Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/G-2UxQ5FKiQHIVGkXyUSEH-7TSI.roa
File: G-2UxQ5FKiQHIVGkXyUSEH-7TSI.roa (raw, json)
Hash identifier: eCPzvBM1K/Xj7sv8ec1YZvXQrt3X/GwMURB8MpdXNYY=
Subject key identifier: 1B:ED:94:C5:0E:45:2A:24:07:21:51:A4:5F:25:12:10:7F:BB:4D:22
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 018BFC387B273B027B120DEAEC40DD65A9C1
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/G-2UxQ5FKiQHIVGkXyUSEH-7TSI.roa
Signing time: Thu 23 Nov 2023 12:47:21 +0000
ROA not before: Thu 23 Nov 2023 12:47:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206805
IP address blocks: 185.159.111.0/24 maxlen: 24
45.84.152.0/23 maxlen: 23
45.84.155.0/24 maxlen: 24
45.84.154.0/24 maxlen: 24
193.19.100.0/23 maxlen: 24
45.145.191.0/24 maxlen: 24
45.145.190.0/23 maxlen: 23
45.145.190.0/24 maxlen: 24
45.145.188.0/23 maxlen: 23
80.85.250.0/23 maxlen: 23
80.85.252.0/24 maxlen: 24
80.85.248.0/23 maxlen: 23
185.247.192.0/22 maxlen: 24
185.228.48.0/22 maxlen: 24
178.159.32.0/23 maxlen: 24
188.64.150.0/23 maxlen: 24
188.64.149.0/24 maxlen: 24
2a0c:ee00:20c::/48 maxlen: 48
2a0c:ee00:200::/40 maxlen: 40
2a0c:ee00::/40 maxlen: 40
2a0c:ee00:100::/40 maxlen: 40
2a0c:ee00:300::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fc:38:7b:27:3b:02:7b:12:0d:ea:ec:40:dd:65:a9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: Nov 23 12:47:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bed94c50e452a24072151a45f2512107fbb4d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e9:f9:30:57:3d:30:0c:f2:61:45:a4:0c:90:
d7:e5:e6:6f:7d:9a:f0:49:a7:22:da:10:c3:c1:b8:
80:f5:57:b5:d4:20:03:a8:35:4b:09:4e:da:cd:fd:
26:fa:70:98:94:ed:2e:e6:ac:24:f6:75:6e:a8:cd:
b3:85:5f:fe:b0:aa:85:83:9c:0c:e1:a6:e1:46:f0:
4d:0e:63:76:35:2c:01:10:7a:97:0d:56:9a:5f:df:
7a:f2:3d:7c:83:ee:0a:8e:1a:87:8c:46:70:a2:ec:
a6:be:45:60:ba:9b:27:2a:80:16:27:21:b8:8d:a9:
5e:93:7e:0f:ef:25:fc:e2:37:f8:ad:a9:fc:53:79:
6d:14:e5:01:1b:5f:89:23:53:37:ea:29:96:49:1f:
13:2c:64:1e:3b:13:bb:2e:59:52:35:23:f1:68:6c:
26:14:10:0f:4d:d1:34:ba:99:f7:63:1e:21:7a:1a:
ec:96:09:49:1b:03:27:2c:2f:5e:90:94:21:8a:69:
b0:53:e7:04:bc:a9:0c:d8:7c:28:e9:97:d4:cb:0d:
2f:2b:2f:95:0c:e4:50:fc:9f:c4:af:69:ea:86:8b:
1e:d4:f5:5a:63:f5:f4:93:02:ef:c6:4c:bf:7f:2d:
ea:93:25:50:b5:f0:7e:f7:e5:ea:eb:2d:51:26:89:
3f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:ED:94:C5:0E:45:2A:24:07:21:51:A4:5F:25:12:10:7F:BB:4D:22
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/G-2UxQ5FKiQHIVGkXyUSEH-7TSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.152.0/22
45.145.188.0/22
80.85.248.0-80.85.252.255
178.159.32.0/23
185.159.111.0/24
185.228.48.0/22
185.247.192.0/22
188.64.149.0-188.64.151.255
