Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/gu-lVbuGtb9lbvQzbLxUvocmIio.roa
File: gu-lVbuGtb9lbvQzbLxUvocmIio.roa (raw, json)
Hash identifier: JAG9mu2OdizOQpGlmOcWFnDbywLzpjIR8Dps888QtLk=
Subject key identifier: 82:EF:A5:55:BB:86:B5:BF:65:6E:F4:33:6C:BC:54:BE:87:26:22:2A
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018CC3B6C7FE6E428A70647A473EE4847C85
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/gu-lVbuGtb9lbvQzbLxUvocmIio.roa
Signing time: Mon 01 Jan 2024 06:29:44 +0000
ROA not before: Mon 01 Jan 2024 06:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57844
IP address blocks: 45.141.208.0/22 maxlen: 24
45.150.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 11:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:c7:fe:6e:42:8a:70:64:7a:47:3e:e4:84:7c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 1 06:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82efa555bb86b5bf656ef4336cbc54be8726222a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:9d:d1:7d:23:01:f8:10:67:5b:d4:02:32:
ef:1e:55:10:23:9d:1e:96:71:55:61:1e:bb:8f:8f:
00:71:20:57:ab:ed:e9:12:8f:3c:3c:a7:26:42:b2:
16:cd:1c:4d:69:6e:2a:6d:84:8b:6d:68:72:1b:15:
3e:12:b9:54:36:97:fe:e4:6c:76:fb:c8:3c:13:80:
26:75:88:fa:de:90:b1:dc:f2:ac:52:e1:e1:5b:51:
e0:12:01:76:b5:93:58:17:d0:a2:87:86:17:a4:aa:
d8:c5:37:ff:d0:89:2a:5a:d9:08:d2:4c:51:b1:3b:
65:38:cf:59:e8:b8:32:ba:fe:9d:87:31:27:38:15:
66:95:77:ad:03:e0:27:a2:89:b5:50:9e:91:96:81:
e3:17:1f:86:44:38:c4:b5:4f:ce:be:be:98:a4:79:
3a:4c:19:73:c5:96:7f:59:f9:58:e3:4a:0c:e3:97:
c1:7d:e0:8c:48:2f:58:de:bf:6a:cf:fa:9f:46:64:
a5:09:32:e8:95:b4:d8:dd:09:49:07:67:2d:46:e8:
76:0b:12:c8:29:78:41:62:ba:ec:5e:44:6e:9d:bd:
13:8a:8e:c5:51:5d:35:34:14:cf:6b:0b:f9:9c:37:
e6:40:52:04:85:ba:21:81:a2:2c:66:b8:a7:26:e7:
38:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EF:A5:55:BB:86:B5:BF:65:6E:F4:33:6C:BC:54:BE:87:26:22:2A
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/gu-lVbuGtb9lbvQzbLxUvocmIio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.208.0/22
45.150.8.0/22
Signature Algorithm: sha256WithRSAEncryption
68:ee:1e:03:5a:ce:91:83:7b:99:46:47:70:9a:85:b0:56:b9:
85:1e:0a:91:96:1f:36:96:a4:ca:71:c9:a8:9a:23:93:48:4a:
37:d0:56:34:03:6f:d6:35:e6:2f:f2:b4:d8:ec:a4:b5:27:f3:
40:1b:6b:7d:10:c8:60:60:95:76:3c:3d:a5:94:21:1a:44:ca:
01:fb:ae:f5:cf:22:cc:e1:f2:5c:1c:85:1a:4a:08:c4:05:1d:
e3:8c:5e:32:d8:27:8d:b1:9a:24:99:47:43:73:9d:47:b8:4c:
c5:b0:4c:b0:cc:59:a5:74:d1:50:4e:fe:51:26:5a:c2:7c:84:
fd:75:69:67:0b:76:38:a6:ee:88:90:78:7d:7b:c2:98:91:22:
f9:84:c6:36:ab:14:be:fb:79:04:e8:06:6c:57:4f:c6:ad:1c:
ae:52:09:9b:20:df:f0:c1:fb:14:d3:6d:4d:b6:09:ab:ba:45:
7c:1b:5e:0f:01:22:5a:cb:f3:ca:73:38:2d:d9:e1:7b:cf:45:
64:e2:91:70:12:3b:6a:82:a6:37:a9:e7:57:a1:9d:60:5f:86:
b1:ac:44:d5:e8:33:bc:b3:1f:43:67:4b:8b:1c:5c:cd:e0:68:
66:c3:96:f6:67:3c:6f:f9:cd:6e:c0:5f:e6:96:fb:f5:c3:6f:
93:57:00:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 16:50:26 2024 by rpki-client on console-ams.rpki-client.org