Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/G7Cl2JuixIothdKPsSNPEtoUyuE.roa
File: G7Cl2JuixIothdKPsSNPEtoUyuE.roa (raw, json)
Hash identifier: G5ysCyM7W/y2PCn8Kq6Avdx9zEEMZhed17AwjaVSVBw=
Subject key identifier: 1B:B0:A5:D8:9B:A2:C4:8A:2D:85:D2:8F:B1:23:4F:12:DA:14:CA:E1
Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial: 0192B9C9191CB7D26A4CA7CA41CBAC9FAE5D
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/G7Cl2JuixIothdKPsSNPEtoUyuE.roa
Signing time: Wed 23 Oct 2024 14:30:16 +0000
ROA not before: Wed 23 Oct 2024 14:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 79.137.194.0/23 maxlen: 23
79.137.196.0/22 maxlen: 22
79.137.202.0/23 maxlen: 23
79.137.204.0/23 maxlen: 23
79.137.206.0/24 maxlen: 24
79.137.207.0/24 maxlen: 24
79.137.248.0/24 maxlen: 24
85.192.24.0/24 maxlen: 24
85.192.25.0/24 maxlen: 24
85.192.26.0/24 maxlen: 24
85.192.27.0/24 maxlen: 24
85.192.28.0/24 maxlen: 24
85.192.40.0/23 maxlen: 23
85.192.42.0/24 maxlen: 24
85.192.56.0/24 maxlen: 24
85.192.60.0/24 maxlen: 24
85.192.61.0/24 maxlen: 24
85.192.63.0/24 maxlen: 24
89.208.96.0/24 maxlen: 24
89.208.97.0/24 maxlen: 24
89.208.103.0/24 maxlen: 24
89.208.104.0/22 maxlen: 22
185.125.100.0/24 maxlen: 24
185.125.101.0/24 maxlen: 24
185.125.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Oct 2024 15:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b9:c9:19:1c:b7:d2:6a:4c:a7:ca:41:cb:ac:9f:ae:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Validity
Not Before: Oct 23 14:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bb0a5d89ba2c48a2d85d28fb1234f12da14cae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:05:98:4c:2a:e8:ec:fe:b7:3f:68:7d:b9:
36:57:16:57:b7:c5:8d:40:41:fb:e1:f3:8a:1b:a4:
3c:86:5b:29:c1:7b:64:25:9d:50:ea:e6:7e:ef:6a:
5b:3f:dc:d8:96:d5:a8:46:f6:48:45:5b:74:ea:02:
08:e8:74:b3:4b:2b:5f:b7:01:ba:5f:a5:bb:78:3c:
c8:73:c0:f5:42:cf:d8:3d:a1:0d:02:5c:bc:d0:e6:
ee:9a:34:d2:39:85:a3:de:9d:9b:50:4e:47:eb:4d:
71:55:0f:1f:71:99:80:7e:ba:84:6d:12:43:13:b5:
67:cf:ea:20:02:29:44:7b:f4:0b:5d:d2:7f:b8:3a:
9c:53:ab:f3:91:fb:f0:cb:6a:f7:95:11:75:b2:85:
68:ea:b9:62:29:42:c5:b7:8f:93:33:d5:6b:b3:54:
90:a4:0f:3d:57:50:82:23:69:90:ff:aa:b1:3e:76:
bb:52:b3:f2:0c:2e:0d:39:51:4a:bc:9e:90:53:1b:
a5:0e:c2:79:83:52:21:4d:c8:08:cf:b7:10:80:27:
7d:b0:6f:63:45:6e:c6:b3:c7:34:0c:d1:47:b1:72:
b7:11:23:5b:26:9a:f4:4f:71:61:ed:4b:25:f4:22:
93:fb:28:47:17:2c:13:aa:a7:36:f9:c8:3f:41:96:
fe:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B0:A5:D8:9B:A2:C4:8A:2D:85:D2:8F:B1:23:4F:12:DA:14:CA:E1
X509v3 Authority Key Identifier:
keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/G7Cl2JuixIothdKPsSNPEtoUyuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.137.194.0-79.137.199.255
