Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/GuEya9p9MHLjLQguV5D8nqLUtQg.roa
File: GuEya9p9MHLjLQguV5D8nqLUtQg.roa (raw, json)
Hash identifier: ouwcf7UjL5/JyAmcmkxz8JNWCtF4kaBDhpp/f1DW8k0=
Subject key identifier: 1A:E1:32:6B:DA:7D:30:72:E3:2D:08:2E:57:90:FC:9E:A2:D4:B5:08
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0190CAD55CB66CD8A808B05F761468133E93
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/GuEya9p9MHLjLQguV5D8nqLUtQg.roa
Signing time: Fri 19 Jul 2024 11:51:38 +0000
ROA not before: Fri 19 Jul 2024 11:51:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.155.242.0/24 maxlen: 24
194.143.214.0/24 maxlen: 24
195.114.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 06:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ca:d5:5c:b6:6c:d8:a8:08:b0:5f:76:14:68:13:3e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jul 19 11:51:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ae1326bda7d3072e32d082e5790fc9ea2d4b508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5e:13:26:1f:a6:94:04:95:8f:c6:d1:79:e4:
c1:d9:02:1a:42:79:e1:86:82:60:79:39:f5:7f:aa:
0c:b5:ab:c2:3e:8c:b2:d0:08:de:d2:3d:33:46:5e:
d5:24:c5:30:3f:3a:65:6e:8e:bf:ff:ac:38:e3:06:
62:d3:d3:e1:d2:87:d0:84:42:97:b3:14:26:cb:26:
64:57:aa:13:bd:fd:94:42:3b:6a:28:59:69:1f:e0:
0b:4d:1f:a5:72:a1:f3:89:85:4b:d8:35:cb:42:35:
0a:0e:1f:16:1d:ce:00:86:cc:90:8a:a2:b5:b6:13:
aa:83:42:d4:90:fe:25:53:af:a2:9d:0c:89:34:83:
71:9d:8b:59:dd:b6:42:ec:f6:30:bb:56:af:c7:2e:
c5:12:8f:c4:d5:a7:90:42:61:1b:76:b8:e7:7e:5b:
ba:38:34:bb:35:29:a2:75:f0:05:bf:26:99:e9:cb:
1d:69:64:26:67:68:e0:06:d7:2e:ea:8d:95:fc:ef:
27:7f:44:d9:07:95:fa:0f:a5:13:9d:04:1b:5f:f7:
be:cc:48:16:f8:cd:11:dd:f1:c4:ed:00:b2:8d:37:
9a:cb:71:98:ae:c0:6b:12:02:69:df:d1:7b:de:ba:
0c:4f:e1:48:88:ad:e1:b8:e8:a1:23:2e:06:52:49:
ba:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E1:32:6B:DA:7D:30:72:E3:2D:08:2E:57:90:FC:9E:A2:D4:B5:08
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/GuEya9p9MHLjLQguV5D8nqLUtQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.242.0/24
194.143.214.0/24
195.114.195.0/24
Signature Algorithm: sha256WithRSAEncryption
35:10:f0:98:ff:b5:b8:af:42:8b:db:fe:0a:55:9a:eb:f6:e9:
13:b9:e9:8a:68:1a:f2:a4:71:14:56:4e:8a:33:ea:59:0a:09:
05:32:f8:78:3a:d1:9f:58:45:fb:54:48:d9:58:ca:99:e5:98:
c9:9e:24:f9:5a:32:21:fa:37:5c:59:1c:e5:28:1f:03:3b:84:
5c:4a:22:c8:df:72:72:55:74:0f:4b:43:27:fa:0d:87:eb:c1:
58:a2:58:fd:e9:ad:0f:4a:11:a5:3e:8b:3d:f1:8a:44:de:07:
96:ab:60:a7:04:eb:65:31:ab:04:83:b6:e0:5f:c3:2c:b8:1f:
98:73:31:8a:c9:93:0c:7a:b0:52:9d:80:e5:78:9b:6a:e5:26:
a8:05:31:2e:65:72:0f:cc:55:65:8d:ab:ce:01:4d:30:74:09:
98:dd:17:2a:49:0a:57:f1:0c:bb:01:e1:37:e4:e4:18:fd:6e:
fd:f6:67:06:41:df:e5:1a:06:d7:52:98:dc:f5:65:2f:b5:f9:
00:4e:4e:98:7a:b6:b5:99:98:ab:46:65:84:f3:ef:45:9d:64:
63:fa:e5:d0:32:36:ec:c5:fd:77:62:d9:54:55:d9:e1:69:d4:
31:a3:34:5e:a1:31:5c:58:04:26:6e:e2:da:20:b6:00:e0:d3:
82:39:67:e7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZDK1Vy2bNioCLBfdhRoEz6TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjQwNzE5MTE1MTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWUxMzI2YmRhN2QzMDcyZTMyZDA4MmU1NzkwZmM5ZWEyZDRiNTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV4TJh+mlASVj8bReeTB2QIaQnnh
hoJgeTn1f6oMtavCPoyy0Aje0j0zRl7VJMUwPzplbo6//6w44wZi09Ph0ofQhEKX
sxQmyyZkV6oTvf2UQjtqKFlpH+ALTR+lcqHziYVL2DXLQjUKDh8WHc4AhsyQiqK1
thOqg0LUkP4lU6+inQyJNINxnYtZ3bZC7PYwu1avxy7FEo/E1aeQQmEbdrjnflu6
ODS7NSmidfAFvyaZ6csdaWQmZ2jgBtcu6o2V/O8nf0TZB5X6D6UTnQQbX/e+zEgW
+M0R3fHE7QCyjTeay3GYrsBrEgJp39F73roMT+FIiK3huOihIy4GUkm66QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBrhMmvafTBy4y0ILleQ/J6i1LUIMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvR3VFeWE5cDlNSExqTFFndVY1RDhucUxVdFFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZvyAwQA
wo/WAwQAw3LDMA0GCSqGSIb3DQEBCwUAA4IBAQA1EPCY/7W4r0KL2/4KVZrr9ukT
uemKaBrypHEUVk6KM+pZCgkFMvh4OtGfWEX7VEjZWMqZ5ZjJniT5WjIh+jdcWRzl
KB8DO4RcSiLI33JyVXQPS0Mn+g2H68FYolj96a0PShGlPos98YpE3geWq2CnBOtl
MasEg7bgX8MsuB+YczGKyZMMerBSnYDleJtq5SaoBTEuZXIPzFVljavOAU0wdAmY
3RcqSQpX8Qy7AeE35OQY/W799mcGQd/lGgbXUpjc9WUvtfkATk6Yera1mZirRmWE
8+9FnWRj+uXQMjbsxf13YtlUVdnhadQxozReoTFcWAQmbuLaILYA4NOCOWfn
-----END CERTIFICATE-----
Generated at Mon Jul 22 09:06:46 2024 by rpki-client on console-fra.rpki-client.org