Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GNAm08y_ywtMztKHrmW3qRS1d2Y.roa
File: GNAm08y_ywtMztKHrmW3qRS1d2Y.roa (raw, json)
Hash identifier: A0DGuXlYR11yr50yMtEM91OWZgH5SCl9rKsMTPMm5FA=
Subject key identifier: 18:D0:26:D3:CC:BF:CB:0B:4C:CE:D2:87:AE:65:B7:A9:14:B5:77:66
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0189CF5234E3312C2D561B19A3000C5350EF
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GNAm08y_ywtMztKHrmW3qRS1d2Y.roa
Signing time: Mon 07 Aug 2023 09:26:58 +0000
ROA not before: Mon 07 Aug 2023 09:26:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199854
IP address blocks: 45.145.227.0/24 maxlen: 24
45.86.153.0/24 maxlen: 24
204.11.0.0/24 maxlen: 24
45.134.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:52:34:e3:31:2c:2d:56:1b:19:a3:00:0c:53:50:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Aug 7 09:26:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18d026d3ccbfcb0b4cced287ae65b7a914b57766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:48:0e:7c:04:95:37:67:0b:03:47:3c:fd:45:
4c:b9:e3:c8:54:f6:cd:e2:78:2f:bf:0d:9d:e6:bf:
d7:cb:ae:2e:e9:5d:ad:36:5d:b0:2c:f5:fa:c0:2b:
5b:5e:52:0c:76:6e:35:20:d4:87:7c:5f:26:f6:18:
fd:4c:cd:4d:09:7b:11:eb:4d:7b:7b:36:fa:e3:cd:
ea:6e:f1:98:ac:72:56:25:a3:cc:9d:df:1b:e1:df:
29:13:20:88:c7:02:6a:82:e1:85:35:c7:43:e2:30:
ca:02:f7:bf:34:0c:c8:c9:ac:ff:f3:5b:56:71:66:
28:af:b9:1d:ff:2a:e5:70:6b:33:f0:f4:23:c0:00:
7b:db:96:ba:2b:95:eb:83:63:5c:6f:ac:2c:55:bb:
42:d3:2a:60:f4:01:67:48:e0:e8:5e:4f:ce:fd:b4:
52:37:92:be:5f:b8:77:7e:54:4e:a8:0c:77:c0:d3:
34:e0:41:44:d7:7a:5d:86:c4:28:bb:09:ed:25:b2:
6d:37:f3:d3:11:0e:2f:3a:6a:0d:56:2e:f3:6e:ec:
59:5c:d6:06:4b:60:e2:2b:94:59:2c:ab:f8:c3:77:
bb:19:dc:26:92:30:a7:1c:d9:53:87:c2:5e:2e:1b:
23:7f:0b:b1:23:5a:0f:9e:89:64:1f:b2:13:d1:6a:
a7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D0:26:D3:CC:BF:CB:0B:4C:CE:D2:87:AE:65:B7:A9:14:B5:77:66
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GNAm08y_ywtMztKHrmW3qRS1d2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.153.0/24
45.134.111.0/24
45.145.227.0/24
204.11.0.0/24
Signature Algorithm: sha256WithRSAEncryption
72:b6:da:e5:55:60:2e:d5:c5:a2:7a:46:22:97:99:ed:a6:06:
ba:1f:6b:90:b2:bd:3f:17:05:14:0c:10:52:07:a1:91:6e:3d:
af:b0:23:2c:13:ce:46:32:bc:46:da:f3:80:ff:c8:a8:62:b8:
ad:19:71:48:db:41:65:c9:20:e7:fb:3d:91:43:41:9e:a8:27:
b1:3d:0f:eb:48:f7:7e:a8:95:66:90:f0:63:fe:a7:26:de:88:
bc:c1:9a:e4:09:9c:0f:3c:a1:06:c0:86:fa:2e:76:11:61:f9:
07:d3:5f:c1:32:eb:fd:7e:95:68:47:b4:5b:83:42:02:39:62:
66:f4:5c:7a:af:46:c5:84:1b:28:f0:53:b9:5c:c8:dc:5c:3d:
2a:0f:f9:d1:10:d6:d1:59:7a:a4:bd:a9:c1:50:b4:ef:9c:50:
4a:33:3a:d9:77:df:be:09:ce:b5:f7:c6:db:98:53:d0:b3:c1:
b3:a3:37:a9:8d:ea:58:e3:01:c9:fb:5e:9a:53:65:84:24:1b:
29:7d:b6:e8:51:64:2a:9c:1f:e0:5a:15:7f:8d:7e:c0:5c:60:
93:2f:28:71:d6:bc:02:58:99:7d:4a:cf:1d:e1:ad:a9:a5:6c:
79:7e:f4:e8:9f:ff:f3:b2:a6:bc:14:b6:1d:ab:a9:d4:a2:d1:
50:fc:7c:5f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYnPUjTjMSwtVhsZowAMU1DvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjMwODA3MDkyNjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGQwMjZkM2NjYmZjYjBiNGNjZWQyODdhZTY1YjdhOTE0YjU3NzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEgOfASVN2cLA0c8/UVMuePIVPbN
4ngvvw2d5r/Xy64u6V2tNl2wLPX6wCtbXlIMdm41INSHfF8m9hj9TM1NCXsR6017
ezb6483qbvGYrHJWJaPMnd8b4d8pEyCIxwJqguGFNcdD4jDKAve/NAzIyaz/81tW
cWYor7kd/yrlcGsz8PQjwAB725a6K5Xrg2Ncb6wsVbtC0ypg9AFnSODoXk/O/bRS
N5K+X7h3flROqAx3wNM04EFE13pdhsQouwntJbJtN/PTEQ4vOmoNVi7zbuxZXNYG
S2DiK5RZLKv4w3e7GdwmkjCnHNlTh8JeLhsjfwuxI1oPnolkH7IT0WqnsQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBjQJtPMv8sLTM7Sh65lt6kUtXdmMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvR05BbTA4eV95d3RNenRLSHJtVzNxUlMxZDJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALVaZAwQA
LYZvAwQALZHjAwQAzAsAMA0GCSqGSIb3DQEBCwUAA4IBAQByttrlVWAu1cWiekYi
l5ntpga6H2uQsr0/FwUUDBBSB6GRbj2vsCMsE85GMrxG2vOA/8ioYritGXFI20Fl
ySDn+z2RQ0GeqCexPQ/rSPd+qJVmkPBj/qcm3oi8wZrkCZwPPKEGwIb6LnYRYfkH
01/BMuv9fpVoR7Rbg0ICOWJm9Fx6r0bFhBso8FO5XMjcXD0qD/nRENbRWXqkvanB
ULTvnFBKMzrZd9++Cc6198bbmFPQs8GzozepjepY4wHJ+16aU2WEJBspfbboUWQq
nB/gWhV/jX7AXGCTLyhx1rwCWJl9Ss8d4a2ppWx5fvTon//zsqa8FLYdq6nUotFQ
/Hxf
-----END CERTIFICATE-----
Generated at Mon Dec 11 17:08:49 2023 by rpki-client on console-ams.rpki-client.org