Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/GR_0C-6lsIaBGc9OX4XhrS1gYJ4.roa
File: GR_0C-6lsIaBGc9OX4XhrS1gYJ4.roa (raw, json)
Hash identifier: wpUX5T4bc3H3O6DVQiB+5VjO1bRPq0ZKJ4FgHAnZakU=
Subject key identifier: 19:1F:F4:0B:EE:A5:B0:86:81:19:CF:4E:5F:85:E1:AD:2D:60:60:9E
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 01856EC22C4094FDC94C41B85B60C526C5F3
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/GR_0C-6lsIaBGc9OX4XhrS1gYJ4.roa
Signing time: Sun 01 Jan 2023 19:14:57 +0000
ROA not before: Sun 01 Jan 2023 19:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396356
IP address blocks: 45.132.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:2c:40:94:fd:c9:4c:41:b8:5b:60:c5:26:c5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 1 19:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=191ff40beea5b0868119cf4e5f85e1ad2d60609e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:86:56:f1:68:f2:8d:fe:a1:72:36:a5:bd:
0a:66:93:08:ff:c1:5b:3a:d4:78:37:d2:92:3d:93:
8a:1d:d1:b9:ee:13:cb:c0:22:c7:27:cd:96:9a:94:
29:da:00:e0:e7:67:a9:d2:f1:57:1f:51:f4:44:0e:
f9:dc:1e:2b:3e:0b:bf:87:7d:31:cf:84:11:6d:8c:
83:97:34:84:b7:b6:94:3e:a6:7e:4d:e6:99:2d:76:
08:53:2f:67:e1:d7:b5:c3:a7:24:b2:32:44:c5:6f:
c2:07:06:ae:de:e1:d8:c7:ae:2d:55:d4:80:9e:65:
bd:4d:e8:5a:8e:ba:c5:26:81:9f:e3:e0:80:3f:b2:
ea:94:d9:fe:78:e6:5c:b2:6f:58:fd:7c:74:be:5c:
53:c0:70:6f:c6:93:a3:f7:7f:6b:5e:80:aa:80:3c:
45:64:53:3d:8c:9d:f5:f7:f6:5a:1d:d6:a4:ed:6c:
99:52:b1:c9:60:a7:67:dd:f0:9f:74:f7:dd:d8:ec:
8b:5a:81:dd:58:26:39:62:33:2a:49:b5:28:9f:b7:
04:ec:62:e3:34:c5:87:6e:19:b7:5c:cf:48:47:48:
6c:b0:55:c4:e7:51:25:52:34:6f:ac:8d:2e:ac:90:
5c:6d:38:3a:e0:90:f5:56:93:14:71:15:54:ed:e4:
c5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1F:F4:0B:EE:A5:B0:86:81:19:CF:4E:5F:85:E1:AD:2D:60:60:9E
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/GR_0C-6lsIaBGc9OX4XhrS1gYJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.115.0/24
Signature Algorithm: sha256WithRSAEncryption
90:5d:01:9b:55:e1:58:ef:e8:e1:fd:c7:63:2d:7f:e2:17:56:
f7:80:c5:39:85:f7:9a:bb:13:de:21:f8:eb:2f:54:ff:80:d7:
21:14:02:dd:5a:3d:de:0e:23:07:3a:fc:4e:bd:23:b3:30:b7:
85:cf:f7:56:c7:f3:17:bb:9f:9a:19:21:e2:3f:d7:23:d7:9c:
c5:cf:0d:e0:cb:46:16:82:68:70:e8:75:92:0b:f6:3a:25:ba:
b9:d6:55:cb:e8:5a:e2:58:1d:de:30:c5:2c:90:8b:48:63:c4:
b9:0d:9b:50:df:84:5e:d8:1b:59:7e:67:48:96:1b:27:e7:bb:
8c:05:05:ae:5f:cc:e1:5f:7a:a6:d0:f1:4b:e1:c4:57:dc:25:
db:0e:c1:bf:a7:93:a8:af:8d:5c:94:5c:04:5f:22:ce:8a:11:
4c:b7:71:23:73:be:91:6b:4d:71:c5:7f:24:ea:a6:5f:21:bf:
56:07:3a:7a:00:4c:bb:44:d7:ab:4f:f1:18:56:09:4e:b0:14:
29:07:96:4e:d2:c0:00:db:8a:55:06:58:42:cc:c8:69:70:8e:
0e:20:cc:a3:a3:8d:47:3d:a2:c5:8d:95:c2:71:98:3b:7f:4e:
a5:ed:54:50:69:df:2f:30:54:58:c3:3c:3a:cc:54:22:69:0a:
a9:f5:d7:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuwixAlP3JTEG4W2DFJsXzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz
MTk4M2MwHhcNMjMwMTAxMTkxNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTFmZjQwYmVlYTViMDg2ODExOWNmNGU1Zjg1ZTFhZDJkNjA2MDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGOGVvFo8o3+oXI2pb0KZpMI/8Fb
OtR4N9KSPZOKHdG57hPLwCLHJ82WmpQp2gDg52ep0vFXH1H0RA753B4rPgu/h30x
z4QRbYyDlzSEt7aUPqZ+TeaZLXYIUy9n4de1w6cksjJExW/CBwau3uHYx64tVdSA
nmW9TehajrrFJoGf4+CAP7LqlNn+eOZcsm9Y/Xx0vlxTwHBvxpOj939rXoCqgDxF
ZFM9jJ319/ZaHdak7WyZUrHJYKdn3fCfdPfd2OyLWoHdWCY5YjMqSbUon7cE7GLj
NMWHbhm3XM9IR0hssFXE51ElUjRvrI0urJBcbTg64JD1VpMUcRVU7eTF4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBkf9AvupbCGgRnPTl+F4a0tYGCeMB8GA1UdIwQY
MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt
NTlhZTA5ZWRiZWI5LzEvR1JfMEMtNmxzSWFCR2M5T1g0WGhyUzFnWUo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5
LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYRzMA0G
CSqGSIb3DQEBCwUAA4IBAQCQXQGbVeFY7+jh/cdjLX/iF1b3gMU5hfeauxPeIfjr
L1T/gNchFALdWj3eDiMHOvxOvSOzMLeFz/dWx/MXu5+aGSHiP9cj15zFzw3gy0YW
gmhw6HWSC/Y6Jbq51lXL6FriWB3eMMUskItIY8S5DZtQ34Re2BtZfmdIlhsn57uM
BQWuX8zhX3qm0PFL4cRX3CXbDsG/p5Oor41clFwEXyLOihFMt3Ejc76Ra01xxX8k
6qZfIb9WBzp6AEy7RNerT/EYVglOsBQpB5ZO0sAA24pVBlhCzMhpcI4OIMyjo41H
PaLFjZXCcZg7f06l7VRQad8vMFRYwzw6zFQiaQqp9dc2
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:40 2024 by rpki-client on console-fra.rpki-client.org