24
94.79.66.0/24 maxlen: 24
94.79.67.0/24 maxlen: 24
94.79.75.0/24 maxlen: 24
94.79.76.0/24 maxlen: 24
94.79.77.0/24 maxlen: 24
94.79.78.0/24 maxlen: 24
94.79.72.0/24 maxlen: 24
94.79.73.0/24 maxlen: 24
94.79.74.0/24 maxlen: 24
94.79.82.0/24 maxlen: 24
94.79.83.0/24 maxlen: 24
94.79.84.0/24 maxlen: 24
94.79.85.0/24 maxlen: 24
94.79.79.0/24 maxlen: 24
94.79.80.0/24 maxlen: 24
94.79.81.0/24 maxlen: 24
94.79.89.0/24 maxlen: 24
94.79.90.0/24 maxlen: 24
94.79.91.0/24 maxlen: 24
94.79.86.0/24 maxlen: 24
94.79.87.0/24 maxlen: 24
94.79.88.0/24 maxlen: 24
5.104.4.0/24 maxlen: 24
5.104.0.0/24 maxlen: 24
5.104.1.0/24 maxlen: 24
5.104.2.0/24 maxlen: 24
5.104.3.0/24 maxlen: 24
5.104.11.0/24 maxlen: 24
5.104.7.0/24 maxlen: 24
5.104.8.0/24 maxlen: 24
5.104.9.0/24 maxlen: 24
5.104.10.0/24 maxlen: 24
5.104.5.0/24 maxlen: 24
5.104.6.0/24 maxlen: 24
5.104.14.0/24 maxlen: 24
5.104.15.0/24 maxlen: 24
5.104.12.0/24 maxlen: 24
5.104.13.0/24 maxlen: 24
37.34.3.0/24 maxlen: 24
37.34.4.0/24 maxlen: 24
37.34.0.0/24 maxlen: 24
37.34.1.0/24 maxlen: 24
37.34.2.0/24 maxlen: 24
37.34.10.0/24 maxlen: 24
37.34.11.0/24 maxlen: 24
37.34.6.0/24 maxlen: 24
37.34.7.0/24 maxlen: 24
37.34.8.0/24 maxlen: 24
37.34.9.0/24 maxlen: 24
37.34.5.0/24 maxlen: 24
37.34.17.0/24 maxlen: 24
37.34.13.0/24 maxlen: 24
37.34.14.0/24 maxlen: 24
37.34.15.0/24 maxlen: 24
37.34.16.0/24 maxlen: 24
37.34.12.0/24 maxlen: 24
37.34.24.0/24 maxlen: 24
37.34.20.0/24 maxlen: 24
37.34.21.0/24 maxlen: 24
37.34.22.0/24 maxlen: 24
37.34.23.0/24 maxlen: 24
37.34.18.0/24 maxlen: 24
37.34.19.0/24 maxlen: 24
37.34.31.0/24 maxlen: 24
37.34.27.0/24 maxlen: 24
37.34.28.0/24 maxlen: 24
37.34.29.0/24 maxlen: 24
37.34.30.0/24 maxlen: 24
37.34.25.0/24 maxlen: 24
37.34.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:99:7f:ca:62:1e:22:f9:9c:95:24:5f:db:7c:9e:51:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Validity
Not Before: Apr 19 12:31:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18e4b53f4b7399165a74df639bde5f6d70e6fe16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b0:1b:b4:7a:25:bf:a5:c8:74:a8:1e:78:bf:
16:f4:45:7b:70:1d:79:8f:32:f5:e0:cb:8d:84:f4:
ae:0e:1f:5b:b2:a7:10:27:7a:81:3c:a6:2c:13:17:
c7:ac:5c:97:b4:0c:61:20:c3:40:af:3d:c8:e2:aa:
54:a6:97:ef:dc:50:70:a1:fa:b6:09:d5:1c:bc:1f:
1b:83:e3:9e:37:e2:96:02:fd:d9:7e:54:ca:89:d9:
63:de:90:26:d2:de:6b:53:6d:c0:ad:e1:6b:d0:9a:
27:b0:af:e1:cb:05:f4:77:ba:99:01:be:63:c8:a3:
7a:97:14:03:b8:71:47:4a:2e:90:36:eb:1f:0e:2d:
08:01:1f:d3:7a:4b:12:f1:92:3d:8a:a5:24:e9:5b:
53:37:3b:a1:8b:d3:df:9d:8c:cb:11:38:9e:13:65:
c2:6b:eb:27:2d:26:cb:81:e9:8c:e9:e3:9f:1e:bd:
82:ac:cf:7a:f1:64:b0:2b:bb:86:c0:e4:10:0d:de:
81:44:31:12:b5:17:ea:f8:0b:39:57:a6:1b:96:3d:
d7:0a:83:28:72:ce:be:0c:8e:9a:70:af:3c:a0:83:
00:04:1a:7f:2e:95:f7:ac:2c:a1:6e:8b:f7:5e:58:
21:cd:09:e5:76:d5:4e:9c:c6:29:13:97:53:32:58:
55:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E4:B5:3F:4B:73:99:16:5A:74:DF:63:9B:DE:5F:6D:70:E6:FE:16
X509v3 Authority Key Identifier:
keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/GOS1P0tzmRZadN9jm95fbXDm_hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.0.0/20
37.34.0.0/19
94.79.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b7:6a:89:18:2a:0a:66:68:11:7c:aa:bb:31:94:84:ca:81:c9:
4d:75:f2:6c:1d:70:3b:08:25:94:27:d0:8f:de:cf:9d:1d:53:
c0:ed:9f:0f:07:ea:74:ed:31:ef:de:c2:8f:43:c4:a2:e2:a1:
fe:c1:7e:3f:3b:e9:92:fe:a0:7e:69:55:d2:9a:d4:8d:79:f7:
42:b3:a3:d5:15:a4:24:45:b0:c7:86:49:2b:27:b8:93:6d:90:
cc:b1:ee:62:1d:36:0f:4d:de:52:59:06:3e:32:5c:52:5b:80:
f2:38:42:b4:a5:7b:1c:61:08:1b:a7:70:f0:b3:c7:e9:9d:8b:
ee:7e:20:68:62:4c:23:e4:d9:5d:d2:3b:60:e5:9a:88:0d:24:
53:e9:84:41:40:e6:8a:c5:5e:1b:b2:9d:43:0e:63:f0:62:a4:
d6:7f:4f:68:8f:a5:c1:30:4c:e1:b3:25:7b:93:0a:25:88:f8:
91:16:5a:ba:7a:01:25:b9:81:f5:ae:91:55:78:31:1e:a6:ac:
1e:68:d9:c1:0a:9a:8b:71:26:62:71:bd:d4:1f:8f:ed:ed:04:
f8:d5:d8:f8:fd:ca:14:0c:e6:28:99:a4:7c:3d:85:fc:e8:f7:
27:23:0e:82:0b:13:cd:41:de:69:91:01:a4:94:f3:9a:76:20:
87:16:d0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:35 2024 by rpki-client on console-ams.rpki-client.org