Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/GKpFkF8kf8Hq3GP9eKEs8_JWGH4.roa
File: GKpFkF8kf8Hq3GP9eKEs8_JWGH4.roa (raw, json)
Hash identifier: 83dCvzswJgO8gFHeG9nDlc64WqlDYhxOwEbC/YBG1e4=
Subject key identifier: 18:AA:45:90:5F:24:7F:C1:EA:DC:63:FD:78:A1:2C:F3:F2:56:18:7E
Certificate issuer: /CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Certificate serial: 0190281BE2BA5C9370A1CF535E662D6CC6AE
Authority key identifier: 6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/GKpFkF8kf8Hq3GP9eKEs8_JWGH4.roa
Signing time: Mon 17 Jun 2024 21:30:34 +0000
ROA not before: Mon 17 Jun 2024 21:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202513
IP address blocks: 43.230.184.0/24 maxlen: 24
185.98.16.0/22 maxlen: 24
185.249.148.0/22 maxlen: 24
2a0c:97c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 20 Jun 2024 10:04:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:28:1b:e2:ba:5c:93:70:a1:cf:53:5e:66:2d:6c:c6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Validity
Not Before: Jun 17 21:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18aa45905f247fc1eadc63fd78a12cf3f256187e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:a8:08:40:a6:75:ed:bf:fe:3b:89:54:3d:
8d:d3:38:96:5b:be:18:1f:23:99:6e:32:59:c2:a8:
90:87:02:17:6f:49:f1:c2:ad:d7:1f:65:a3:20:6f:
d9:53:71:b6:7f:27:3b:49:52:4f:fa:e1:7d:8f:ba:
5e:93:b2:51:fb:23:6d:f9:aa:0c:0c:6f:56:f4:29:
13:3d:0f:70:cd:5e:df:e7:8f:f3:83:d2:c6:99:79:
be:d4:54:3d:fa:e1:7d:db:fb:d9:cb:cf:07:08:4c:
33:41:d9:36:cd:6d:c8:e1:8d:63:1a:5b:1e:c0:00:
ff:0b:98:0a:1b:00:20:05:fe:d1:bb:61:9d:51:31:
d5:30:8d:63:05:48:87:cc:1a:34:ba:e1:c7:7d:f7:
6c:fb:0f:32:6f:c9:f4:22:0a:73:9b:aa:f4:aa:db:
a5:ff:20:13:73:6d:eb:d5:f7:6b:70:4c:96:9c:ba:
78:f0:df:bb:a3:29:5b:1a:48:e6:75:58:13:5d:f0:
9b:60:a7:48:39:93:64:0d:9a:68:f2:db:a4:6e:63:
94:ff:7e:1a:4e:53:15:08:5c:0a:ab:0a:5e:59:b2:
f4:29:3c:8a:65:50:c7:22:cf:08:37:ec:15:e6:c2:
df:9d:06:7e:fb:d6:bf:81:01:43:40:c7:4c:84:18:
d8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AA:45:90:5F:24:7F:C1:EA:DC:63:FD:78:A1:2C:F3:F2:56:18:7E
X509v3 Authority Key Identifier:
keyid:6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/GKpFkF8kf8Hq3GP9eKEs8_JWGH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.184.0/24
185.98.16.0/22
185.249.148.0/22
IPv6:
2a0c:97c0::/29
Signature Algorithm: sha256WithRSAEncryption
78:05:ab:f1:58:a4:2c:2d:71:20:90:85:40:9c:7f:aa:47:18:
f5:ae:7f:b6:21:41:37:98:21:1e:f7:51:ff:c3:50:14:7f:8a:
