Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/GsvP1cBUVLD0IaMPmovaIIRH3iA.roa
File: GsvP1cBUVLD0IaMPmovaIIRH3iA.roa (raw, json)
Hash identifier: 9oligM9jVmi8n6ZrRLLSg+xywIHzIydbAIAcwXMLiCU=
Subject key identifier: 1A:CB:CF:D5:C0:54:54:B0:F4:21:A3:0F:9A:8B:DA:20:84:47:DE:20
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 01856FA6F17692E8D76ECF1DD290C9532D21
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/GsvP1cBUVLD0IaMPmovaIIRH3iA.roa
Signing time: Sun 01 Jan 2023 23:24:49 +0000
ROA not before: Sun 01 Jan 2023 23:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202931
IP address blocks: 178.175.172.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:f1:76:92:e8:d7:6e:cf:1d:d2:90:c9:53:2d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jan 1 23:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1acbcfd5c05454b0f421a30f9a8bda208447de20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:aa:bb:8e:c8:b1:53:3a:b9:2b:bb:13:1e:4f:
b2:d7:f0:86:8e:21:b1:5a:29:cb:f8:fe:80:36:b9:
76:9b:bd:a6:c0:15:3d:98:43:a6:8a:25:5c:91:e8:
d0:26:3f:59:f5:57:3b:4e:e2:c7:07:0f:d0:95:36:
bc:59:dc:58:6c:e4:ad:a5:91:0a:31:ce:93:39:6b:
f6:d6:8a:5c:72:e4:f2:87:0b:b4:ba:c6:48:d6:a3:
a3:ad:54:97:f4:18:01:30:8f:b9:74:f9:c3:1c:4a:
3e:ea:6a:3a:35:52:c6:a3:d7:33:6a:e0:5e:29:ea:
45:64:98:cd:6c:ff:fc:36:27:c4:cd:65:1f:7d:fd:
d2:0c:f1:73:7d:86:e1:4e:12:d0:e5:8c:58:f9:45:
92:37:aa:4d:58:68:d8:08:e9:ce:3c:c8:c4:90:d8:
91:52:64:cc:af:0a:94:4d:c6:17:c8:6c:ea:7f:69:
b7:ad:db:36:2f:f8:b7:b7:89:fc:07:46:09:6f:d9:
24:38:0e:88:c6:eb:4e:24:fe:7f:c9:dc:d6:18:40:
6f:ba:ca:a8:cc:1c:4a:39:60:a0:3c:e6:a1:af:f7:
37:79:52:e5:c3:2e:12:a7:d8:5f:bd:c9:db:6b:2b:
ef:16:84:e4:2c:d6:13:98:ed:ed:f9:dd:82:61:9a:
44:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CB:CF:D5:C0:54:54:B0:F4:21:A3:0F:9A:8B:DA:20:84:47:DE:20
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/GsvP1cBUVLD0IaMPmovaIIRH3iA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.172.0/23
Signature Algorithm: sha256WithRSAEncryption
03:be:b7:5b:e7:91:7f:a1:6f:cd:a7:38:e3:7d:cb:3d:4f:07:
12:f5:e2:2f:a4:56:28:0e:15:f5:26:aa:3a:55:7e:88:1b:b3:
c8:4b:9e:8f:ca:bc:59:98:40:55:20:07:20:a7:39:0a:c8:79:
39:85:27:8e:b2:ff:f4:43:2b:b7:5a:c7:f9:7e:17:c4:d8:d7:
ad:8f:8e:08:71:45:9d:48:04:4b:e9:e6:a2:fc:bc:b1:d7:85:
49:86:cc:23:8c:b1:75:4d:e9:8a:39:ee:be:9b:02:9c:b1:ad:
5d:e9:d5:b9:99:6c:17:3a:99:08:5c:0d:e4:5d:bf:81:ed:fe:
2f:7a:ec:3e:8b:50:bd:b7:f5:7b:7c:75:ad:04:af:8f:2d:ed:
13:e9:c8:7c:dd:9f:2f:f3:a2:2f:28:41:76:f0:8e:f8:c0:bd:
ed:c5:5b:77:dd:e9:e8:4e:79:15:1b:0a:a4:a1:f8:17:b0:f6:
f5:e7:39:31:b9:24:74:38:f0:3c:82:c5:d0:eb:bc:2d:d1:1a:
2f:3d:24:df:ab:71:c7:f3:03:ad:29:a0:b0:86:ce:33:fd:3e:
6a:f9:92:2d:f0:92:f5:16:3b:af:58:09:c5:87:e2:9d:1f:51:
aa:12:2f:ad:18:21:43:c4:14:06:06:96:8f:f4:47:f5:5a:6e:
34:55:6a:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvpvF2kujXbs8d0pDJUy0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0
ZGFiN2YwHhcNMjMwMTAxMjMyNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWNiY2ZkNWMwNTQ1NGIwZjQyMWEzMGY5YThiZGEyMDg0NDdkZTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaq7jsixUzq5K7sTHk+y1/CGjiGx
WinL+P6ANrl2m72mwBU9mEOmiiVckejQJj9Z9Vc7TuLHBw/QlTa8WdxYbOStpZEK
Mc6TOWv21opccuTyhwu0usZI1qOjrVSX9BgBMI+5dPnDHEo+6mo6NVLGo9czauBe
KepFZJjNbP/8NifEzWUfff3SDPFzfYbhThLQ5YxY+UWSN6pNWGjYCOnOPMjEkNiR
UmTMrwqUTcYXyGzqf2m3rds2L/i3t4n8B0YJb9kkOA6IxutOJP5/ydzWGEBvusqo
zBxKOWCgPOahr/c3eVLlwy4Sp9hfvcnbayvvFoTkLNYTmO3t+d2CYZpEeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBrLz9XAVFSw9CGjD5qL2iCER94gMB8GA1UdIwQY
MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct
OWRkNmU4OGZjYzhkLzEvR3N2UDFjQlVWTEQwSWFNUG1vdmFJSVJIM2lBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk
LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsq+sMA0G
CSqGSIb3DQEBCwUAA4IBAQADvrdb55F/oW/Npzjjfcs9TwcS9eIvpFYoDhX1Jqo6
VX6IG7PIS56PyrxZmEBVIAcgpzkKyHk5hSeOsv/0Qyu3Wsf5fhfE2Netj44IcUWd
SARL6eai/Lyx14VJhswjjLF1TemKOe6+mwKcsa1d6dW5mWwXOpkIXA3kXb+B7f4v
euw+i1C9t/V7fHWtBK+PLe0T6ch83Z8v86IvKEF28I74wL3txVt33enoTnkVGwqk
ofgXsPb15zkxuSR0OPA8gsXQ67wt0RovPSTfq3HH8wOtKaCwhs4z/T5q+ZIt8JL1
FjuvWAnFh+KdH1GqEi+tGCFDxBQGBpaP9Ef1Wm40VWrW
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:28 2023 by rpki-client on console-fra.rpki-client.org