Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/GBCr5mq-XoNoGgoJgCiO0ItzHmM.roa
File: GBCr5mq-XoNoGgoJgCiO0ItzHmM.roa (raw, json)
Hash identifier: +5hpBpFdD7BMph3Zc4g/3bNsOnoMeHabUMgMPa08Xsg=
Subject key identifier: 18:10:AB:E6:6A:BE:5E:83:68:1A:0A:09:80:28:8E:D0:8B:73:1E:63
Certificate issuer: /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Certificate serial: 019421B255BD98AFA950A9A3D534663C0AFE
Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/GBCr5mq-XoNoGgoJgCiO0ItzHmM.roa
Signing time: Wed 01 Jan 2025 11:48:43 +0000
ROA not before: Wed 01 Jan 2025 11:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212137
IP address blocks: 45.150.56.0/24 maxlen: 28
109.95.124.0/22 maxlen: 28
Validation: Failed, certificate revoked on Thu 23 Jan 2025 06:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:55:bd:98:af:a9:50:a9:a3:d5:34:66:3c:0a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Validity
Not Before: Jan 1 11:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1810abe66abe5e83681a0a0980288ed08b731e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:77:14:30:92:25:68:32:02:46:75:61:91:6a:
3a:29:06:b8:24:c1:6e:e7:20:a1:c0:c8:af:29:84:
f5:95:47:38:96:fc:32:91:bc:07:4c:45:d6:55:d3:
9d:fc:db:1b:b5:79:88:69:09:b3:82:dc:32:c2:5d:
ff:9f:da:c5:f3:b5:c0:60:21:57:5e:33:ca:33:36:
49:8f:8f:a4:3e:82:94:4b:e0:9c:0b:6e:fc:33:d9:
db:e8:cc:1e:84:0c:05:ae:33:b1:ca:60:8b:f5:ad:
36:7d:ec:6e:61:f3:1b:9a:51:f3:f8:ba:66:9f:1e:
11:84:7d:40:14:39:f2:51:1d:87:db:40:bc:ba:f5:
a4:ca:7d:60:5c:a2:6f:8d:0d:91:46:1f:e7:42:d9:
15:1f:bc:06:cf:a3:ae:21:52:8d:35:72:02:24:c8:
fb:6d:c8:5a:59:69:de:8b:41:4c:b9:5c:a9:31:31:
75:03:16:9a:2f:a8:c6:37:78:c5:1e:ee:df:1f:74:
cc:da:d8:d3:50:bd:47:7c:ac:c4:ca:b8:b8:ab:ba:
0b:46:f4:12:2e:fb:14:d8:f3:a8:9d:0f:25:d0:72:
46:81:63:3e:2e:8c:2a:be:b3:27:3e:1d:46:cb:33:
db:0d:5d:9a:84:39:35:f1:5a:d9:48:22:8b:e6:96:
11:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:10:AB:E6:6A:BE:5E:83:68:1A:0A:09:80:28:8E:D0:8B:73:1E:63
X509v3 Authority Key Identifier:
keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/GBCr5mq-XoNoGgoJgCiO0ItzHmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.56.0/24
109.95.124.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:ea:a0:5f:d2:48:5d:28:24:1e:e7:bd:a4:4f:6f:01:13:9f:
38:72:7a:d7:69:f4:99:5c:94:ec:f6:e5:58:60:35:e1:d9:0d:
10:a4:18:ed:62:cf:8f:e0:16:2e:8f:5b:e6:b4:2c:5e:b7:b9:
bd:2a:49:12:ed:5a:31:fb:ee:11:bf:4e:bb:6f:5a:35:e2:af:
27:6b:81:50:dd:24:c4:ea:77:99:ed:dd:52:11:72:a1:a8:29:
00:99:dc:4c:94:53:65:8c:43:ca:8b:2d:a2:cf:4d:c7:18:04:
c6:d4:e9:d1:cf:13:59:f7:c2:d1:86:a6:63:01:0d:4c:f1:22:
90:ba:53:c2:0c:2e:be:61:76:95:c3:9e:ad:42:a2:6c:47:7d:
57:a6:16:90:0c:91:b2:47:ac:a0:29:cf:bd:ce:ff:c8:de:78:
26:e0:94:bb:3b:fe:b0:c6:af:47:e5:30:2d:a5:ec:fe:89:f2:
26:3b:f4:60:71:6b:0c:91:7d:60:e8:3f:e2:87:cd:61:cf:96:
9e:5a:09:ff:c8:1b:98:1e:11:b5:4f:d8:9f:eb:eb:85:00:f2:
45:c7:ec:02:58:47:a5:04:31:d2:2d:9e:82:e7:a1:e7:2a:d7:
01:3b:6e:6d:74:db:11:92:15:02:93:61:94:a1:6f:dd:83:a2:
06:61:6c:5b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhslW9mK+pUKmj1TRmPAr+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDU0NzJiNTUwYjM0ZmRiMDFhZGNkNTEwYTlkY2Q4MjFj
OWQ5OTEwHhcNMjUwMTAxMTE0ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODEwYWJlNjZhYmU1ZTgzNjgxYTBhMDk4MDI4OGVkMDhiNzMxZTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsncUMJIlaDICRnVhkWo6KQa4JMFu
5yChwMivKYT1lUc4lvwykbwHTEXWVdOd/NsbtXmIaQmzgtwywl3/n9rF87XAYCFX
XjPKMzZJj4+kPoKUS+CcC278M9nb6MwehAwFrjOxymCL9a02fexuYfMbmlHz+Lpm
nx4RhH1AFDnyUR2H20C8uvWkyn1gXKJvjQ2RRh/nQtkVH7wGz6OuIVKNNXICJMj7
bchaWWnei0FMuVypMTF1AxaaL6jGN3jFHu7fH3TM2tjTUL1HfKzEyri4q7oLRvQS
LvsU2POonQ8l0HJGgWM+LowqvrMnPh1GyzPbDV2ahDk18VrZSCKL5pYRjwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBgQq+Zqvl6DaBoKCYAojtCLcx5jMB8GA1UdIwQY
MBaAFEpFRytVCzT9sBrc1RCp3NghydmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tWSEsxVUxOUDJ3R3R6VkVLbmMyQ0hKMlpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZTU1ZDAtZmFmZC00OWMyLTljMDgt
MTJjMDU4YmZhY2MxLzEvR0JDcjVtcS1Yb05vR2dvSmdDaU8wSXR6SG1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wZTU1ZDAtZmFmZC00OWMyLTljMDgtMTJjMDU4YmZhY2Mx
LzEvU2tWSEsxVUxOUDJ3R3R6VkVLbmMyQ0hKMlpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZY4AwQC
bV98MA0GCSqGSIb3DQEBCwUAA4IBAQB66qBf0khdKCQe572kT28BE584cnrXafSZ
XJTs9uVYYDXh2Q0QpBjtYs+P4BYuj1vmtCxet7m9KkkS7Vox++4Rv067b1o14q8n
a4FQ3STE6neZ7d1SEXKhqCkAmdxMlFNljEPKiy2iz03HGATG1OnRzxNZ98LRhqZj
AQ1M8SKQulPCDC6+YXaVw56tQqJsR31XphaQDJGyR6ygKc+9zv/I3ngm4JS7O/6w
xq9H5TAtpez+ifImO/RgcWsMkX1g6D/ih81hz5aeWgn/yBuYHhG1T9if6+uFAPJF
x+wCWEelBDHSLZ6C56HnKtcBO25tdNsRkhUCk2GUoW/dg6IGYWxb
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:13:55 2025 by rpki-client