Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/qf7N4RMjXyKkX-UfxY_UbwuH1nk.roa
File: qf7N4RMjXyKkX-UfxY_UbwuH1nk.roa (raw, json)
Hash identifier: OjBKuvMGCzN5RAxm/m+K+8VXxJbqI+J30k8IYJkgBg4=
Subject key identifier: A9:FE:CD:E1:13:23:5F:22:A4:5F:E5:1F:C5:8F:D4:6F:0B:87:D6:79
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 01856CCB09709BE44FD203BE2A08C8407675
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/qf7N4RMjXyKkX-UfxY_UbwuH1nk.roa
Signing time: Sun 01 Jan 2023 10:05:23 +0000
ROA not before: Sun 01 Jan 2023 10:05:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25054
IP address blocks: 81.90.192.0/20 maxlen: 20
185.94.36.0/22 maxlen: 22
212.101.32.0/19 maxlen: 19
130.193.96.0/21 maxlen: 21
2a02:1318::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 19 Oct 2023 13:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:09:70:9b:e4:4f:d2:03:be:2a:08:c8:40:76:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Jan 1 10:05:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9fecde113235f22a45fe51fc58fd46f0b87d679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:ce:af:cf:1d:46:1d:2e:1c:7c:c5:0f:37:
87:8f:00:4e:0b:26:c2:2f:e7:9a:94:7d:ee:0b:71:
8e:4d:f9:8d:c8:db:5e:68:31:62:23:8e:d8:a9:71:
8e:33:2b:1d:6e:4d:dc:71:81:9d:a3:05:69:9e:e3:
78:48:27:cb:00:47:f6:44:0d:44:ef:7c:af:48:8e:
8b:e0:32:ff:66:86:5d:93:e9:41:72:41:f6:cd:cd:
3a:b6:86:7d:78:52:b8:8a:c7:1e:e0:17:25:61:ba:
82:0e:9d:62:c9:cd:b2:61:18:5b:26:aa:57:8a:34:
9d:0e:52:d8:79:e7:32:39:e3:75:7b:fd:b6:10:dd:
e5:46:05:ee:ec:3e:2c:15:7b:06:4c:bc:0d:ef:8a:
82:cd:f3:aa:7f:3f:65:a6:64:30:36:81:70:18:86:
cf:1b:d8:e7:02:92:69:49:34:29:30:cf:82:3f:6f:
e6:9e:de:68:6c:6b:e1:68:42:cc:db:4d:fb:01:61:
11:86:66:96:73:d5:e7:f6:53:4d:dc:fe:31:f8:89:
9e:0b:96:90:63:dc:d5:37:c0:70:40:56:ad:10:33:
d3:97:2c:43:05:fd:1c:fe:08:1e:d3:c7:f8:94:43:
92:66:76:cf:14:68:02:d0:94:63:a1:b4:35:5a:34:
93:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FE:CD:E1:13:23:5F:22:A4:5F:E5:1F:C5:8F:D4:6F:0B:87:D6:79
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/qf7N4RMjXyKkX-UfxY_UbwuH1nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.192.0/20
130.193.96.0/21
185.94.36.0/22
212.101.32.0/19
IPv6:
2a02:1318::/32
Signature Algorithm: sha256WithRSAEncryption
53:dd:02:be:86:7a:7c:5c:35:e8:a5:9f:1d:e1:80:04:23:c3:
fd:9c:d6:7b:4f:49:76:b7:6f:03:3f:44:c4:3e:76:df:27:87:
19:62:23:98:68:4b:a7:72:60:33:4a:83:85:b1:7a:29:c3:bd:
87:a4:46:2c:9c:7a:29:d5:8f:bd:b0:58:45:e0:06:ab:13:61:
56:02:d4:7e:54:de:17:cc:88:b5:73:11:17:4a:05:75:4e:4c:
bd:16:8f:67:b5:d2:0d:54:b6:f4:bb:79:98:52:2f:6f:2b:20:
76:2d:fd:0e:d5:5e:9d:3d:f6:48:05:a3:a9:31:fb:7f:1e:f1:
b7:1c:ed:a6:cd:4f:8d:5d:9d:36:28:e5:0f:3b:de:96:97:04:
a4:e7:a8:54:9e:44:b9:e6:f5:01:0f:cf:d3:4f:60:15:9a:11:
53:d1:99:14:2e:ad:b4:0d:b8:37:93:a0:c6:88:51:1e:47:df:
20:ef:67:d0:7c:a9:9c:df:df:aa:de:e0:b1:14:12:4d:d7:14:
75:fd:65:84:6a:02:cd:8e:d5:df:04:af:e3:8f:51:75:2e:d7:
73:20:dd:b9:06:f7:65:f4:86:14:c6:76:72:51:be:7f:ff:cb:
53:2b:d0:1b:e3:fb:c4:27:03:0c:3c:59:91:6a:57:6c:28:22:
30:bd:51:ff
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYVsywlwm+RP0gO+KgjIQHZ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOWYxYTZlODRjMDI3N2VmY2I1NmQ5NDJiMGViNWU0NTY0
NzExMjkwHhcNMjMwMTAxMTAwNTIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWZlY2RlMTEzMjM1ZjIyYTQ1ZmU1MWZjNThmZDQ2ZjBiODdkNjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsPOr88dRh0uHHzFDzeHjwBOCybC
L+ealH3uC3GOTfmNyNteaDFiI47YqXGOMysdbk3ccYGdowVpnuN4SCfLAEf2RA1E
73yvSI6L4DL/ZoZdk+lBckH2zc06toZ9eFK4isce4BclYbqCDp1iyc2yYRhbJqpX
ijSdDlLYeecyOeN1e/22EN3lRgXu7D4sFXsGTLwN74qCzfOqfz9lpmQwNoFwGIbP
G9jnApJpSTQpMM+CP2/mnt5obGvhaELM2037AWERhmaWc9Xn9lNN3P4x+ImeC5aQ
Y9zVN8BwQFatEDPTlyxDBf0c/gge08f4lEOSZnbPFGgC0JRjobQ1WjSTZwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFKn+zeETI18ipF/lH8WP1G8Lh9Z5MB8GA1UdIwQY
MBaAFOOfGm6EwCd+/LVtlCsOteRWRxEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xNjBhNzctNzU2ZC00NDFhLTg2YzMt
MGU1MzkyNzU3ZjgyLzEvcWY3TjRSTWpYeUtrWC1VZnhZX1Vid3VIMW5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8xNjBhNzctNzU2ZC00NDFhLTg2YzMtMGU1MzkyNzU3Zjgy
LzEvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEUVrAAwQD
gsFgAwQCuV4kAwQF1GUgMA0EAgACMAcDBQAqAhMYMA0GCSqGSIb3DQEBCwUAA4IB
AQBT3QK+hnp8XDXopZ8d4YAEI8P9nNZ7T0l2t28DP0TEPnbfJ4cZYiOYaEuncmAz
SoOFsXopw72HpEYsnHop1Y+9sFhF4AarE2FWAtR+VN4XzIi1cxEXSgV1Tky9Fo9n
tdINVLb0u3mYUi9vKyB2Lf0O1V6dPfZIBaOpMft/HvG3HO2mzU+NXZ02KOUPO96W
lwSk56hUnkS55vUBD8/TT2AVmhFT0ZkULq20Dbg3k6DGiFEeR98g72fQfKmc39+q
3uCxFBJN1xR1/WWEagLNjtXfBK/jj1F1LtdzIN25Bvdl9IYUxnZyUb5//8tTK9Ab
4/vEJwMMPFmRaldsKCIwvVH/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:28 2024 by rpki-client on console-fra.rpki-client.org