03:9a:c4:14:73:3d:0a:d7:88:58:0d:ac:84:6e:e2:60:8e:5e:
af:a6:48:05:9c:92:4a:45:db:a6:c1:b1:75:84:59:cc:62:8c:
8b:d3:18:b0:f3:85:f7:89:66:d8:40:3b:b6:36:be:e8:0e:24:
ae:d0:da:60:e7:92:b8:2e:08:74:47:dc:d2:55:2d:1a:ce:28:
91:45:4e:73:bc:a5:a6:20:2a:cd:bb:a9:fb:86:d9:83:39:b3:
6a:1d:c3:bf:e7:28:20:9a:94:ea:a8:11:a1:30:80:8d:46:c7:
81:25:01:28:e2:9f:ce:19:1e:f5:e5:af:80:00:bc:a8:be:dd:
73:a2:dd:b6:52:6a:f1:bf:de:51:d6:8a:24:d2:c2:31:64:e9:
06:eb:be:9f:ad:dc:c2:9d:f7:c4:93:33:3a:b4:2f:1e:2d:b3:
56:1d:87:45:0d:21:27:d7:d3:bf:c7:19:77:fe:80:f0:9b:9e:
ca:0e:68:06:14:07:1b:c0:55:f6:f6:63:16:0e:12:5f:87:da:
66:cb:2a:f5:1f:3d:da:3b:c4:cf:87:04:be:fb:b8:84:fb:d6:
29:d9:27:e4
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZAoG+K6XJNwoc9TXmYtbMauMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkODUwNjEzNjFiMTlmMjEyZWZlOTBjMmQ4Y2YzZWVlNjE3
ZjIwZTUwHhcNMjQwNjE3MjEzMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGFhNDU5MDVmMjQ3ZmMxZWFkYzYzZmQ3OGExMmNmM2YyNTYxODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysyoCECmde2//juJVD2N0ziWW74Y
HyOZbjJZwqiQhwIXb0nxwq3XH2WjIG/ZU3G2fyc7SVJP+uF9j7pek7JR+yNt+aoM
DG9W9CkTPQ9wzV7f54/zg9LGmXm+1FQ9+uF92/vZy88HCEwzQdk2zW3I4Y1jGlse
wAD/C5gKGwAgBf7Ru2GdUTHVMI1jBUiHzBo0uuHHffds+w8yb8n0Igpzm6r0qtul
/yATc23r1fdrcEyWnLp48N+7oylbGkjmdVgTXfCbYKdIOZNkDZpo8tukbmOU/34a
TlMVCFwKqwpeWbL0KTyKZVDHIs8IN+wV5sLfnQZ++9a/gQFDQMdMhBjY9wIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFBiqRZBfJH/B6txj/XihLPPyVhh+MB8GA1UdIwQY
MBaAFG2FBhNhsZ8hLv6QwtjPPu5hfyDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYllVR0UyR3hueUV1X3BEQzJNOC03bUZfSU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83ZTdiOGItNzllMC00ZjUxLWI4NjYt
NjdhZDYwZDM4NmRkLzEvR0twRmtGOGtmOEhxM0dQOWVLRXM4X0pXR0g0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC83ZTdiOGItNzllMC00ZjUxLWI4NjYtNjdhZDYwZDM4NmRk
LzEvYllVR0UyR3hueUV1X3BEQzJNOC03bUZfSU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAK+a4AwQC
uWIQAwQCufmUMA0EAgACMAcDBQMqDJfAMA0GCSqGSIb3DQEBCwUAA4IBAQB4Bavx
WKQsLXEgkIVAnH+qRxj1rn+2IUE3mCEe91H/w1AUf4oDmsQUcz0K14hYDayEbuJg
jl6vpkgFnJJKRdumwbF1hFnMYoyL0xiw84X3iWbYQDu2Nr7oDiSu0Npg55K4Lgh0
R9zSVS0aziiRRU5zvKWmICrNu6n7htmDObNqHcO/5yggmpTqqBGhMICNRseBJQEo
4p/OGR715a+AALyovt1zot22Umrxv95R1ook0sIxZOkG676frdzCnffEkzM6tC8e
LbNWHYdFDSEn19O/xxl3/oDwm57KDmgGFAcbwFX29mMWDhJfh9pmyyr1Hz3aO8TP
hwS++7iE+9Yp2Sfk
-----END CERTIFICATE-----
Generated at Thu May 1 20:06:57 2025 by rpki-client