Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/GiIfHkjOyh1D3Oq31G_VHt5noZM.roa
File: GiIfHkjOyh1D3Oq31G_VHt5noZM.roa (raw, json)
Hash identifier: +KScbsSrJyKJegR+QHrfFUGYYjpPyBdvtkhLJXpyvCA=
Subject key identifier: 1A:22:1F:1E:48:CE:CA:1D:43:DC:EA:B7:D4:6F:D5:1E:DE:67:A1:93
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0188A4D96AD29364168D659103C0547C949B
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/GiIfHkjOyh1D3Oq31G_VHt5noZM.roa
Signing time: Sat 10 Jun 2023 10:28:12 +0000
ROA not before: Sat 10 Jun 2023 10:28:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210474
IP address blocks: 213.176.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a4:d9:6a:d2:93:64:16:8d:65:91:03:c0:54:7c:94:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 10 10:28:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a221f1e48ceca1d43dceab7d46fd51ede67a193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ab:78:9f:91:46:e1:c4:bc:a5:6c:c3:25:bb:
93:a8:a8:cf:5c:3f:8d:57:77:34:17:86:3f:63:44:
23:4b:dc:28:8e:ec:b0:03:30:03:5a:ed:1a:f6:0e:
b5:13:ab:47:67:5c:d3:f0:9f:9a:bc:72:df:3e:d5:
cd:00:73:2a:c7:f3:bd:e9:7d:5d:04:6a:cf:ea:06:
80:aa:90:b4:2c:36:04:8f:c5:39:90:e0:8b:8c:d2:
f7:49:ee:0f:fe:fd:8b:db:47:1a:0c:ef:c2:22:14:
0f:e2:10:fc:5d:a0:72:e9:47:91:33:4e:41:26:38:
40:22:fa:04:ae:34:2f:62:3f:e3:c7:c0:82:60:e6:
1e:6a:7a:d3:22:11:a0:23:89:99:2d:62:50:bc:fa:
2c:ae:7f:25:99:ea:ac:32:b1:e1:42:f3:0f:72:4f:
ca:4b:b0:b7:97:8a:8c:07:74:da:36:2b:94:55:db:
f3:4b:a0:b0:42:d0:37:a4:f4:db:8a:e3:18:c2:25:
63:0c:39:0e:7f:01:fa:18:dc:02:c1:99:53:3e:63:
64:b9:88:a8:4c:2a:8e:20:96:87:30:3f:ea:5f:6c:
31:cb:7c:d2:d6:18:a6:46:ab:bf:57:ba:cf:60:01:
cb:bc:96:cf:03:4d:20:86:9b:99:ae:c2:cf:81:7f:
41:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:22:1F:1E:48:CE:CA:1D:43:DC:EA:B7:D4:6F:D5:1E:DE:67:A1:93
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/GiIfHkjOyh1D3Oq31G_VHt5noZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.1.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:16:08:b7:f1:d1:ac:1b:10:19:01:4b:1e:77:c1:d6:6e:71:
ac:51:fb:d0:1d:aa:fb:83:67:a7:ea:d5:3f:24:01:df:3e:b6:
21:3a:8d:ec:b3:3f:f2:72:5b:c7:c5:1c:b6:a9:20:cd:e6:d9:
25:59:fd:47:69:55:2b:7f:d7:15:5e:92:d8:93:2d:5e:77:2a:
74:75:f3:1d:66:22:26:b8:c4:05:1c:36:dd:7d:c3:dd:4c:45:
60:20:30:42:43:78:95:96:7f:fd:b6:54:50:25:9d:aa:7a:13:
65:d8:a0:c1:fa:60:b6:a0:3c:1d:91:51:36:6f:9b:10:d4:0f:
47:71:e2:de:39:37:57:9c:90:32:28:79:68:1c:48:dd:f1:6c:
dd:5f:26:3d:05:a1:76:2b:82:d0:da:a9:fe:03:58:81:83:ed:
3b:1c:bc:75:9f:3d:20:e0:a4:da:aa:74:30:9e:22:4f:24:be:
5e:a7:ad:7f:fe:22:2a:12:16:dd:a5:94:29:11:5e:5d:a4:43:
e4:f3:e1:7d:23:ee:de:32:33:ad:18:e4:c4:f9:a4:be:d3:bf:
86:2c:42:60:56:55:44:55:0d:8a:d9:27:c6:ff:7b:b7:46:38:
55:fc:42:ca:94:f5:0d:4a:2a:e0:14:26:9d:ab:34:db:39:10:
05:3f:43:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYik2WrSk2QWjWWRA8BUfJSbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMwNjEwMTAyODEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTIyMWYxZTQ4Y2VjYTFkNDNkY2VhYjdkNDZmZDUxZWRlNjdhMTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjat4n5FG4cS8pWzDJbuTqKjPXD+N
V3c0F4Y/Y0QjS9wojuywAzADWu0a9g61E6tHZ1zT8J+avHLfPtXNAHMqx/O96X1d
BGrP6gaAqpC0LDYEj8U5kOCLjNL3Se4P/v2L20caDO/CIhQP4hD8XaBy6UeRM05B
JjhAIvoErjQvYj/jx8CCYOYeanrTIhGgI4mZLWJQvPosrn8lmeqsMrHhQvMPck/K
S7C3l4qMB3TaNiuUVdvzS6CwQtA3pPTbiuMYwiVjDDkOfwH6GNwCwZlTPmNkuYio
TCqOIJaHMD/qX2wxy3zS1himRqu/V7rPYAHLvJbPA00ghpuZrsLPgX9BpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBoiHx5IzsodQ9zqt9Rv1R7eZ6GTMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvR2lJZkhrak95aDFEM09xMzFHX1ZIdDVub1pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bABMA0G
CSqGSIb3DQEBCwUAA4IBAQBaFgi38dGsGxAZAUsed8HWbnGsUfvQHar7g2en6tU/
JAHfPrYhOo3ssz/yclvHxRy2qSDN5tklWf1HaVUrf9cVXpLYky1edyp0dfMdZiIm
uMQFHDbdfcPdTEVgIDBCQ3iVln/9tlRQJZ2qehNl2KDB+mC2oDwdkVE2b5sQ1A9H
ceLeOTdXnJAyKHloHEjd8WzdXyY9BaF2K4LQ2qn+A1iBg+07HLx1nz0g4KTaqnQw
niJPJL5ep61//iIqEhbdpZQpEV5dpEPk8+F9I+7eMjOtGOTE+aS+07+GLEJgVlVE
VQ2K2SfG/3u3RjhV/ELKlPUNSirgFCadqzTbORAFP0PK
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:23 2023 by rpki-client on console-ams.rpki-client.org