Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/GYZMsF_clbqlbGURQfxqHYV7PCQ.roa
File: GYZMsF_clbqlbGURQfxqHYV7PCQ.roa (raw, json)
Hash identifier: g3ApzGa7qMcwgbJaq7gRoudjAhRNtefmhd/5KL7Pto0=
Subject key identifier: 19:86:4C:B0:5F:DC:95:BA:A5:6C:65:11:41:FC:6A:1D:85:7B:3C:24
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 0192286EE3857CA42F434F2DD0F04A382BA2
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/GYZMsF_clbqlbGURQfxqHYV7PCQ.roa
Signing time: Wed 25 Sep 2024 09:06:48 +0000
ROA not before: Wed 25 Sep 2024 09:06:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29256
IP address blocks: 46.57.128.0/20 maxlen: 20
46.57.144.0/20 maxlen: 20
46.57.160.0/20 maxlen: 20
46.57.176.0/20 maxlen: 20
46.57.192.0/20 maxlen: 20
46.57.208.0/20 maxlen: 20
46.57.224.0/20 maxlen: 20
46.57.240.0/20 maxlen: 20
46.213.0.0/20 maxlen: 20
46.213.16.0/20 maxlen: 20
46.213.32.0/20 maxlen: 20
46.213.48.0/20 maxlen: 20
46.213.56.0/21 maxlen: 21
46.213.64.0/20 maxlen: 20
46.213.80.0/20 maxlen: 20
46.213.96.0/20 maxlen: 20
46.213.112.0/20 maxlen: 20
46.213.128.0/20 maxlen: 20
46.213.144.0/20 maxlen: 20
46.213.160.0/20 maxlen: 20
46.213.176.0/20 maxlen: 20
46.213.192.0/20 maxlen: 20
46.213.208.0/20 maxlen: 20
46.213.224.0/20 maxlen: 20
46.213.240.0/20 maxlen: 20
94.252.128.0/22 maxlen: 22
94.252.132.0/22 maxlen: 22
94.252.136.0/21 maxlen: 21
94.252.144.0/20 maxlen: 20
94.252.160.0/20 maxlen: 20
94.252.176.0/22 maxlen: 22
94.252.180.0/24 maxlen: 24
94.252.181.0/24 maxlen: 24
94.252.182.0/24 maxlen: 24
94.252.183.0/24 maxlen: 24
94.252.184.0/24 maxlen: 24
94.252.185.0/24 maxlen: 24
94.252.186.0/24 maxlen: 24
94.252.187.0/24 maxlen: 24
94.252.188.0/24 maxlen: 24
94.252.189.0/24 maxlen: 24
94.252.190.0/24 maxlen: 24
94.252.191.0/24 maxlen: 24
94.252.192.0/20 maxlen: 20
94.252.208.0/20 maxlen: 20
94.252.224.0/20 maxlen: 20
94.252.240.0/21 maxlen: 21
94.252.248.0/22 maxlen: 22
94.252.252.0/22 maxlen: 22
178.52.0.0/20 maxlen: 20
178.52.0.0/21 maxlen: 21
178.52.8.0/21 maxlen: 21
178.52.16.0/20 maxlen: 20
178.52.16.0/21 maxlen: 21
178.52.24.0/21 maxlen: 21
178.52.32.0/20 maxlen: 20
178.52.32.0/21 maxlen: 21
178.52.40.0/21 maxlen: 21
178.52.48.0/20 maxlen: 20
178.52.48.0/21 maxlen: 21
178.52.56.0/21 maxlen: 21
178.52.64.0/20 maxlen: 20
178.52.64.0/21 maxlen: 21
178.52.72.0/21 maxlen: 21
178.52.80.0/20 maxlen: 20
178.52.80.0/21 maxlen: 21
178.52.88.0/21 maxlen: 21
178.52.96.0/20 maxlen: 20
178.52.96.0/21 maxlen: 21
178.52.104.0/21 maxlen: 21
