Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/GgsGabf_py46VGVPw7QLDW6APco.roa
File: GgsGabf_py46VGVPw7QLDW6APco.roa (raw, json)
Hash identifier: z4awoKmvEzghfifK33seZlLdLSODtw1fo8p0ggD+sUI=
Subject key identifier: 1A:0B:06:69:B7:FF:A7:2E:3A:54:65:4F:C3:B4:0B:0D:6E:80:3D:CA
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019726D97599820E85FF123AC59F1A25F516
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/GgsGabf_py46VGVPw7QLDW6APco.roa
Signing time: Sat 31 May 2025 14:57:54 +0000
ROA not before: Sat 31 May 2025 14:57:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
85.115.210.0/23 maxlen: 24
213.145.68.0/23 maxlen: 23
213.145.68.0/24 maxlen: 24
213.145.70.0/23 maxlen: 24
213.145.71.0/24 maxlen: 24
213.145.72.0/21 maxlen: 24
213.145.82.0/23 maxlen: 24
213.145.84.0/23 maxlen: 23
213.145.86.0/23 maxlen: 23
213.145.88.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 11:41:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:26:d9:75:99:82:0e:85:ff:12:3a:c5:9f:1a:25:f5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: May 31 14:57:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a0b0669b7ffa72e3a54654fc3b40b0d6e803dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8c:68:80:d7:94:54:88:81:0e:21:18:b3:e4:
a0:56:1c:41:b0:93:e6:35:e6:19:4e:44:00:95:fe:
13:22:1f:7e:7a:40:b9:40:94:e1:dc:6f:02:37:4b:
d1:5a:8f:15:66:55:1f:a3:c3:d7:5f:e6:1a:bc:12:
45:64:32:08:60:6f:e1:c5:a9:dd:dc:d1:ea:a4:57:
3b:21:60:49:a8:6c:8f:47:b4:86:6b:91:e3:fb:17:
61:a9:dc:0a:5c:20:2d:11:2d:3f:97:bc:2e:b1:d7:
38:59:a2:00:26:52:6c:e1:bb:67:04:40:ce:58:5c:
14:f6:52:33:05:e0:43:e6:e7:c7:d5:cf:f0:bf:5b:
4f:c5:52:ed:c4:d6:dc:f8:03:f1:15:ab:65:69:8a:
11:fa:53:a2:d0:b4:cd:fb:bf:9f:39:4f:b0:d0:ae:
4c:3a:bf:2e:dc:34:12:dd:e6:5a:68:c3:01:27:4f:
08:13:48:ac:eb:54:af:f4:57:a6:24:df:98:9c:74:
0b:1f:2b:50:0d:e3:21:de:59:dd:b9:6f:4a:a5:93:
b8:ba:8b:0a:8d:19:de:00:33:1e:39:58:3a:1a:8a:
27:09:f9:25:72:94:81:a5:1a:43:6e:f8:b0:79:79:
15:a1:79:95:10:34:9a:ca:18:01:b0:ba:7d:df:fc:
22:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0B:06:69:B7:FF:A7:2E:3A:54:65:4F:C3:B4:0B:0D:6E:80:3D:CA
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/GgsGabf_py46VGVPw7QLDW6APco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/22
213.145.68.0-213.145.79.255
213.145.82.0-213.145.89.255
Signature Algorithm: sha256WithRSAEncryption
9d:9d:05:66:ce:31:4f:99:32:61:2d:17:c2:d5:f9:99:51:08:
ed:75:b9:39:47:51:03:e4:f5:28:8b:c5:6f:2e:c0:d9:f6:67:
8e:2e:c6:5c:6c:68:ac:07:6a:23:04:08:bc:ed:70:e0:00:a3:
61:dd:9f:fb:7b:39:8b:53:5c:8c:89:47:d4:8c:d8:b5:d7:f9:
30:7c:82:63:e1:00:39:65:28:2c:d7:c1:a1:d4:17:87:8c:c7:
75:bc:0b:41:66:c4:a5:9c:4e:13:d4:5a:b8:2b:98:8a:8c:b7:
1d:12:2d:5d:44:ef:ae:33:19:a9:db:0c:fb:4f:1b:bc:11:c2:
1a:24:9d:d9:cc:52:0e:fb:85:77:55:15:a4:3c:62:65:cf:5e:
aa:b9:e1:ad:be:65:c0:bd:47:41:41:da:9b:2c:2e:c8:03:a7:
4a:81:e8:1e:24:7b:0e:3a:15:14:99:22:b3:16:e2:e3:3b:de:
b9:fc:2c:09:67:cb:9b:7a:e8:f8:28:46:bd:ed:48:94:0c:54:
55:e1:e3:44:7f:03:c6:e6:3b:6f:e7:65:bd:26:9f:dc:ef:f0:
aa:30:83:ec:13:b3:54:99:bb:3f:ea:85:3e:8d:81:61:7b:ac:
5d:be:c9:c4:3c:1b:c0:f4:7b:0c:bf:f2:7d:6f:89:a7:f6:86:
66:fe:f1:a9
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZcm2XWZgg6F/xI6xZ8aJfUWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjUwNTMxMTQ1NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTBiMDY2OWI3ZmZhNzJlM2E1NDY1NGZjM2I0MGIwZDZlODAzZGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYxogNeUVIiBDiEYs+SgVhxBsJPm
NeYZTkQAlf4TIh9+ekC5QJTh3G8CN0vRWo8VZlUfo8PXX+YavBJFZDIIYG/hxand
3NHqpFc7IWBJqGyPR7SGa5Hj+xdhqdwKXCAtES0/l7wusdc4WaIAJlJs4btnBEDO
WFwU9lIzBeBD5ufH1c/wv1tPxVLtxNbc+APxFatlaYoR+lOi0LTN+7+fOU+w0K5M
Or8u3DQS3eZaaMMBJ08IE0is61Sv9FemJN+YnHQLHytQDeMh3lnduW9KpZO4uosK
jRneADMeOVg6GoonCfklcpSBpRpDbviweXkVoXmVEDSayhgBsLp93/wiuQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBoLBmm3/6cuOlRlT8O0Cw1ugD3KMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvR2dzR2FiZl9weTQ2VkdWUHc3UUxEVzZBUGNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQCVXPQMAwD
BALVkUQDBATVkUAwDAMEAdWRUgMEAdWRWDANBgkqhkiG9w0BAQsFAAOCAQEAnZ0F
Zs4xT5kyYS0XwtX5mVEI7XW5OUdRA+T1KIvFby7A2fZnji7GXGxorAdqIwQIvO1w
4ACjYd2f+3s5i1NcjIlH1IzYtdf5MHyCY+EAOWUoLNfBodQXh4zHdbwLQWbEpZxO
E9RauCuYioy3HRItXUTvrjMZqdsM+08bvBHCGiSd2cxSDvuFd1UVpDxiZc9eqrnh
rb5lwL1HQUHamywuyAOnSoHoHiR7DjoVFJkisxbi4zveufwsCWfLm3ro+ChGve1I
lAxUVeHjRH8DxuY7b+dlvSaf3O/wqjCD7BOzVJm7P+qFPo2BYXusXb7JxDwbwPR7
DL/yfW+Jp/aGZv7xqQ==
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:09:56 2025 by rpki-client