Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/GTiWjbEVEDQNs1xFt-O7G7c-KUI.roa
File: GTiWjbEVEDQNs1xFt-O7G7c-KUI.roa (raw, json)
Hash identifier: FNz1NvIHL7ozJ+fGUnqVl2rITO9w9Q6dBcCdGxyNrhM=
Subject key identifier: 19:38:96:8D:B1:15:10:34:0D:B3:5C:45:B7:E3:BB:1B:B7:3E:29:42
Certificate issuer: /CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Certificate serial: 018571B0AEA81DAA1899A542887A9FDAA313
Authority key identifier: A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/GTiWjbEVEDQNs1xFt-O7G7c-KUI.roa
Signing time: Mon 02 Jan 2023 08:54:42 +0000
ROA not before: Mon 02 Jan 2023 08:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210085
IP address blocks: 178.17.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:ae:a8:1d:aa:18:99:a5:42:88:7a:9f:da:a3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Validity
Not Before: Jan 2 08:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1938968db11510340db35c45b7e3bb1bb73e2942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:da:f4:1d:a0:da:a8:5c:d5:09:72:be:77:e6:
12:ea:97:96:4c:f7:62:26:8c:f0:87:bd:27:9c:3f:
59:1a:2a:52:49:e1:d3:ef:ef:ae:f1:79:62:1a:ea:
bc:81:68:49:11:99:3e:8c:db:66:3e:92:a0:76:81:
2f:3b:19:96:03:93:4f:b8:cb:2c:a3:df:0f:d5:b1:
b1:16:b9:8d:23:91:c9:4d:e7:80:7d:12:b8:c4:3a:
57:56:a5:d6:f3:9f:3e:9f:44:79:4b:5b:91:e8:9d:
31:cf:50:15:ba:4b:89:1d:c2:a9:b7:17:63:27:ab:
a6:8c:a2:df:0f:67:31:3b:cd:39:a8:57:3d:0c:dd:
09:6c:79:24:da:72:a3:05:6e:ed:d4:a8:4f:55:ac:
0e:77:5d:e9:71:12:22:28:08:20:fa:d1:fe:8e:7d:
70:5e:0b:32:2b:d7:25:b7:df:1b:a5:90:99:81:f0:
66:8e:54:5a:dd:67:7a:6c:1a:5c:b0:85:df:51:d5:
d0:d4:1f:60:20:d1:c9:49:d1:c9:94:85:33:2f:bc:
54:c8:5f:41:6c:7c:22:03:86:d0:82:8a:03:ea:c9:
8e:90:1a:72:e9:42:07:87:ca:fd:e5:43:5e:3c:aa:
dd:42:e3:4c:9e:b3:9d:71:d0:e3:17:6d:d1:d5:cd:
41:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:38:96:8D:B1:15:10:34:0D:B3:5C:45:B7:E3:BB:1B:B7:3E:29:42
X509v3 Authority Key Identifier:
keyid:A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/GTiWjbEVEDQNs1xFt-O7G7c-KUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.216.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:39:8b:a4:3d:89:21:30:05:32:5f:b2:e0:1e:8c:93:a7:41:
20:42:6e:3b:b9:29:0c:12:d9:2f:2d:9c:9f:88:56:28:9e:af:
f2:52:76:2e:3c:5c:81:52:02:bb:94:f0:28:30:83:b6:65:72:
2d:2f:84:aa:0e:b6:4c:ec:d6:9b:8c:a1:2c:80:10:35:56:00:
80:90:ee:25:64:a7:fb:35:2b:fd:ac:38:a1:19:ab:82:c8:9e:
6d:e9:fb:96:45:bb:e0:04:7a:1e:a7:39:01:48:47:9c:18:08:
94:30:03:cd:c9:3c:57:d3:ae:01:96:f6:db:5f:cb:08:37:ee:
5f:be:a6:67:0c:22:5d:92:0a:21:c2:2c:55:6a:c0:55:8e:0f:
d1:22:db:bd:16:cb:91:01:79:32:ac:ef:14:2b:a7:b1:03:a6:
4b:91:b5:18:54:b4:e5:b6:9b:80:9b:ad:2d:c8:42:7e:c1:81:
68:05:8f:b5:61:cf:1b:e9:42:86:72:cf:c1:f7:93:f8:b7:cf:
b9:d6:9e:4e:98:f8:ea:8e:28:7a:c8:f1:9a:dd:6a:0e:3b:b2:
77:aa:6b:47:bb:d8:31:b6:69:e8:cc:72:27:a1:c2:08:e0:bd:
18:eb:e0:cc:2d:b3:b7:f7:f8:59:8a:f7:4c:e4:8e:a3:d0:2d:
a2:b1:8e:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxsK6oHaoYmaVCiHqf2qMTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYjA0NzdmOWQwOWEyYzc0ZjRjNDU5ZTgwYjcyOWFmZWVi
MzEyZDQwHhcNMjMwMTAyMDg1NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTM4OTY4ZGIxMTUxMDM0MGRiMzVjNDViN2UzYmIxYmI3M2UyOTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtr0HaDaqFzVCXK+d+YS6peWTPdi
Jozwh70nnD9ZGipSSeHT7++u8XliGuq8gWhJEZk+jNtmPpKgdoEvOxmWA5NPuMss
o98P1bGxFrmNI5HJTeeAfRK4xDpXVqXW858+n0R5S1uR6J0xz1AVukuJHcKptxdj
J6umjKLfD2cxO805qFc9DN0JbHkk2nKjBW7t1KhPVawOd13pcRIiKAgg+tH+jn1w
XgsyK9clt98bpZCZgfBmjlRa3Wd6bBpcsIXfUdXQ1B9gINHJSdHJlIUzL7xUyF9B
bHwiA4bQgooD6smOkBpy6UIHh8r95UNePKrdQuNMnrOdcdDjF23R1c1BDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBk4lo2xFRA0DbNcRbfjuxu3PilCMB8GA1UdIwQY
MBaAFKGwR3+dCaLHT0xFnoC3Ka/usxLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2JCSGY1MEpvc2RQVEVXZWdMY3ByLTZ6RXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNDUxYjctOTA5MS00YTI3LWFiOTEt
MzQ4ZjlmZmJkODgzLzEvR1RpV2piRVZFRFFOczF4RnQtTzdHN2MtS1VJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8yNDUxYjctOTA5MS00YTI3LWFiOTEtMzQ4ZjlmZmJkODgz
LzEvb2JCSGY1MEpvc2RQVEVXZWdMY3ByLTZ6RXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshHYMA0G
CSqGSIb3DQEBCwUAA4IBAQAfOYukPYkhMAUyX7LgHoyTp0EgQm47uSkMEtkvLZyf
iFYonq/yUnYuPFyBUgK7lPAoMIO2ZXItL4SqDrZM7NabjKEsgBA1VgCAkO4lZKf7
NSv9rDihGauCyJ5t6fuWRbvgBHoepzkBSEecGAiUMAPNyTxX064BlvbbX8sIN+5f
vqZnDCJdkgohwixVasBVjg/RItu9FsuRAXkyrO8UK6exA6ZLkbUYVLTltpuAm60t
yEJ+wYFoBY+1Yc8b6UKGcs/B95P4t8+51p5OmPjqjih6yPGa3WoOO7J3qmtHu9gx
tmnozHInocII4L0Y6+DMLbO39/hZivdM5I6j0C2isY5p
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:31 2024 by rpki-client on console-ams.rpki-client.org