Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/UQGK01_GulEp945hthBINWNCqsY.roa
File: UQGK01_GulEp945hthBINWNCqsY.roa (raw, json)
Hash identifier: 4ThaHqX0SHdwed9ijkVnR9enqu5C6B98XwFs7BN/M4Y=
Subject key identifier: 51:01:8A:D3:5F:C6:BA:51:29:F7:8E:61:B6:10:48:35:63:42:AA:C6
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86FB741EA4F2F99175D89FFBC37B316
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/UQGK01_GulEp945hthBINWNCqsY.roa
Signing time: Tue 02 Jan 2024 04:30:13 +0000
ROA not before: Tue 02 Jan 2024 04:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212396
IP address blocks: 45.85.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 09:41:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:b7:41:ea:4f:2f:99:17:5d:89:ff:bc:37:b3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51018ad35fc6ba5129f78e61b61048356342aac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:33:b1:fb:45:6e:ec:8c:9a:e6:15:56:c9:50:
91:4d:f7:14:21:22:65:55:bf:b5:64:4b:4f:f6:c7:
bc:c9:d6:68:d7:76:a8:d1:90:c0:6b:30:a4:47:a9:
cd:64:d6:4a:c1:f0:2b:28:a4:9a:88:b7:23:19:e9:
dd:2e:37:be:14:17:12:8d:b5:18:c8:f6:7f:15:6a:
b3:d9:b5:1c:d8:f7:62:39:01:f4:4c:07:8c:5b:e5:
99:b1:ad:7d:28:2c:78:f4:7b:bb:64:15:90:01:78:
dd:b6:65:67:21:89:cc:39:fa:e4:b2:ae:9f:6c:67:
45:04:4d:45:2a:2a:00:c7:75:e0:69:b2:69:44:02:
fe:20:be:ee:a0:7a:75:8d:01:2d:d3:96:b2:8a:f1:
f9:28:67:ef:92:0f:62:f0:70:02:47:6c:7f:7a:ad:
77:40:61:30:1f:f8:2b:1f:ed:a2:47:17:df:2e:44:
a3:fc:fa:27:0a:b5:fb:c7:db:f4:0f:77:c8:13:ed:
5c:9e:e3:06:5f:94:6d:64:c1:0f:b3:7a:33:b6:eb:
67:77:8b:77:d9:bd:d9:66:67:27:07:01:bb:66:ff:
c6:ed:a8:e2:80:7c:f4:da:25:81:f7:02:cf:06:23:
5d:ed:b6:43:40:bb:d5:70:83:29:dd:11:cb:5b:9a:
4e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:01:8A:D3:5F:C6:BA:51:29:F7:8E:61:B6:10:48:35:63:42:AA:C6
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/UQGK01_GulEp945hthBINWNCqsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.88.0/24
Signature Algorithm: sha256WithRSAEncryption
38:2e:db:7e:3a:e8:76:34:82:68:0c:70:6f:a4:69:1f:7d:8b:
96:22:4c:21:03:23:5f:cc:98:00:54:7a:00:3a:e2:f4:78:d6:
d5:c5:7b:82:d4:13:c1:82:79:81:f0:07:07:1a:b5:30:62:94:
a8:4b:0e:44:cf:80:a6:22:30:5c:44:8d:57:28:ca:02:50:3d:
30:5c:d9:c6:8e:eb:2a:42:05:f2:af:7c:54:ab:25:f5:e5:d9:
1c:ec:7d:d1:cc:bd:91:83:94:83:4b:0a:f3:80:ea:00:90:2a:
e2:51:75:fe:df:c2:d9:3d:78:e7:fb:f0:03:51:29:2e:97:a6:
20:3d:35:00:a8:f5:e5:e0:22:ed:ba:ce:c0:4a:13:ff:a0:45:
75:0f:29:04:0e:45:1f:2e:5d:1e:dd:1a:79:b0:e2:31:e7:ec:
38:23:15:49:9d:ba:54:1b:bc:4e:e8:46:8a:ca:b6:d6:12:4f:
06:71:e8:31:0b:c3:70:51:15:98:8a:60:ac:10:1e:4c:dc:2d:
2d:c4:47:3d:2d:b5:07:98:57:60:cf:56:fe:91:f0:77:02:ae:
29:e6:eb:3a:90:b8:94:24:82:dc:6a:10:83:d1:0a:52:3b:2b:
60:2e:8c:3b:4f:c0:4e:72:96:1f:ae:4c:d0:af:e3:31:b8:93:
d3:1b:36:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb7dB6k8vmRddif+8N7MWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjQwMTAyMDQzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTAxOGFkMzVmYzZiYTUxMjlmNzhlNjFiNjEwNDgzNTYzNDJhYWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjOx+0Vu7Iya5hVWyVCRTfcUISJl
Vb+1ZEtP9se8ydZo13ao0ZDAazCkR6nNZNZKwfArKKSaiLcjGendLje+FBcSjbUY
yPZ/FWqz2bUc2PdiOQH0TAeMW+WZsa19KCx49Hu7ZBWQAXjdtmVnIYnMOfrksq6f
bGdFBE1FKioAx3XgabJpRAL+IL7uoHp1jQEt05ayivH5KGfvkg9i8HACR2x/eq13
QGEwH/grH+2iRxffLkSj/PonCrX7x9v0D3fIE+1cnuMGX5RtZMEPs3oztutnd4t3
2b3ZZmcnBwG7Zv/G7ajigHz02iWB9wLPBiNd7bZDQLvVcIMp3RHLW5pOcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFEBitNfxrpRKfeOYbYQSDVjQqrGMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvVVFHSzAxX0d1bEVwOTQ1aHRoQklOV05DcXNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVVYMA0G
CSqGSIb3DQEBCwUAA4IBAQA4Ltt+Ouh2NIJoDHBvpGkffYuWIkwhAyNfzJgAVHoA
OuL0eNbVxXuC1BPBgnmB8AcHGrUwYpSoSw5Ez4CmIjBcRI1XKMoCUD0wXNnGjusq
QgXyr3xUqyX15dkc7H3RzL2Rg5SDSwrzgOoAkCriUXX+38LZPXjn+/ADUSkul6Yg
PTUAqPXl4CLtus7AShP/oEV1DykEDkUfLl0e3Rp5sOIx5+w4IxVJnbpUG7xO6EaK
yrbWEk8GcegxC8NwURWYimCsEB5M3C0txEc9LbUHmFdgz1b+kfB3Aq4p5us6kLiU
JILcahCD0QpSOytgLow7T8BOcpYfrkzQr+MxuJPTGzYZ
-----END CERTIFICATE-----
Generated at Tue Apr 2 14:44:02 2024 by rpki-client on console-ams.rpki-client.org