Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/cqP4UCngt44CvT5Z9NDoKvBq-aw.roa
File: cqP4UCngt44CvT5Z9NDoKvBq-aw.roa (raw, json)
Hash identifier: DZ84yyc5eEeqd52k1RceUbEANcTRmgI+YPqKctauJSo=
Subject key identifier: 72:A3:F8:50:29:E0:B7:8E:02:BD:3E:59:F4:D0:E8:2A:F0:6A:F9:AC
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEB698429C69411CD5B469D36DFD98
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/cqP4UCngt44CvT5Z9NDoKvBq-aw.roa
Signing time: Sun 01 Jan 2023 06:04:44 +0000
ROA not before: Sun 01 Jan 2023 06:04:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31608
IP address blocks: 188.114.70.0/23 maxlen: 24
188.114.72.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:b6:98:42:9c:69:41:1c:d5:b4:69:d3:6d:fd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72a3f85029e0b78e02bd3e59f4d0e82af06af9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5b:ca:7c:ab:42:4f:b8:5a:b4:e4:d9:ab:48:
1f:5b:14:fa:84:4a:1a:d6:7a:a6:30:ff:af:2c:c1:
df:2f:75:f2:5f:2d:09:e1:1c:63:ac:23:72:b3:42:
3b:af:f3:56:cc:8a:94:f7:f9:be:6e:2f:f6:78:0e:
a7:cc:ca:bd:70:54:43:bb:4e:c4:c2:66:dc:2d:d7:
7c:21:2e:44:a1:06:ca:ca:60:7c:98:80:40:78:89:
59:ea:70:8b:f3:91:dc:fe:94:37:4c:58:7d:a8:82:
cf:be:3e:fc:c1:5e:f2:46:07:7c:df:d7:84:39:d2:
1e:0f:bd:53:61:b8:ff:1e:f3:77:eb:c9:39:88:45:
a8:5e:0a:47:c5:4d:b6:d6:9d:1a:d4:a3:9d:bf:ac:
df:e6:df:52:74:ef:9b:7b:79:26:35:08:93:63:79:
8c:eb:68:81:d7:79:c7:08:11:b4:96:37:d8:86:c7:
fb:0d:fe:ea:2e:88:5e:01:38:55:50:c8:91:2a:47:
29:32:da:af:3f:d2:1f:4c:80:9b:33:12:ba:99:53:
45:7c:95:6b:2c:7b:ce:cc:c1:4b:98:78:45:1a:3a:
60:8c:69:ee:06:60:15:7f:a6:43:08:9f:80:43:37:
cc:66:54:6a:31:e7:40:10:c2:af:2a:2d:97:90:5b:
5a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A3:F8:50:29:E0:B7:8E:02:BD:3E:59:F4:D0:E8:2A:F0:6A:F9:AC
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/cqP4UCngt44CvT5Z9NDoKvBq-aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.114.70.0-188.114.75.255
Signature Algorithm: sha256WithRSAEncryption
03:79:ee:8c:7e:0f:09:fe:04:54:79:d2:80:a8:15:31:8b:15:
22:73:f0:33:e7:80:91:78:8b:98:12:d5:bd:24:dc:0c:7b:83:
be:d5:f7:1c:d8:d1:71:bb:d9:a4:b2:e6:92:a3:28:cb:4a:35:
35:9f:4e:b5:92:57:da:98:5e:06:ff:6b:83:a9:95:f1:c6:33:
62:fe:ac:3f:29:ad:cf:48:89:b5:c2:13:8f:04:88:e6:e4:bc:
13:d8:65:af:e2:ba:9a:dd:b7:2b:a3:18:bf:0d:6d:da:d3:8f:
4f:e3:32:52:9e:aa:f0:5e:11:37:13:50:10:6e:20:ea:d9:c9:
67:b2:b4:64:44:2a:3d:28:90:d4:68:8e:9d:1d:cc:55:6e:2d:
c9:d4:2a:aa:a5:c0:56:fd:5d:12:ba:99:73:c1:9f:93:9c:f9:
89:d5:fe:6c:fb:5d:a4:89:79:5e:f7:85:39:de:97:03:31:99:
af:ec:0c:9d:fb:00:48:e6:6e:cc:30:9e:4e:ce:60:c5:6c:cd:
60:18:5a:7b:3b:78:b8:df:7b:ee:2f:a1:18:45:5b:70:0b:90:
9d:1b:f6:43:a7:11:9b:b3:a0:99:db:55:39:56:7a:ea:ef:86:
be:50:b2:98:9b:5c:e8:1a:19:77:0f:30:23:91:e0:5c:9f:65:
12:21:96:a6
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVr7raYQpxpQRzVtGnTbf2YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjMwMTAxMDYwNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmEzZjg1MDI5ZTBiNzhlMDJiZDNlNTlmNGQwZTgyYWYwNmFmOWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklvKfKtCT7hatOTZq0gfWxT6hEoa
1nqmMP+vLMHfL3XyXy0J4RxjrCNys0I7r/NWzIqU9/m+bi/2eA6nzMq9cFRDu07E
wmbcLdd8IS5EoQbKymB8mIBAeIlZ6nCL85Hc/pQ3TFh9qILPvj78wV7yRgd839eE
OdIeD71TYbj/HvN368k5iEWoXgpHxU221p0a1KOdv6zf5t9SdO+be3kmNQiTY3mM
62iB13nHCBG0ljfYhsf7Df7qLoheAThVUMiRKkcpMtqvP9IfTICbMxK6mVNFfJVr
LHvOzMFLmHhFGjpgjGnuBmAVf6ZDCJ+AQzfMZlRqMedAEMKvKi2XkFta0QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFHKj+FAp4LeOAr0+WfTQ6CrwavmsMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvY3FQNFVDbmd0NDRDdlQ1WjlORG9LdkJxLWF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAG8ckYD
BAK8ckgwDQYJKoZIhvcNAQELBQADggEBAAN57ox+Dwn+BFR50oCoFTGLFSJz8DPn
gJF4i5gS1b0k3Ax7g77V9xzY0XG72aSy5pKjKMtKNTWfTrWSV9qYXgb/a4OplfHG
M2L+rD8prc9IibXCE48EiObkvBPYZa/iuprdtyujGL8NbdrTj0/jMlKeqvBeETcT
UBBuIOrZyWeytGREKj0okNRojp0dzFVuLcnUKqqlwFb9XRK6mXPBn5Oc+YnV/mz7
XaSJeV73hTnelwMxma/sDJ37AEjmbswwnk7OYMVszWAYWns7eLjfe+4voRhFW3AL
kJ0b9kOnEZuzoJnbVTlWeurvhr5QspibXOgaGXcPMCOR4FyfZRIhlqY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org