Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/qcUr1vowMhzqAr7xs6elTfN2lKM.roa
File: qcUr1vowMhzqAr7xs6elTfN2lKM.roa (raw, json)
Hash identifier: d0633WEnXXPhD9FOK8AWtln0fNnHFUM9D0W9kxaLzGo=
Subject key identifier: A9:C5:2B:D6:FA:30:32:1C:EA:02:BE:F1:B3:A7:A5:4D:F3:76:94:A3
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 018770AF14FFEEB715A68A067E21530FF1FD
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/qcUr1vowMhzqAr7xs6elTfN2lKM.roa
Signing time: Tue 11 Apr 2023 14:18:54 +0000
ROA not before: Tue 11 Apr 2023 14:18:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5607
IP address blocks: 188.220.0.0/14 maxlen: 14
51.146.0.0/16 maxlen: 16
90.192.0.0/11 maxlen: 11
93.96.224.0/19 maxlen: 19
87.80.0.0/15 maxlen: 15
51.198.0.0/15 maxlen: 15
176.255.240.0/24 maxlen: 24
176.255.242.0/24 maxlen: 24
176.255.241.0/24 maxlen: 24
51.190.0.0/15 maxlen: 15
151.224.0.0/13 maxlen: 13
5.64.0.0/13 maxlen: 13
51.194.0.0/16 maxlen: 16
93.96.0.0/17 maxlen: 17
46.64.0.0/15 maxlen: 15
94.192.0.0/14 maxlen: 14
78.86.0.0/16 maxlen: 16
51.182.0.0/15 maxlen: 15
149.241.0.0/16 maxlen: 16
51.241.0.0/16 maxlen: 16
176.248.0.0/13 maxlen: 13
2.120.0.0/13 maxlen: 13
2.216.0.0/13 maxlen: 13
51.186.0.0/15 maxlen: 15
94.0.0.0/12 maxlen: 12
93.96.128.0/18 maxlen: 18
51.19.0.0/16 maxlen: 16
176.24.0.0/14 maxlen: 14
78.105.0.0/16 maxlen: 16
2a02:c78::/29 maxlen: 29
2a02:c7b::/32 maxlen: 32
2a02:c7a::/32 maxlen: 32
2a02:c7d::/33 maxlen: 33
2a02:c7d:8000::/33 maxlen: 33
2a02:c7c::/30 maxlen: 30
2a02:c7f::/33 maxlen: 33
2a02:c7f:8000::/33 maxlen: 33
2a02:c7e::/33 maxlen: 33
2a02:c7e:8000::/33 maxlen: 33
2a02:c7c::/33 maxlen: 33
2a02:c7c:8000::/33 maxlen: 33
Validation: Failed, certificate revoked on Wed 17 May 2023 22:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:af:14:ff:ee:b7:15:a6:8a:06:7e:21:53:0f:f1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Apr 11 14:18:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9c52bd6fa30321cea02bef1b3a7a54df37694a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:72:39:c5:11:4d:1f:1e:27:67:a8:51:f1:03:
fb:17:84:96:38:8e:98:f3:bd:26:aa:ce:6d:c7:8b:
fc:40:07:cb:45:b6:ff:16:47:1d:6e:fd:bd:cc:fb:
e0:db:c6:31:0f:d7:84:03:60:90:e2:b6:32:54:d3:
ec:3c:30:d8:20:79:d5:1d:81:e8:a1:5f:8c:7d:f8:
f3:bd:3e:78:af:ec:e0:eb:c7:d3:9a:b5:33:28:4e:
2e:c8:62:a6:74:16:36:f9:38:11:9b:a1:20:f5:fa:
10:89:2d:b1:fd:5e:83:ee:85:94:bf:b9:9a:ae:35:
56:c5:2c:5a:86:dd:23:91:e3:45:8f:38:32:c7:a0:
cd:50:d7:64:a3:a4:75:03:36:70:e0:d5:40:12:b9:
6f:b4:e8:af:2c:99:20:1a:e9:97:dc:03:73:77:1c:
07:09:1b:e8:1c:ee:e2:70:5a:9a:d9:dc:0e:45:db:
5c:aa:cd:6e:61:e6:68:ff:62:e9:c1:0e:ae:94:bd:
d0:85:25:93:68:99:69:71:3c:25:a9:be:b9:93:a9:
d9:f6:0b:ad:ea:19:61:d9:f2:d2:4b:81:f1:3f:8a:
64:e9:62:13:73:ab:48:b8:d5:ec:87:f6:c6:5a:64:
11:5c:0a:41:d4:5a:ca:7c:7e:58:d1:a8:6d:a4:08:
96:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C5:2B:D6:FA:30:32:1C:EA:02:BE:F1:B3:A7:A5:4D:F3:76:94:A3
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/qcUr1vowMhzqAr7xs6elTfN2lKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.120.0.0/13