193.19.100.0/23
IPv6:
2a0c:ee00::/38
Signature Algorithm: sha256WithRSAEncryption
18:52:01:5d:e6:63:f5:6a:c3:4d:a8:7c:36:f7:47:4a:5e:41:
ce:19:fd:66:fe:0c:1f:24:9b:7d:c1:24:d7:d4:05:f0:8b:6e:
c0:61:76:0d:6f:cd:ff:95:a3:46:25:e7:d7:e4:1e:6d:8f:69:
ed:b8:2c:04:3c:9d:99:29:7e:3b:33:8d:cf:29:92:71:cf:bf:
f6:c0:c8:e8:b6:e4:19:72:02:49:d1:ae:85:0e:dc:c7:a4:ae:
58:26:72:d5:ff:ca:f2:46:eb:bc:52:54:39:b0:fd:fe:19:44:
d8:49:6b:56:6c:47:9f:8f:9f:01:82:49:48:b4:62:7d:5c:8e:
c8:f6:86:77:ef:f6:56:08:a0:82:0e:f9:f6:fa:86:ad:00:21:
ab:1f:17:6a:6e:aa:89:b6:e3:be:10:91:e9:0c:04:e3:db:56:
e9:12:e3:7a:f1:e0:2c:27:0f:a9:f5:25:01:7a:5a:7a:9b:f1:
f2:8b:93:0b:fd:f8:ef:69:2c:22:03:58:5a:c7:63:2e:87:73:
8e:bb:9a:ea:23:74:15:2b:79:41:31:46:09:d0:1a:cf:3f:f9:
e4:be:fc:29:97:f5:10:0d:f1:71:8a:a5:61:67:91:7e:f5:bc:
5a:b1:ec:13:c3:4b:34:8e:2f:66:90:d6:69:3d:ff:ba:37:dc:
aa:9c:0b:81
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAYv8OHsnOwJ7Eg3q7EDdZanBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkM2Q0MDExMTc1ZTVkZjdhM2Y1N2QzOGU3ODE1MGEyYzA1
ZmRkMWQwHhcNMjMxMTIzMTI0NzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmVkOTRjNTBlNDUyYTI0MDcyMTUxYTQ1ZjI1MTIxMDdmYmI0ZDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOn5MFc9MAzyYUWkDJDX5eZvfZrw
Saci2hDDwbiA9Ve11CADqDVLCU7azf0m+nCYlO0u5qwk9nVuqM2zhV/+sKqFg5wM
4abhRvBNDmN2NSwBEHqXDVaaX9968j18g+4KjhqHjEZwouymvkVgupsnKoAWJyG4
jalek34P7yX84jf4ran8U3ltFOUBG1+JI1M36imWSR8TLGQeOxO7LllSNSPxaGwm
FBAPTdE0upn3Yx4hehrslglJGwMnLC9ekJQhimmwU+cEvKkM2Hwo6ZfUyw0vKy+V
DORQ/J/Er2nqhose1PVaY/X0kwLvxky/fy3qkyVQtfB+9+Xq6y1RJok/oQIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFBvtlMUORSokByFRpF8lEhB/u00iMB8GA1UdIwQY
MBaAFN09QBEXXl33o/V9OOeBUKLAX90dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1QxQUVSZGVYZmVqOVgwNDU0RlFvc0JmM1IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zMDg1ODktOTJmZS00NTkzLTkzZTQt
MmQwYTc4YmU4OTJkLzEvRy0yVXhRNUZLaVFISVZHa1h5VVNFSC03VFNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8zMDg1ODktOTJmZS00NTkzLTkzZTQtMmQwYTc4YmU4OTJk
LzEvM1QxQUVSZGVYZmVqOVgwNDU0RlFvc0JmM1IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBMBAIAATBGAwQCLVSYAwQC
LZG8MAwDBANQVfgDBABQVfwDBAGynyADBAC5n28DBAK55DADBAK598AwDAMEALxA
lQMEA7xAkAMEAcETZDAOBAIAAjAIAwYCKgzuAAAwDQYJKoZIhvcNAQELBQADggEB
ABhSAV3mY/Vqw02ofDb3R0peQc4Z/Wb+DB8km33BJNfUBfCLbsBhdg1vzf+Vo0Yl
59fkHm2Pae24LAQ8nZkpfjszjc8pknHPv/bAyOi25BlyAknRroUO3MekrlgmctX/
yvJG67xSVDmw/f4ZRNhJa1ZsR5+PnwGCSUi0Yn1cjsj2hnfv9lYIoIIO+fb6hq0A
IasfF2puqom2474QkekMBOPbVukS43rx4CwnD6n1JQF6Wnqb8fKLkwv9+O9pLCID
WFrHYy6Hc467muojdBUreUExRgnQGs8/+eS+/CmX9RAN8XGKpWFnkX71vFqx7BPD
SzSOL2aQ1mk9/7o33KqcC4E=
Generated at Mon Jan 1 02:13:29 2024 by rpki-client on console.sobornost.net