79.137.202.0-79.137.207.255
79.137.248.0/24
85.192.24.0-85.192.28.255
85.192.40.0-85.192.42.255
85.192.56.0/24
85.192.60.0/23
85.192.63.0/24
89.208.96.0/23
89.208.103.0-89.208.107.255
185.125.100.0-185.125.102.255
Signature Algorithm: sha256WithRSAEncryption
c6:a4:9d:19:2c:91:28:e4:82:d1:dc:ce:14:f5:7c:6b:1c:53:
fc:db:3e:fb:a4:d5:79:61:24:08:67:14:9a:24:5e:e0:bc:01:
68:23:30:eb:06:4d:ba:87:2d:0b:46:3b:c5:ce:2c:d8:bd:02:
fa:c4:62:a6:68:ca:76:e9:ec:64:58:99:7e:fe:e9:16:5d:83:
87:56:41:65:ce:cb:64:7b:d0:a6:fd:71:f0:f3:8e:c7:0a:ac:
ce:75:a3:62:ab:bd:21:e6:38:48:d4:33:25:6b:35:02:1d:8c:
ea:9c:c3:49:ab:61:e6:01:43:cc:31:11:7b:82:8e:95:32:4b:
47:cf:1a:68:20:80:22:70:b6:38:26:72:cb:59:49:11:0d:9c:
59:1b:f2:06:7f:3e:f2:cb:02:f9:1d:1e:6a:31:2c:0e:91:42:
49:17:b1:d1:29:86:7f:3d:d6:15:e6:6a:2c:5e:03:08:75:89:
85:cc:74:a5:d1:44:49:d8:24:9e:5e:1b:0c:f7:4d:45:5e:0e:
1b:37:14:71:91:54:8f:c6:22:6c:46:34:f8:0e:de:0c:9d:e5:
25:29:bb:46:1c:b8:1b:af:f8:0f:92:1f:c3:67:5e:2c:15:a4:
96:b5:61:a7:bc:4d:16:9d:9a:ab:eb:b0:ab:9b:91:eb:3f:91:
ca:80:8c:06
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgISAZK5yRkct9JqTKfKQcusn65dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMWM3NTcxNTk2ZTQ0NGFhMzIzNzFjYmFiNzI0ZDQ2ZDNj
M2M1MmMwHhcNMjQxMDIzMTQzMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmIwYTVkODliYTJjNDhhMmQ4NWQyOGZiMTIzNGYxMmRhMTRjYWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO8FmEwq6Oz+tz9ofbk2VxZXt8WN
QEH74fOKG6Q8hlspwXtkJZ1Q6uZ+72pbP9zYltWoRvZIRVt06gII6HSzSytftwG6
X6W7eDzIc8D1Qs/YPaENAly80ObumjTSOYWj3p2bUE5H601xVQ8fcZmAfrqEbRJD
E7Vnz+ogAilEe/QLXdJ/uDqcU6vzkfvwy2r3lRF1soVo6rliKULFt4+TM9Vrs1SQ
pA89V1CCI2mQ/6qxPna7UrPyDC4NOVFKvJ6QUxulDsJ5g1IhTcgIz7cQgCd9sG9j
RW7Gs8c0DNFHsXK3ESNbJpr0T3Fh7Usl9CKT+yhHFywTqqc2+cg/QZb+swIDAQAB
o4ICdjCCAnIwHQYDVR0OBBYEFBuwpdibosSKLYXSj7EjTxLaFMrhMB8GA1UdIwQY
MBaAFMocdXFZbkRKoyNxy6tyTUbTw8UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEt
Yjc2MmMwMTc1ZjI3LzEvRzdDbDJKdWl4SW90aGRLUHNTTlBFdG9VeXVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEtYjc2MmMwMTc1ZjI3
LzEveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcjAMAwQBT4nC
AwQDT4nAMAwDBAFPicoDBARPicADBABPifgwDAMEA1XAGAMEAFXAHDAMAwQDVcAo
AwQAVcAqAwQAVcA4AwQBVcA8AwQAVcA/AwQBWdBgMAwDBABZ0GcDBAJZ0GgwDAME
Arl9ZAMEALl9ZjANBgkqhkiG9w0BAQsFAAOCAQEAxqSdGSyRKOSC0dzOFPV8axxT
/Ns++6TVeWEkCGcUmiRe4LwBaCMw6wZNuoctC0Y7xc4s2L0C+sRipmjKdunsZFiZ
fv7pFl2Dh1ZBZc7LZHvQpv1x8POOxwqsznWjYqu9IeY4SNQzJWs1Ah2M6pzDSath
5gFDzDERe4KOlTJLR88aaCCAInC2OCZyy1lJEQ2cWRvyBn8+8ssC+R0eajEsDpFC
SRex0SmGfz3WFeZqLF4DCHWJhcx0pdFESdgknl4bDPdNRV4OGzcUcZFUj8YibEY0
+A7eDJ3lJSm7Rhy4G6/4D5Ifw2deLBWklrVhp7xNFp2aq+uwq5uR6z+RyoCMBg==
-----END CERTIFICATE-----
Generated at Sat May 3 12:33:34 2025 by rpki-client