Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/GsWRZq3RGPCJWf_Kp-S4AKs9b1U.roa
File: GsWRZq3RGPCJWf_Kp-S4AKs9b1U.roa (raw, json)
Hash identifier: RUR6m+8QZjLryrmpk63tIdJ3o3kANZx1bIs+3Ydl/WM=
Subject key identifier: 1A:C5:91:66:AD:D1:18:F0:89:59:FF:CA:A7:E4:B8:00:AB:3D:6F:55
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 01889C157507604B3F25C5A536EB16AAB808
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/GsWRZq3RGPCJWf_Kp-S4AKs9b1U.roa
Signing time: Thu 08 Jun 2023 17:37:11 +0000
ROA not before: Thu 08 Jun 2023 17:37:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 217.113.22.0/23 maxlen: 23
217.113.18.0/23 maxlen: 23
217.113.26.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9c:15:75:07:60:4b:3f:25:c5:a5:36:eb:16:aa:b8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jun 8 17:37:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ac59166add118f08959ffcaa7e4b800ab3d6f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1e:00:62:e9:8b:a1:55:98:c7:34:38:f1:d4:
4f:84:1c:b0:5b:45:ae:8d:c7:ba:85:fc:9e:e1:47:
68:4e:02:1c:de:31:db:6d:8a:d7:ff:39:1d:a4:ce:
06:5d:46:f6:d3:c9:69:d4:c8:a2:4f:cb:76:91:02:
13:fa:a8:72:e5:cf:8b:a5:21:a8:26:23:e7:b4:39:
98:16:22:80:e5:62:bb:a6:0b:37:50:8b:c0:94:78:
71:59:0b:23:43:88:5d:a2:4e:b3:ae:5f:67:af:2a:
e6:a3:aa:f5:cf:f1:2e:e2:37:b0:a5:19:dc:55:dd:
35:65:22:f4:9f:1b:a5:ec:5a:15:07:2a:22:fc:62:
c2:33:58:b8:c8:c8:00:e3:d1:d0:2b:63:60:1f:0c:
28:57:f5:bc:fc:cc:cb:45:d5:8c:02:c5:91:a8:ec:
5d:49:8c:23:3b:be:8c:1b:60:e7:0b:10:1c:06:55:
1d:7d:67:8d:0f:d4:eb:71:ae:35:4e:5b:be:a7:ea:
8e:df:25:23:ca:8e:52:8e:83:6b:e1:53:9d:ac:3f:
03:e0:02:be:74:e8:be:7c:e1:46:44:dd:ee:b4:7b:
7a:58:11:e5:0b:1d:06:b3:04:ba:27:36:98:c5:c5:
2d:16:da:c5:11:32:80:c6:52:97:bb:42:a4:8d:37:
1b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C5:91:66:AD:D1:18:F0:89:59:FF:CA:A7:E4:B8:00:AB:3D:6F:55
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/GsWRZq3RGPCJWf_Kp-S4AKs9b1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.18.0/23
217.113.22.0/23
217.113.26.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:63:eb:2c:c7:6d:e5:a0:b3:4d:8b:ec:7f:68:f1:7a:3b:0c:
c4:b5:40:94:87:cc:f7:ee:1c:c5:4d:85:d9:35:f2:ab:d7:c3:
a4:81:61:97:40:f9:e1:65:b9:fe:56:98:c2:2d:f5:d6:d3:b4:
92:04:d1:63:01:85:73:97:ed:ba:59:6a:f9:a5:1d:eb:74:97:
27:6e:da:d3:13:b8:b7:79:51:ec:55:f8:80:78:00:c1:12:2a:
3d:b9:fb:0d:5a:06:01:a1:11:24:06:1a:66:4c:58:0a:88:09:
cf:05:ae:67:b9:a7:0c:be:41:1c:06:32:ce:a3:17:cb:14:bb:
7f:14:34:f0:3d:75:22:ae:f9:54:2e:fa:34:9b:14:41:6e:8d:
af:48:b9:80:a1:0b:45:dd:8e:13:c1:87:18:89:6c:db:e1:73:
77:27:17:90:1d:8f:d7:55:b7:9f:8b:70:c5:be:58:19:7d:43:
66:c8:cd:bf:14:36:c8:85:c9:43:ce:1e:6b:d9:48:9c:ab:83:
86:e9:d4:5f:23:64:9d:ca:ec:13:c2:1f:ac:40:cc:ab:61:f2:
2b:9c:7a:7d:fc:aa:bd:0a:84:bd:d1:48:ab:6c:93:ba:e9:56:
f1:20:37:8f:01:72:54:c6:4d:56:1e:03:7f:5b:16:61:a8:d8:
fc:e0:8c:3b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYicFXUHYEs/JcWlNusWqrgIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjMwNjA4MTczNzExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWM1OTE2NmFkZDExOGYwODk1OWZmY2FhN2U0YjgwMGFiM2Q2ZjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh4AYumLoVWYxzQ48dRPhBywW0Wu
jce6hfye4UdoTgIc3jHbbYrX/zkdpM4GXUb208lp1MiiT8t2kQIT+qhy5c+LpSGo
JiPntDmYFiKA5WK7pgs3UIvAlHhxWQsjQ4hdok6zrl9nryrmo6r1z/Eu4jewpRnc
Vd01ZSL0nxul7FoVByoi/GLCM1i4yMgA49HQK2NgHwwoV/W8/MzLRdWMAsWRqOxd
SYwjO76MG2DnCxAcBlUdfWeND9Trca41Tlu+p+qO3yUjyo5SjoNr4VOdrD8D4AK+
dOi+fOFGRN3utHt6WBHlCx0GswS6JzaYxcUtFtrFETKAxlKXu0KkjTcb6QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBrFkWat0RjwiVn/yqfkuACrPW9VMB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvR3NXUlpxM1JHUENKV2ZfS3AtUzRBS3M5YjFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQB2XESAwQB
2XEWAwQB2XEaMA0GCSqGSIb3DQEBCwUAA4IBAQCqY+ssx23loLNNi+x/aPF6OwzE
tUCUh8z37hzFTYXZNfKr18OkgWGXQPnhZbn+VpjCLfXW07SSBNFjAYVzl+26WWr5
pR3rdJcnbtrTE7i3eVHsVfiAeADBEio9ufsNWgYBoREkBhpmTFgKiAnPBa5nuacM
vkEcBjLOoxfLFLt/FDTwPXUirvlULvo0mxRBbo2vSLmAoQtF3Y4TwYcYiWzb4XN3
JxeQHY/XVbefi3DFvlgZfUNmyM2/FDbIhclDzh5r2Uicq4OG6dRfI2SdyuwTwh+s
QMyrYfIrnHp9/Kq9CoS90UirbJO66VbxIDePAXJUxk1WHgN/WxZhqNj84Iw7
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org