178.52.112.0/20 maxlen: 20
178.52.112.0/21 maxlen: 21
178.52.120.0/21 maxlen: 21
178.52.128.0/20 maxlen: 20
178.52.128.0/21 maxlen: 21
178.52.136.0/21 maxlen: 21
178.52.144.0/20 maxlen: 20
178.52.144.0/21 maxlen: 21
178.52.152.0/21 maxlen: 21
178.52.160.0/20 maxlen: 20
178.52.160.0/21 maxlen: 21
178.52.168.0/21 maxlen: 21
178.52.176.0/20 maxlen: 20
178.52.176.0/21 maxlen: 21
178.52.184.0/21 maxlen: 21
178.52.192.0/20 maxlen: 20
178.52.192.0/21 maxlen: 21
178.52.200.0/21 maxlen: 21
178.52.208.0/20 maxlen: 20
178.52.208.0/21 maxlen: 21
178.52.216.0/21 maxlen: 21
178.52.224.0/20 maxlen: 20
178.52.224.0/21 maxlen: 21
178.52.232.0/21 maxlen: 21
178.52.240.0/20 maxlen: 20
178.52.240.0/21 maxlen: 21
178.52.248.0/21 maxlen: 21
185.136.144.0/22 maxlen: 22
188.139.128.0/20 maxlen: 20
188.139.144.0/20 maxlen: 20
188.139.160.0/20 maxlen: 20
188.139.176.0/20 maxlen: 20
188.139.192.0/20 maxlen: 20
188.139.208.0/20 maxlen: 20
188.139.224.0/20 maxlen: 20
188.139.240.0/20 maxlen: 20
2a00:b800::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 25 Sep 2024 09:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:28:6e:e3:85:7c:a4:2f:43:4f:2d:d0:f0:4a:38:2b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Sep 25 09:06:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19864cb05fdc95baa56c651141fc6a1d857b3c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:1f:d4:f9:61:9f:59:89:b4:c9:d0:66:76:
b5:1f:f3:81:4b:87:6c:66:a8:2e:f4:0a:a8:11:16:
60:4d:74:47:9e:ef:c3:6d:3b:38:bd:be:80:80:85:
23:b2:3b:cf:0b:ec:f5:c8:46:be:70:48:fb:69:cc:
dc:53:b4:86:ef:17:9a:f1:bd:a5:04:bc:f3:bf:6a:
1b:51:3f:9a:6b:78:24:eb:8e:66:ff:ac:2e:cd:9f:
7a:4f:db:f6:56:0d:d0:d7:03:ae:d4:af:cb:1d:19:
13:d2:e2:cf:7e:22:0d:6b:db:00:5a:db:5f:24:c9:
19:60:b2:68:07:14:bb:c4:66:8b:bf:a4:96:04:cf:
9f:5e:5f:49:81:86:7e:a9:a9:01:0b:7e:d6:99:4b:
fa:b1:32:73:02:e6:80:08:f1:0e:05:e4:ca:be:b6:
a0:61:71:21:54:8a:1f:d6:b4:07:ae:30:28:94:a8:
5f:1f:50:2f:e9:cb:a6:af:b3:14:bd:68:94:46:ac:
59:84:33:54:e3:eb:7f:e4:34:a0:3f:68:56:82:31:
ae:fb:f5:ed:9e:7c:fd:40:88:21:ed:e6:c2:bb:bd:
3d:a2:e3:65:53:b9:f3:04:f3:3a:55:67:34:09:f9:
10:90:f8:31:76:42:b7:99:ba:0c:2c:8f:db:42:84:
b2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:86:4C:B0:5F:DC:95:BA:A5:6C:65:11:41:FC:6A:1D:85:7B:3C:24
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/GYZMsF_clbqlbGURQfxqHYV7PCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.57.128.0/17
46.213.0.0/16
94.252.128.0/17
178.52.0.0/16
185.136.144.0/22
