Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1-GBzTQVlJlDtHQUyCuDrepG2uPU.roa
File: 1-GBzTQVlJlDtHQUyCuDrepG2uPU.roa (raw, json)
Hash identifier: 24AttdykiKRimAvYzAgys9GBFmkN1TTtFeNs6/DFqDE=
Subject key identifier: F8:60:73:4D:05:65:26:50:ED:1D:05:32:0A:E0:EB:7A:91:B6:B8:F5
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0186C16D0716A0DA4EFBD971E66C486312CE
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1-GBzTQVlJlDtHQUyCuDrepG2uPU.roa
Signing time: Wed 08 Mar 2023 13:33:13 +0000
ROA not before: Wed 08 Mar 2023 13:33:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206804
IP address blocks: 45.139.48.0/23 maxlen: 24
45.86.201.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c1:6d:07:16:a0:da:4e:fb:d9:71:e6:6c:48:63:12:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Mar 8 13:33:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f860734d05652650ed1d05320ae0eb7a91b6b8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:06:d1:a4:07:7e:53:5b:97:bc:e4:f6:06:f0:
36:db:e9:84:42:ea:e7:13:8f:7d:b1:dc:35:9e:fa:
49:63:92:71:42:e7:50:3b:0a:67:4c:61:e8:26:2b:
d6:b3:a2:66:e7:d5:bf:fe:e5:0a:50:d1:ae:ba:63:
e6:51:7d:96:e8:4a:32:90:10:08:5d:ce:2f:97:cd:
f0:08:62:0c:26:82:d4:54:0f:f3:43:8f:62:0f:73:
47:f2:ec:fe:7c:9e:57:cd:52:d1:bd:05:f7:84:e1:
3d:7c:ed:eb:09:b3:11:b5:d8:66:99:4b:c5:29:88:
c8:fd:e0:16:09:e8:bf:c1:dd:58:a4:53:3d:b4:7f:
6a:34:bc:16:47:c5:5f:f4:d6:4b:d5:d1:9d:5d:cd:
d3:3f:83:6f:62:64:56:29:55:74:d7:4e:bb:99:ef:
9c:b2:16:5e:07:c4:18:3d:61:51:4f:3d:f0:0f:54:
f4:d5:f7:95:ea:f7:26:22:73:48:9b:09:44:ff:a8:
17:6b:f3:8f:0a:55:5b:83:36:bc:8e:2e:fd:47:39:
5c:17:d4:4f:24:d9:ca:ac:78:12:14:13:01:e9:03:
94:2a:72:11:c5:70:2b:7a:46:f9:8f:2f:85:74:9e:
b6:7b:18:06:f9:12:dc:8c:07:d5:d0:ab:fd:b1:3a:
19:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:60:73:4D:05:65:26:50:ED:1D:05:32:0A:E0:EB:7A:91:B6:B8:F5
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1-GBzTQVlJlDtHQUyCuDrepG2uPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.201.0/24
45.139.48.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:af:2b:65:3f:76:12:d7:07:88:f2:29:71:a7:bc:19:29:07:
69:ea:d4:80:cd:c0:36:bc:40:f7:87:db:9e:78:c8:62:bb:b6:
d8:0c:4b:fd:bd:0a:38:0f:93:d7:8b:c1:7d:ce:42:92:da:14:
33:14:27:d6:90:36:34:24:48:2e:1b:a1:6e:3e:05:e6:d1:74:
16:4b:76:0d:45:7e:12:da:8d:a1:58:1c:4c:6b:fb:da:5d:2f:
e6:56:94:31:d2:21:9c:66:97:30:88:44:a1:f7:ec:65:eb:f1:
16:de:c7:bc:10:e5:4d:f0:60:92:5f:d7:90:86:b7:e4:b6:d5:
57:f1:62:03:7d:78:6c:14:47:76:f9:1f:b9:ba:16:a6:dc:e0:
a4:92:45:ec:e5:e4:b8:8d:d5:23:6b:63:24:e7:c4:e3:ca:ba:
0e:8a:8d:dd:d2:9f:56:a9:e5:b5:83:83:35:4b:11:dc:77:03:
19:e5:33:ca:89:22:ca:2b:7f:60:41:59:9f:43:9d:de:04:7b:
8a:20:f4:a1:70:91:0a:bc:88:a2:1e:a3:db:1d:0d:9d:36:6a:
21:6a:41:18:c1:ee:fd:a9:48:f6:4f:3e:be:69:ff:1a:8b:da:
78:28:1e:fd:bd:a1:fd:e7:d6:39:85:94:50:31:ea:5a:44:19:
af:dd:e8:46
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAYbBbQcWoNpO+9lx5mxIYxLOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjMwMzA4MTMzMzEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODYwNzM0ZDA1NjUyNjUwZWQxZDA1MzIwYWUwZWI3YTkxYjZiOGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigbRpAd+U1uXvOT2BvA22+mEQurn
E499sdw1nvpJY5JxQudQOwpnTGHoJivWs6Jm59W//uUKUNGuumPmUX2W6EoykBAI
Xc4vl83wCGIMJoLUVA/zQ49iD3NH8uz+fJ5XzVLRvQX3hOE9fO3rCbMRtdhmmUvF
KYjI/eAWCei/wd1YpFM9tH9qNLwWR8Vf9NZL1dGdXc3TP4NvYmRWKVV01067me+c
shZeB8QYPWFRTz3wD1T01feV6vcmInNImwlE/6gXa/OPClVbgza8ji79RzlcF9RP
JNnKrHgSFBMB6QOUKnIRxXArekb5jy+FdJ62exgG+RLcjAfV0Kv9sToZMwIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPhgc00FZSZQ7R0FMgrg63qRtrj1MB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvMS1HQnpUUVZsSmxEdEhRVXlDdURyZXBHMnVQVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYTAvZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYz
ZS8xL3NWVUFuRDNrSWN4T1o3bXBya0k3czEzZ3VTWS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAC1WyQME
AS2LMDANBgkqhkiG9w0BAQsFAAOCAQEAO68rZT92EtcHiPIpcae8GSkHaerUgM3A
NrxA94fbnnjIYru22AxL/b0KOA+T14vBfc5CktoUMxQn1pA2NCRILhuhbj4F5tF0
Fkt2DUV+EtqNoVgcTGv72l0v5laUMdIhnGaXMIhEoffsZevxFt7HvBDlTfBgkl/X
kIa35LbVV/FiA314bBRHdvkfuboWptzgpJJF7OXkuI3VI2tjJOfE48q6DoqN3dKf
VqnltYODNUsR3HcDGeUzyokiyit/YEFZn0Od3gR7iiD0oXCRCryIoh6j2x0NnTZq
IWpBGMHu/alI9k8+vmn/GovaeCge/b2h/efWOYWUUDHqWkQZr93oRg==
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:57 2024 by rpki-client on console-fra.rpki-client.org