Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/gcq0larb_6eJTnecutHBcrYD3DQ.roa
File: gcq0larb_6eJTnecutHBcrYD3DQ.roa (raw, json)
Hash identifier: wszLa7R3J52iwZIouwy74+rEVV+JyWUcvU6el5m0lkg=
Subject key identifier: 81:CA:B4:95:AA:DB:FF:A7:89:4E:77:9C:BA:D1:C1:72:B6:03:DC:34
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018D11FCC311AC1E5EDA30D0982FCF7C7A53
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/gcq0larb_6eJTnecutHBcrYD3DQ.roa
Signing time: Tue 16 Jan 2024 11:16:34 +0000
ROA not before: Tue 16 Jan 2024 11:16:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47757
IP address blocks: 45.94.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 13:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:11:fc:c3:11:ac:1e:5e:da:30:d0:98:2f:cf:7c:7a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 16 11:16:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81cab495aadbffa7894e779cbad1c172b603dc34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:f1:7c:53:55:d1:e7:c2:02:f0:8b:8f:7f:
4d:0c:e8:ce:c9:8e:42:e0:f8:c3:ff:64:8d:9e:58:
d7:81:de:41:34:5c:ec:14:f9:d1:df:f0:6c:6b:75:
8a:22:cb:ca:64:f6:be:94:33:76:4d:f5:47:a8:10:
2f:04:d4:b6:16:8c:eb:62:d1:d9:ae:7e:40:09:ed:
43:eb:3b:da:79:39:98:40:e7:fc:86:34:25:b4:ea:
3f:bc:1e:0b:cb:24:a9:fc:7b:ff:fe:57:d9:e1:2a:
2b:ac:a8:88:1b:dc:72:c1:e7:65:ad:bd:e5:7b:45:
01:e6:ce:62:6b:fe:ee:02:17:95:77:ff:1f:e1:3d:
34:f3:a7:93:c0:f3:ac:2d:09:f1:18:93:69:14:86:
78:4b:8e:0c:22:ae:8d:6b:07:4d:e8:e7:5d:25:dd:
01:47:bd:dc:52:02:0f:98:dd:ee:e6:2a:51:f1:ac:
ca:02:2f:43:5f:ef:17:a1:20:a6:0d:af:b9:6f:c5:
c6:44:c0:86:11:74:7e:5f:ec:62:43:ed:67:2e:f3:
d8:44:93:8c:d7:aa:c2:1f:ef:0d:b9:2b:ad:5d:b1:
48:a0:ac:88:42:a7:8d:b8:7b:c3:11:53:d1:83:e9:
d3:3e:2b:c9:0f:fc:dc:23:00:6a:88:a6:bf:c3:c3:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CA:B4:95:AA:DB:FF:A7:89:4E:77:9C:BA:D1:C1:72:B6:03:DC:34
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/gcq0larb_6eJTnecutHBcrYD3DQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.170.0/24
Signature Algorithm: sha256WithRSAEncryption
53:32:8b:6d:af:f2:7c:f8:39:53:2c:25:35:91:45:27:a7:61:
86:e0:33:2c:d1:4d:b8:22:6a:99:95:7c:37:29:29:4f:7a:fb:
42:78:a8:02:9e:7c:b3:21:f3:b5:eb:84:14:14:f1:28:6d:2a:
65:2b:74:02:20:7e:24:f7:2f:02:9d:84:88:98:28:16:47:24:
e2:bf:69:02:d0:e8:c1:f5:81:76:ea:77:0b:b4:ce:4c:ed:87:
72:e7:0d:12:08:25:00:6a:97:15:7a:4c:4c:8f:b6:8f:1e:51:
38:40:7a:3b:f4:08:8b:d1:c7:04:89:05:9e:40:63:f9:08:c8:
04:bf:94:bd:9c:10:11:99:e8:b1:93:c6:0c:15:b1:44:d6:45:
9a:cd:89:87:ec:3c:3f:a1:5d:e0:f3:fb:5a:cf:9f:fc:5c:57:
37:2d:f8:6b:22:72:ab:f4:7f:6c:ef:6e:21:85:85:e6:72:75:
51:73:70:1c:21:19:fc:8b:f3:37:a3:b4:5d:af:d9:aa:98:3b:
8e:b6:ae:99:80:f7:3d:17:6a:d3:0b:92:f2:70:ab:2d:6c:31:
23:37:0e:13:a4:b3:1a:d2:35:8a:7d:40:d0:8d:92:65:83:24:
3c:1f:cf:de:57:db:2f:b3:f6:e9:85:82:57:5d:32:27:ba:13:
d8:e2:a6:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0R/MMRrB5e2jDQmC/PfHpTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQwMTE2MTExNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWNhYjQ5NWFhZGJmZmE3ODk0ZTc3OWNiYWQxYzE3MmI2MDNkYzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3DxfFNV0efCAvCLj39NDOjOyY5C
4PjD/2SNnljXgd5BNFzsFPnR3/Bsa3WKIsvKZPa+lDN2TfVHqBAvBNS2FozrYtHZ
rn5ACe1D6zvaeTmYQOf8hjQltOo/vB4LyySp/Hv//lfZ4SorrKiIG9xywedlrb3l
e0UB5s5ia/7uAheVd/8f4T0086eTwPOsLQnxGJNpFIZ4S44MIq6NawdN6OddJd0B
R73cUgIPmN3u5ipR8azKAi9DX+8XoSCmDa+5b8XGRMCGEXR+X+xiQ+1nLvPYRJOM
16rCH+8NuSutXbFIoKyIQqeNuHvDEVPRg+nTPivJD/zcIwBqiKa/w8P89QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIHKtJWq2/+niU53nLrRwXK2A9w0MB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvZ2NxMGxhcmJfNmVKVG5lY3V0SEJjcllEM0RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV6qMA0G
CSqGSIb3DQEBCwUAA4IBAQBTMottr/J8+DlTLCU1kUUnp2GG4DMs0U24ImqZlXw3
KSlPevtCeKgCnnyzIfO164QUFPEobSplK3QCIH4k9y8CnYSImCgWRyTiv2kC0OjB
9YF26ncLtM5M7Ydy5w0SCCUAapcVekxMj7aPHlE4QHo79AiL0ccEiQWeQGP5CMgE
v5S9nBARmeixk8YMFbFE1kWazYmH7Dw/oV3g8/taz5/8XFc3LfhrInKr9H9s724h
hYXmcnVRc3AcIRn8i/M3o7Rdr9mqmDuOtq6ZgPc9F2rTC5LycKstbDEjNw4TpLMa
0jWKfUDQjZJlgyQ8H8/eV9svs/bphYJXXTInuhPY4qZE
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:19 2024 by rpki-client on console-ams.rpki-client.org