Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/GSQPr9MafgfAeOW3vRBaKTUj4Do.roa
File: GSQPr9MafgfAeOW3vRBaKTUj4Do.roa (raw, json)
Hash identifier: oT7wczMSIOpMKjaWTS591kYNMjUgspaCzseyS1bqus0=
Subject key identifier: 19:24:0F:AF:D3:1A:7E:07:C0:78:E5:B7:BD:10:5A:29:35:23:E0:3A
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 018B1F3BD1449C03A302326C90B6B6944F1D
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/GSQPr9MafgfAeOW3vRBaKTUj4Do.roa
Signing time: Wed 11 Oct 2023 14:54:55 +0000
ROA not before: Wed 11 Oct 2023 14:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196755
IP address blocks: 157.143.248.0/21 maxlen: 21
178.157.24.0/23 maxlen: 23
178.157.18.0/23 maxlen: 23
178.157.20.0/22 maxlen: 22
80.251.108.0/22 maxlen: 22
178.157.28.0/22 maxlen: 22
80.251.110.0/23 maxlen: 23
178.157.26.0/23 maxlen: 23
80.251.108.0/23 maxlen: 23
217.181.252.0/23 maxlen: 23
178.157.40.0/22 maxlen: 22
178.157.44.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1f:3b:d1:44:9c:03:a3:02:32:6c:90:b6:b6:94:4f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Oct 11 14:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19240fafd31a7e07c078e5b7bd105a293523e03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a4:dc:59:d9:9c:8c:c6:e3:35:7f:7a:ae:64:
38:3c:29:00:d8:64:2f:ef:3c:7c:78:c7:6e:55:c6:
2e:8d:0e:9c:a3:08:f3:87:be:50:04:1e:15:b3:4d:
b6:1b:b2:b0:7d:34:c1:5c:a5:58:f3:95:4c:a7:3b:
83:92:44:28:22:e1:77:9d:55:f8:78:46:1f:20:a3:
66:06:81:4c:ee:49:84:c3:44:03:71:78:a1:8d:55:
4d:18:14:5b:dd:77:92:19:fe:a2:4c:56:5e:36:7f:
75:78:d3:8d:7b:b8:5f:10:82:02:f0:30:8c:ef:3a:
4d:8a:5c:6c:34:92:b6:4d:07:33:59:ca:38:5e:86:
c9:4e:e0:fe:08:4e:d6:53:df:e9:79:37:64:66:bf:
52:45:79:1c:d1:70:3e:0e:37:c6:93:35:ca:4c:b6:
83:e8:d2:40:f0:9e:28:c8:d9:ff:a2:ef:3a:3c:83:
4f:80:74:99:a6:d4:4c:0e:f2:34:62:c5:04:5d:dc:
7c:91:f2:80:17:22:d7:dd:9f:1c:d3:ea:db:a7:2c:
2d:c9:e3:dc:e9:57:4d:0a:9f:69:e0:33:48:01:a3:
ec:bf:ef:fa:7d:80:c2:ca:1d:bb:9a:3f:09:db:ee:
65:48:4c:33:02:bd:49:c1:49:ba:1f:f3:8a:f7:c4:
ea:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:24:0F:AF:D3:1A:7E:07:C0:78:E5:B7:BD:10:5A:29:35:23:E0:3A
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/GSQPr9MafgfAeOW3vRBaKTUj4Do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.251.108.0/22
157.143.248.0/21
178.157.18.0-178.157.31.255
178.157.40.0/21
217.181.252.0/23
Signature Algorithm: sha256WithRSAEncryption
98:61:5b:8d:6d:07:da:62:4e:c4:be:d7:1e:74:91:49:ac:06:
ec:38:1e:3d:fa:1e:0d:a2:f9:8f:c8:80:4d:15:00:a9:4a:6b:
c5:f9:9b:fb:56:4a:6e:f1:37:71:25:6f:b6:c7:54:b7:80:11:
11:58:77:1b:90:bf:50:fc:45:e5:f1:68:da:f8:b3:4b:50:3b:
01:c1:06:d0:e3:0d:72:3b:5f:9a:4b:fc:5c:e8:1a:1f:17:e8:
19:e1:b3:88:ca:4c:e5:22:85:60:0c:9c:d0:3c:39:e6:54:8d:
4d:ad:ab:0e:bd:91:34:db:a2:b7:e3:99:38:2b:51:16:64:bf:
b5:79:dc:35:0b:61:12:8b:1c:62:cb:3a:71:ca:b4:a8:12:c1:
b7:b7:a2:9a:9b:93:e8:32:79:0c:8c:55:ce:84:cd:fd:e8:11:
04:3c:c0:bc:d8:ef:7a:87:fa:59:50:5d:78:9e:79:74:bc:d1:
e4:9a:8a:9a:3a:81:c8:31:b0:16:23:f3:17:31:5c:86:38:36:
a4:b7:31:42:6c:55:f9:ce:ec:18:c4:18:04:97:af:c7:28:95:
a5:06:18:49:78:5d:68:0a:b9:1c:21:34:c8:f3:7c:a4:86:5a:
1a:af:42:14:dd:ba:31:03:0d:cf:91:77:bb:ec:74:97:59:ec:
0d:18:7d:80
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYsfO9FEnAOjAjJskLa2lE8dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNDc5YjgzYzUyMGQ3ODQ0NDVjMjQ4MjhiYWI2MzNmMGQ3
MDJjZjMwHhcNMjMxMDExMTQ1NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTI0MGZhZmQzMWE3ZTA3YzA3OGU1YjdiZDEwNWEyOTM1MjNlMDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqTcWdmcjMbjNX96rmQ4PCkA2GQv
7zx8eMduVcYujQ6cowjzh75QBB4Vs022G7KwfTTBXKVY85VMpzuDkkQoIuF3nVX4
eEYfIKNmBoFM7kmEw0QDcXihjVVNGBRb3XeSGf6iTFZeNn91eNONe7hfEIIC8DCM
7zpNilxsNJK2TQczWco4XobJTuD+CE7WU9/peTdkZr9SRXkc0XA+DjfGkzXKTLaD
6NJA8J4oyNn/ou86PINPgHSZptRMDvI0YsUEXdx8kfKAFyLX3Z8c0+rbpywtyePc
6VdNCp9p4DNIAaPsv+/6fYDCyh27mj8J2+5lSEwzAr1JwUm6H/OK98Tq5wIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFBkkD6/TGn4HwHjlt70QWik1I+A6MB8GA1UdIwQY
MBaAFPFHm4PFINeERFwkgourYz8NcCzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVlYmc4VWcxNFJFWENTQ2k2dGpQdzF3TFBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hOTdlMjEtYjVmZS00YTU2LWE5OGEt
YmRkNGFmNWYzNWQxLzEvR1NRUHI5TWFmZ2ZBZU9XM3ZSQmFLVFVqNERvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hOTdlMjEtYjVmZS00YTU2LWE5OGEtYmRkNGFmNWYzNWQx
LzEvOFVlYmc4VWcxNFJFWENTQ2k2dGpQdzF3TFBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCUPtsAwQD
nY/4MAwDBAGynRIDBAWynQADBAOynSgDBAHZtfwwDQYJKoZIhvcNAQELBQADggEB
AJhhW41tB9piTsS+1x50kUmsBuw4Hj36Hg2i+Y/IgE0VAKlKa8X5m/tWSm7xN3El
b7bHVLeAERFYdxuQv1D8ReXxaNr4s0tQOwHBBtDjDXI7X5pL/FzoGh8X6Bnhs4jK
TOUihWAMnNA8OeZUjU2tqw69kTTborfjmTgrURZkv7V53DULYRKLHGLLOnHKtKgS
wbe3opqbk+gyeQyMVc6Ezf3oEQQ8wLzY73qH+llQXXieeXS80eSaipo6gcgxsBYj
8xcxXIY4NqS3MUJsVfnO7BjEGASXr8colaUGGEl4XWgKuRwhNMjzfKSGWhqvQhTd
ujEDDc+Rd7vsdJdZ7A0YfYA=
-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:46 2024 by rpki-client on console-ams.rpki-client.org