2.216.0.0/13
5.64.0.0/13
46.64.0.0/15
51.19.0.0/16
51.146.0.0/16
51.182.0.0/15
51.186.0.0/15
51.190.0.0/15
51.194.0.0/16
51.198.0.0/15
51.241.0.0/16
78.86.0.0/16
78.105.0.0/16
87.80.0.0/15
90.192.0.0/11
93.96.0.0-93.96.191.255
93.96.224.0/19
94.0.0.0/12
94.192.0.0/14
149.241.0.0/16
151.224.0.0/13
176.24.0.0/14
176.248.0.0/13
188.220.0.0/14
IPv6:
2a02:c78::/29
Signature Algorithm: sha256WithRSAEncryption
31:0a:b0:f2:be:c6:5a:68:0a:67:24:8c:0c:1b:6c:00:9a:0f:
de:03:d4:3f:a1:df:d3:6e:eb:30:c9:67:7b:34:ff:6c:a4:3a:
9d:83:08:6a:31:32:6a:d6:15:a0:9f:ee:a7:84:22:93:a7:12:
c3:fb:f8:2d:83:cf:6f:bb:b3:32:20:08:fa:2e:2e:2e:04:d3:
f5:7f:e2:23:f7:a5:49:50:4a:56:72:c2:e6:24:ba:a5:8b:5f:
3a:7c:21:19:2a:ba:c3:1c:92:95:2d:ba:21:84:4d:e2:59:54:
5f:66:59:a0:d9:ea:ea:c2:79:7d:25:04:cf:e1:86:83:74:76:
71:2f:3e:da:c9:2f:99:b4:6c:6a:92:e8:ea:85:56:ec:15:02:
e3:e7:74:81:a5:20:bd:b1:45:2e:ed:7a:43:4e:70:a5:4c:96:
86:ba:32:f3:e5:c2:77:60:8d:0b:36:7c:f8:5f:54:b6:c5:5b:
fe:08:87:1c:6c:a4:23:e9:23:b9:da:b0:4a:cf:df:d2:3c:3e:
f5:14:11:eb:4b:8b:fc:bf:95:09:6d:42:5d:fb:12:3e:70:1c:
8a:42:e0:40:52:ab:61:6d:84:54:98:8a:40:c9:82:e2:02:a9:
7c:70:be:9f:3e:2c:60:d0:28:d9:3d:d2:86:45:4c:7d:a1:95:
94:2c:01:f6
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgISAYdwrxT/7rcVpooGfiFTD/H9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MWQ0YTQzNzRkZjIyMmFjMzIzNWI5NjAyMjA2ZDk2YmYx
ZGFjODIwHhcNMjMwNDExMTQxODU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWM1MmJkNmZhMzAzMjFjZWEwMmJlZjFiM2E3YTU0ZGYzNzY5NGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3I5xRFNHx4nZ6hR8QP7F4SWOI6Y
870mqs5tx4v8QAfLRbb/Fkcdbv29zPvg28YxD9eEA2CQ4rYyVNPsPDDYIHnVHYHo
oV+MffjzvT54r+zg68fTmrUzKE4uyGKmdBY2+TgRm6Eg9foQiS2x/V6D7oWUv7ma
rjVWxSxaht0jkeNFjzgyx6DNUNdko6R1AzZw4NVAErlvtOivLJkgGumX3ANzdxwH
CRvoHO7icFqa2dwORdtcqs1uYeZo/2LpwQ6ulL3QhSWTaJlpcTwlqb65k6nZ9gut
6hlh2fLSS4HxP4pk6WITc6tIuNXsh/bGWmQRXApB1FrKfH5Y0ahtpAiWDwIDAQAB
o4ICnTCCApkwHQYDVR0OBBYEFKnFK9b6MDIc6gK+8bOnpU3zdpSjMB8GA1UdIwQY
MBaAFPcdSkN03yIqwyNblgIgbZa/HayCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NzM5ZGMtMTEzMi00ODM3LTliODUt
ZTlhYzJiMDAzMTZhLzEvcWNVcjF2b3dNaHpxQXI3eHM2ZWxUZk4ybEtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83NzM5ZGMtMTEzMi00ODM3LTliODUtZTlhYzJiMDAzMTZh
LzEvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGyBggrBgEFBQcBBwEB/wSBojCBnzCBjQQCAAEwgYYDAwMC
eAMDAwLYAwMDBUADAwEuQAMDADMTAwMAM5IDAwEztgMDATO6AwMBM74DAwAzwgMD
ATPGAwMAM/EDAwBOVgMDAE5pAwMBV1ADAwVawDALAwMFXWADBAZdYIADBAVdYOAD
AwReAAMDAl7AAwMAlfEDAwOX4AMDArAYAwMDsPgDAwK83DANBAIAAjAHAwUDKgIM
eDANBgkqhkiG9w0BAQsFAAOCAQEAMQqw8r7GWmgKZySMDBtsAJoP3gPUP6Hf027r
MMlnezT/bKQ6nYMIajEyatYVoJ/up4Qik6cSw/v4LYPPb7uzMiAI+i4uLgTT9X/i
I/elSVBKVnLC5iS6pYtfOnwhGSq6wxySlS26IYRN4llUX2ZZoNnq6sJ5fSUEz+GG
g3R2cS8+2skvmbRsapLo6oVW7BUC4+d0gaUgvbFFLu16Q05wpUyWhroy8+XCd2CN
CzZ8+F9UtsVb/giHHGykI+kjudqwSs/f0jw+9RQR60uL/L+VCW1CXfsSPnAcikLg
QFKrYW2EVJiKQMmC4gKpfHC+nz4sYNAo2T3ShkVMfaGVlCwB9g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:06 2024 by rpki-client on console-ams.rpki-client.org