188.139.128.0/17
IPv6:
2a00:b800::/32
Signature Algorithm: sha256WithRSAEncryption
76:6b:6c:cd:a5:11:38:aa:5b:e5:9f:b3:58:4c:89:25:5c:c9:
f3:da:67:b0:c7:1d:29:e9:8a:8d:3e:d7:51:de:31:c9:f0:cb:
10:83:c8:f9:d7:49:46:a6:f3:14:18:1c:9e:e5:e4:4d:8e:c4:
3c:bb:20:1a:97:d7:96:f1:97:2e:20:8e:68:9d:54:77:14:65:
d3:00:99:e2:32:79:cb:39:55:b0:cf:2c:2a:73:a3:89:00:c4:
c3:3c:d8:8d:95:3f:32:0f:61:df:20:39:99:37:78:11:a6:8b:
1d:ec:c9:fe:d0:76:6d:7c:df:7d:47:c2:8d:27:fd:65:a8:e3:
f4:a3:fd:07:82:5a:37:de:cc:d3:1f:44:e4:25:aa:7e:45:98:
9e:52:6a:cf:f0:ec:dd:ab:93:34:5b:13:c5:fc:88:43:86:7b:
20:48:33:db:87:7f:fe:10:fb:77:4a:ef:85:74:6b:ec:53:99:
6e:43:91:6f:42:08:d5:11:cf:5f:41:5b:cb:f8:10:51:33:75:
29:d8:97:0f:a9:33:e4:7e:b7:31:ae:ed:c9:96:d0:fd:fc:2f:
bd:d6:cb:b3:41:71:fd:bf:82:e2:ce:5e:dc:98:25:4a:96:5b:
4e:5d:55:e4:52:d9:1b:4e:12:a1:15:42:ca:30:83:45:1d:f9:
c9:b5:fe:94
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAZIobuOFfKQvQ08t0PBKOCuiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDlkYTRmZmIxYmI2ZDI3M2RlMWJhZDVkYmJmMGQxZmY0
N2YwY2YwHhcNMjQwOTI1MDkwNjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTg2NGNiMDVmZGM5NWJhYTU2YzY1MTE0MWZjNmExZDg1N2IzYzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcsf1Plhn1mJtMnQZna1H/OBS4ds
Zqgu9AqoERZgTXRHnu/DbTs4vb6AgIUjsjvPC+z1yEa+cEj7aczcU7SG7xea8b2l
BLzzv2obUT+aa3gk645m/6wuzZ96T9v2Vg3Q1wOu1K/LHRkT0uLPfiINa9sAWttf
JMkZYLJoBxS7xGaLv6SWBM+fXl9JgYZ+qakBC37WmUv6sTJzAuaACPEOBeTKvrag
YXEhVIof1rQHrjAolKhfH1Av6cumr7MUvWiURqxZhDNU4+t/5DSgP2hWgjGu+/Xt
nnz9QIgh7ebCu709ouNlU7nzBPM6VWc0CfkQkPgxdkK3mboMLI/bQoSyEQIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFBmGTLBf3JW6pWxlEUH8ah2FezwkMB8GA1UdIwQY
MBaAFCTZ2k/7G7bSc94brV278NH/R/DPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2Yt
OGEwM2E3YzFmZTliLzEvR1laTXNGX2NsYnFsYkdVUlFmeHFIWVY3UENRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2YtOGEwM2E3YzFmZTli
LzEvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAoBAIAATAiAwQHLjmAAwMA
LtUDBAde/IADAwCyNAMEArmIkAMEB7yLgDANBAIAAjAHAwUAKgC4ADANBgkqhkiG
9w0BAQsFAAOCAQEAdmtszaUROKpb5Z+zWEyJJVzJ89pnsMcdKemKjT7XUd4xyfDL
EIPI+ddJRqbzFBgcnuXkTY7EPLsgGpfXlvGXLiCOaJ1UdxRl0wCZ4jJ5yzlVsM8s
KnOjiQDEwzzYjZU/Mg9h3yA5mTd4EaaLHezJ/tB2bXzffUfCjSf9Zajj9KP9B4Ja
N97M0x9E5CWqfkWYnlJqz/Ds3auTNFsTxfyIQ4Z7IEgz24d//hD7d0rvhXRr7FOZ
bkORb0II1RHPX0Fby/gQUTN1KdiXD6kz5H63Ma7tyZbQ/fwvvdbLs0Fx/b+C4s5e
3JglSpZbTl1V5FLZG04SoRVCyjCDRR35ybX+lA==
-----END CERTIFICATE-----
Generated at Fri May 9 11:53:41 2025 by rpki-client